Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa
File:                     05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa (raw, json)
Hash identifier:          n453ImIOMD4srUA33MbL2oV4N1dEuHk0RAcDbSn7+0E=
Subject key identifier:   38:84:26:A2:93:1D:E9:03:41:D1:31:24:33:C2:07:64:9C:F2:6C:B3
Certificate issuer:       /CN=9531f556-030e-49b4-a31b-60b469425432
Certificate serial:       010D0C9F43285845840DCD8FDABFFC0607A617C0
Authority key identifier: 4E:A2:50:27:DE:23:09:65:81:B1:7D:37:DE:80:5E:05:7C:08:BC:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     8075
IP address blocks:        2620:bc:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:cd:8f:da:bf:fc:06:07:a6:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9531f556-030e-49b4-a31b-60b469425432
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=48c8a92d-07fb-4be6-8c5e-bee289df1188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:1a:3c:bc:a0:43:5a:f7:ca:c5:32:dc:fa:
                    b8:e2:11:5e:af:5a:b0:a2:84:fd:82:1f:4d:ca:96:
                    f6:d5:9b:e3:7b:15:4a:05:05:e7:e0:1a:da:c3:60:
                    f9:0d:40:db:56:30:a3:d9:44:fa:dd:f6:16:b2:23:
                    ac:33:e9:e8:70:47:4f:77:7e:66:71:40:1e:5a:10:
                    1a:ce:e7:a8:98:a8:44:b4:f7:5d:19:02:30:71:e5:
                    91:23:88:7d:53:59:fc:b4:b5:d4:a0:2f:f2:7b:21:
                    00:81:71:68:b1:e5:cc:12:14:ab:d4:ba:b6:43:1b:
                    22:78:58:9a:e1:ee:33:a1:80:03:c1:cd:c8:a7:0b:
                    36:3e:fd:2b:6a:20:9c:30:d6:92:1d:be:06:c3:6a:
                    a5:0d:bf:5a:42:57:20:9e:3e:ef:3a:de:fa:4d:02:
                    7a:a5:fa:63:37:e1:43:77:8c:60:4c:ec:5c:22:02:
                    cd:a4:e9:4d:9c:78:09:f7:3b:7c:c9:88:9e:b1:88:
                    c4:01:f9:7d:a0:56:67:68:b9:b7:d2:9e:69:16:47:
                    4c:26:db:b1:4d:2e:4e:dd:50:d8:d8:bb:65:15:8a:
                    43:df:7b:06:8c:97:61:f4:79:17:a7:1e:4e:1a:45:
                    70:f8:bc:9b:e8:50:0e:9d:15:da:fc:1f:8d:97:8f:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:84:26:A2:93:1D:E9:03:41:D1:31:24:33:C2:07:64:9C:F2:6C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.crl

            X509v3 Authority Key Identifier:
                keyid:4E:A2:50:27:DE:23:09:65:81:B1:7D:37:DE:80:5E:05:7C:08:BC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bc:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5b:9f:d5:c6:cc:fa:7c:3c:96:e7:8a:07:3d:5a:3e:0f:92:
         b0:b4:20:f7:db:04:73:6e:fd:36:99:a2:0a:d1:6c:3f:49:56:
         78:02:72:e2:b6:a5:1b:a5:6c:85:f8:0c:e0:b4:31:18:ba:32:
         16:01:21:1b:3e:e1:d4:20:96:c6:5f:40:d7:52:e3:ed:5d:29:
         bb:a7:81:f6:75:71:c5:3e:87:77:8f:54:b1:ea:32:68:fb:42:
         13:89:ad:66:32:fe:28:76:66:b8:99:1a:32:8d:26:6c:8b:3c:
         54:59:a6:f4:ee:14:58:b8:ff:34:ae:eb:c6:43:9b:66:45:05:
         d7:88:1d:8c:21:85:5f:b2:06:41:d8:7b:7a:fc:ee:d0:ea:cb:
         91:bc:58:dc:1d:bd:dc:93:72:51:b0:77:77:1b:b1:3e:80:28:
         8c:4a:d9:c6:53:5f:dd:af:bb:65:1c:82:d7:02:10:b5:86:a1:
         dc:eb:7e:9c:60:f6:e3:2a:2e:13:5f:bb:f7:9d:ad:04:b3:11:
         96:d4:07:36:91:5d:0e:e5:08:20:27:a5:7d:5a:c6:cb:32:63:
         8b:58:aa:0c:4b:69:2c:30:72:f0:d1:1f:a3:a6:74:18:70:1f:
         fa:f2:f2:4c:84:c5:4e:6e:41:5a:47:e9:82:ea:c8:c5:11:c4:
         27:a9:d5:fa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWEDc2P2r/8BgemF8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTUzMWY1NTYtMDMwZS00OWI0LWEzMWItNjBiNDY5NDI1
NDMyMB4XDTI0MDQxMjAxMDAyNloXDTI0MDcxMTAxMDAyNlowLzEtMCsGA1UEAxMk
NDhjOGE5MmQtMDdmYi00YmU2LThjNWUtYmVlMjg5ZGYxMTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5AaPLygQ1r3ysUy3Pq44hFer1qwooT9gh9N
ypb21ZvjexVKBQXn4Braw2D5DUDbVjCj2UT63fYWsiOsM+nocEdPd35mcUAeWhAa
zueomKhEtPddGQIwceWRI4h9U1n8tLXUoC/yeyEAgXFoseXMEhSr1Lq2QxsieFia
4e4zoYADwc3Ipws2Pv0raiCcMNaSHb4Gw2qlDb9aQlcgnj7vOt76TQJ6pfpjN+FD
d4xgTOxcIgLNpOlNnHgJ9zt8yYiesYjEAfl9oFZnaLm30p5pFkdMJtuxTS5O3VDY
2LtlFYpD33sGjJdh9HkXpx5OGkVw+Lyb6FAOnRXa/B+Nl4+9GQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDiEJqKTHekDQdExJDPCB2Sc8myzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NTMx
ZjU1Ni0wMzBlLTQ5YjQtYTMxYi02MGI0Njk0MjU0MzIvMDVjNmQyMGUtYTJiZS0z
ZTg2LWFhYzctZDI0YzJhNTVlMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTUzMWY1NTYtMDMwZS00OWI0LWEz
MWItNjBiNDY5NDI1NDMyLzk1MzFmNTU2LTAzMGUtNDliNC1hMzFiLTYwYjQ2OTQy
NTQzMi5jcmwwHwYDVR0jBBgwFoAUTqJQJ94jCWWBsX033oBeBXwIvEswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NTMxZjU1Ni0wMzBlLTQ5YjQtYTMxYi02MGI0
Njk0MjU0MzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAvCAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAENbn9XGzPp8PJbnigc9Wj4PkrC0IPfbBHNu/TaZogrRbD9JVngC
cuK2pRulbIX4DOC0MRi6MhYBIRs+4dQglsZfQNdS4+1dKbungfZ1ccU+h3ePVLHq
Mmj7QhOJrWYy/ih2ZriZGjKNJmyLPFRZpvTuFFi4/zSu68ZDm2ZFBdeIHYwhhV+y
BkHYe3r87tDqy5G8WNwdvdyTclGwd3cbsT6AKIxK2cZTX92vu2UcgtcCELWGodzr
fpxg9uMqLhNfu/edrQSzEZbUBzaRXQ7lCCAnpX1axssyY4tYqgxLaSwwcvDRH6Om
dBhwH/ry8kyExU5uQVpH6YLqyMURxCep1fo=
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:44 2024 by rpki-client on console-fra.rpki-client.org