Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/6ebe9dfd-2c14-3c2b-9f43-1cd4f268b11b.roa
File:                     6ebe9dfd-2c14-3c2b-9f43-1cd4f268b11b.roa (raw, json)
Hash identifier:          TVRt8bfKGWLbEOVTsPVqV0uVZs/CoQ6s+UER/6N+WTI=
Subject key identifier:   3E:16:A2:7F:23:AC:23:12:EB:A8:CA:25:E0:34:D7:AF:F0:0D:BC:4A
Certificate issuer:       /CN=62f9290e-905b-4384-a03f-fbec24a43858
Certificate serial:       010D0C9F432858453E42A9CEF47AB12B2835CC60
Authority key identifier: DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/6ebe9dfd-2c14-3c2b-9f43-1cd4f268b11b.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     683
IP address blocks:        2620:0:dc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:a9:ce:f4:7a:b1:2b:28:35:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f9290e-905b-4384-a03f-fbec24a43858
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=78ced06b-dd05-4c5a-a0d7-c3a3f502a3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f4:9f:3e:3e:d8:2e:14:76:84:ef:06:75:ab:
                    40:1c:40:dd:03:6e:85:82:59:89:44:f1:a2:37:c7:
                    54:57:5d:37:a8:f8:55:18:cf:98:c1:75:1e:85:f2:
                    e9:8c:ec:e3:cc:76:1e:e3:91:9a:50:b1:56:7b:de:
                    cd:76:a4:14:c4:e2:63:5e:d4:db:bf:7e:4b:7a:e4:
                    1c:b4:d1:70:e3:01:67:e0:88:b9:b4:b4:35:02:0b:
                    12:12:ab:14:3e:e3:6d:7f:96:7c:19:44:9e:6f:d6:
                    2d:39:cb:bb:f5:2c:1a:8c:0c:86:3f:6a:f6:11:37:
                    cb:ef:03:dd:ac:dc:1d:e0:00:01:48:08:f9:cc:12:
                    98:fd:8a:bd:f9:f0:6f:ac:62:8c:0a:e9:78:0f:e7:
                    2c:dc:cb:8f:c7:c8:c7:27:4f:53:f6:51:4e:d8:70:
                    38:2c:00:02:a1:69:74:c5:8f:74:90:e5:e0:a5:8b:
                    68:1a:36:13:9c:7e:de:4e:42:d3:ad:76:23:93:0d:
                    72:b7:14:91:83:05:3a:f1:ed:39:7b:a8:f9:d1:7d:
                    d9:6c:e2:10:c2:05:79:1a:f5:b8:20:0e:17:c8:25:
                    eb:a6:fd:5d:d2:87:85:4a:2c:a3:c0:e9:0c:c6:18:
                    06:26:e2:d0:32:b2:e0:a4:53:e2:11:42:73:98:7d:
                    60:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:16:A2:7F:23:AC:23:12:EB:A8:CA:25:E0:34:D7:AF:F0:0D:BC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/6ebe9dfd-2c14-3c2b-9f43-1cd4f268b11b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl

            X509v3 Authority Key Identifier:
                keyid:DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:dc0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a3:6d:4e:3e:e6:7a:cc:b9:78:49:88:27:17:2e:f8:40:09:
         59:6d:bc:5d:40:48:ff:8a:6f:23:dd:65:c6:f1:bb:6e:17:40:
         89:41:da:6a:62:69:af:56:bb:d1:9e:63:52:3c:50:4d:12:20:
         b1:1b:98:cf:3d:51:f0:b0:a7:ca:d7:b3:95:7c:48:99:13:98:
         aa:81:1b:03:f8:2c:f5:64:12:87:6a:9a:97:9c:52:96:31:6b:
         71:71:b3:56:f6:ef:dd:8c:d4:6a:29:aa:f4:d4:69:ee:fa:e1:
         b3:75:eb:a7:6e:7b:2c:f7:3a:a3:d2:1c:9a:27:b3:19:7c:b9:
         27:05:03:49:75:f6:fe:2c:ab:c0:d9:89:28:b5:a9:c2:59:31:
         f8:21:af:bb:d9:8b:0b:97:c8:da:7f:ea:05:ef:fa:78:7a:fc:
         05:44:7a:d3:97:8c:90:ac:e1:81:a0:58:7a:07:33:c2:a1:a6:
         b8:ab:a4:fa:49:35:dd:aa:90:1d:a2:d5:f9:86:9d:a2:bf:0f:
         1b:79:bc:16:e7:b6:45:2d:f8:bf:ee:dc:e1:6e:0b:0a:64:3b:
         60:c9:0c:e8:d7:a0:60:ad:08:1b:78:d8:99:22:5f:16:58:ac:
         83:41:7e:1b:5c:d5:d3:cd:46:de:40:bb:ca:0e:75:72:35:08:
         25:08:c6:3a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEU+QqnO9HqxKyg1zGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjJmOTI5MGUtOTA1Yi00Mzg0LWEwM2YtZmJlYzI0YTQz
ODU4MB4XDTI0MDMxODAxMDAyNVoXDTI0MDYxNjAxMDAyNVowLzEtMCsGA1UEAxMk
NzhjZWQwNmItZGQwNS00YzVhLWEwZDctYzNhM2Y1MDJhM2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfSfPj7YLhR2hO8GdatAHEDdA26FglmJRPGi
N8dUV103qPhVGM+YwXUehfLpjOzjzHYe45GaULFWe97NdqQUxOJjXtTbv35LeuQc
tNFw4wFn4Ii5tLQ1AgsSEqsUPuNtf5Z8GUSeb9YtOcu79SwajAyGP2r2ETfL7wPd
rNwd4AABSAj5zBKY/Yq9+fBvrGKMCul4D+cs3MuPx8jHJ09T9lFO2HA4LAACoWl0
xY90kOXgpYtoGjYTnH7eTkLTrXYjkw1ytxSRgwU68e05e6j50X3ZbOIQwgV5GvW4
IA4XyCXrpv1d0oeFSiyjwOkMxhgGJuLQMrLgpFPiEUJzmH1g4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD4Won8jrCMS66jKJeA016/wDbxKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MmY5
MjkwZS05MDViLTQzODQtYTAzZi1mYmVjMjRhNDM4NTgvNmViZTlkZmQtMmMxNC0z
YzJiLTlmNDMtMWNkNGYyNjhiMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjJmOTI5MGUtOTA1Yi00Mzg0LWEw
M2YtZmJlYzI0YTQzODU4LzYyZjkyOTBlLTkwNWItNDM4NC1hMDNmLWZiZWMyNGE0
Mzg1OC5jcmwwHwYDVR0jBBgwFoAU3KRHHf5OfHHIQDtzYK8GU+EkT98wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82MmY5MjkwZS05MDViLTQzODQtYTAzZi1mYmVj
MjRhNDM4NTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAA3A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEijbU4+5nrMuXhJiCcXLvhACVltvF1ASP+KbyPdZcbxu24XQIlB
2mpiaa9Wu9GeY1I8UE0SILEbmM89UfCwp8rXs5V8SJkTmKqBGwP4LPVkEodqmpec
UpYxa3Fxs1b2792M1GopqvTUae764bN166dueyz3OqPSHJonsxl8uScFA0l19v4s
q8DZiSi1qcJZMfghr7vZiwuXyNp/6gXv+nh6/AVEetOXjJCs4YGgWHoHM8Khprir
pPpJNd2qkB2i1fmGnaK/Dxt5vBbntkUt+L/u3OFuCwpkO2DJDOjXoGCtCBt42Jki
XxZYrINBfhtc1dPNRt5Au8oOdXI1CCUIxjo=
-----END CERTIFICATE-----
Generated at Mon Jun 3 21:55:08 2024 by rpki-client on console-fra.rpki-client.org