Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/df598e26-10ec-3155-9d2d-35a5a76f7e84.roa
File:                     df598e26-10ec-3155-9d2d-35a5a76f7e84.roa (raw, json)
Hash identifier:          QpjeX5a+Td8r57fdV2LJaAkN+AMDm5CxFAqXG9ij0G4=
Subject key identifier:   DE:D3:18:5E:70:4B:AD:51:F5:E5:4F:16:35:A2:70:C7:F6:3D:09:05
Certificate issuer:       /CN=4c52ab04-c13c-4ddd-a3df-fcbbbb795104
Certificate serial:       010D0C9F43285845777DCE2CD6867638F48EFE80
Authority key identifier: 51:96:56:40:5F:E7:45:16:18:10:8F:9B:76:64:A0:6A:44:69:3A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/df598e26-10ec-3155-9d2d-35a5a76f7e84.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     3152
IP address blocks:        2620:6a::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:ce:2c:d6:86:76:38:f4:8e:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c52ab04-c13c-4ddd-a3df-fcbbbb795104
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=2639f011-cc1d-4e89-8344-59b8b4766877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:31:a2:fc:45:e3:f8:a5:7f:34:a1:0f:ed:
                    07:e5:3c:f3:62:0e:c6:af:2b:a7:a0:e9:24:39:fa:
                    9f:13:88:2a:f2:a2:aa:6f:0c:5f:8b:c5:22:74:a2:
                    b8:2d:dc:8b:f5:f4:da:2a:e1:04:d0:f1:db:13:98:
                    3f:00:d5:3b:64:a4:74:2c:7b:a9:23:77:df:19:78:
                    11:c5:d0:15:34:34:36:da:d7:9f:20:14:1e:af:e6:
                    27:85:5f:91:55:bd:48:be:7f:bc:8a:74:a2:b6:7e:
                    b3:3b:a1:61:a3:cd:9b:93:46:7f:f5:d4:12:6a:09:
                    42:fa:3a:16:68:da:9f:eb:d1:45:bb:51:70:a1:53:
                    02:21:8f:ef:f2:dc:20:19:79:e3:1e:1d:2d:1f:70:
                    83:fc:08:45:2a:a2:33:1d:56:eb:94:fe:0a:19:6a:
                    bd:97:9b:24:c7:3d:64:a0:79:86:77:cb:1e:f3:d6:
                    57:23:cd:a6:3d:26:6b:89:5f:88:1e:62:0c:9a:0f:
                    c1:19:1a:ef:fa:a6:b7:ae:26:5e:0c:4d:14:14:25:
                    95:22:d2:fe:94:01:54:16:a7:2d:a3:db:9a:24:f2:
                    7a:a0:2b:d2:ca:af:ad:5f:c6:c4:cf:a7:06:b2:1c:
                    cd:48:42:27:62:4c:8b:42:df:e0:96:89:5b:05:01:
                    d8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D3:18:5E:70:4B:AD:51:F5:E5:4F:16:35:A2:70:C7:F6:3D:09:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/df598e26-10ec-3155-9d2d-35a5a76f7e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.crl

            X509v3 Authority Key Identifier:
                keyid:51:96:56:40:5F:E7:45:16:18:10:8F:9B:76:64:A0:6A:44:69:3A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6a::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:37:81:c7:25:c3:d2:fc:ff:14:b1:b4:ab:a4:b0:d3:32:55:
         f0:68:ad:87:0b:00:ec:c9:01:7a:a9:a0:43:2b:a4:d7:e4:f4:
         21:d7:9f:c5:69:5d:11:e1:c3:05:d4:e5:2d:9f:02:60:09:80:
         0e:cb:9d:44:8a:84:24:f2:b4:da:5a:78:ad:40:38:d2:44:62:
         d7:d9:80:46:40:d2:32:28:c5:c6:fc:be:50:4c:33:5c:ff:92:
         b4:0a:38:2f:9f:f8:d9:1d:40:3b:7c:d4:99:a4:9e:0b:03:c8:
         56:eb:70:54:40:d4:ab:29:c9:e1:ef:3d:d9:0d:a4:f2:34:2c:
         0d:07:1d:56:04:de:39:49:c3:e5:cb:69:5a:5e:12:91:1c:7a:
         09:b7:2f:d1:9c:a9:04:c0:16:96:37:c9:98:7f:60:a9:df:da:
         a8:4b:c5:e2:be:7c:e3:bb:88:fd:21:1e:8d:1c:a9:76:86:d7:
         55:51:d0:f8:13:ca:a3:a3:82:61:fe:10:3a:ea:27:a3:2a:72:
         16:f7:21:37:70:27:75:01:5f:34:e8:0e:22:5d:de:d5:a8:5f:
         8b:6f:ec:fe:37:33:7f:cb:68:bd:78:1a:8c:af:9f:6f:63:9f:
         3b:4b:dc:3e:d1:14:29:9c:ed:8f:6d:28:4f:75:98:5c:c2:47:
         f6:7c:a0:bb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV3fc4s1oZ2OPSO/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM1MmFiMDQtYzEzYy00ZGRkLWEzZGYtZmNiYmJiNzk1
MTA0MB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
MjYzOWYwMTEtY2MxZC00ZTg5LTgzNDQtNTliOGI0NzY2ODc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAAxovxF4/ilfzShD+0H5TzzYg7GryunoOkk
OfqfE4gq8qKqbwxfi8UidKK4LdyL9fTaKuEE0PHbE5g/ANU7ZKR0LHupI3ffGXgR
xdAVNDQ22tefIBQer+YnhV+RVb1Ivn+8inSitn6zO6Fho82bk0Z/9dQSaglC+joW
aNqf69FFu1FwoVMCIY/v8twgGXnjHh0tH3CD/AhFKqIzHVbrlP4KGWq9l5skxz1k
oHmGd8se89ZXI82mPSZriV+IHmIMmg/BGRrv+qa3riZeDE0UFCWVItL+lAFUFqct
o9uaJPJ6oCvSyq+tX8bEz6cGshzNSEInYkyLQt/glolbBQHYAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN7TGF5wS61R9eVPFjWicMf2PQkFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzUy
YWIwNC1jMTNjLTRkZGQtYTNkZi1mY2JiYmI3OTUxMDQvZGY1OThlMjYtMTBlYy0z
MTU1LTlkMmQtMzVhNWE3NmY3ZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGM1MmFiMDQtYzEzYy00ZGRkLWEz
ZGYtZmNiYmJiNzk1MTA0LzRjNTJhYjA0LWMxM2MtNGRkZC1hM2RmLWZjYmJiYjc5
NTEwNC5jcmwwHwYDVR0jBBgwFoAUUZZWQF/nRRYYEI+bdmSgakRpOrQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzUyYWIwNC1jMTNjLTRkZGQtYTNkZi1mY2Ji
YmI3OTUxMDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAagAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALs3gcclw9L8/xSxtKuksNMyVfBorYcLAOzJAXqpoEMrpNfk9CHX
n8VpXRHhwwXU5S2fAmAJgA7LnUSKhCTytNpaeK1AONJEYtfZgEZA0jIoxcb8vlBM
M1z/krQKOC+f+NkdQDt81JmkngsDyFbrcFRA1KspyeHvPdkNpPI0LA0HHVYE3jlJ
w+XLaVpeEpEcegm3L9GcqQTAFpY3yZh/YKnf2qhLxeK+fOO7iP0hHo0cqXaG11VR
0PgTyqOjgmH+EDrqJ6Mqchb3ITdwJ3UBXzToDiJd3tWoX4tv7P43M3/LaL14Goyv
n29jnztL3D7RFCmc7Y9tKE91mFzCR/Z8oLs=
-----END CERTIFICATE-----
Generated at Sun Jun 2 18:01:12 2024 by rpki-client on console-fra.rpki-client.org