Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/2455ae16-e22c-38fe-8c06-719fb9bee946.roa
File:                     2455ae16-e22c-38fe-8c06-719fb9bee946.roa (raw, json)
Hash identifier:          t82TEsZ6kX64DOkovy0n8j+zDBxoTfmqa+Ihy/mKrII=
Subject key identifier:   96:0F:07:C1:BD:7A:0A:89:49:29:BF:E1:3F:A6:AE:5C:E3:9E:E8:06
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F43285847D0223CF3F36356CB585D9B80
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/2455ae16-e22c-38fe-8c06-719fb9bee946.roa
Signing time:             Fri 08 Nov 2024 16:37:04 +0000
ROA not before:           Fri 08 Nov 2024 16:37:04 +0000
ROA not after:            Thu 06 Feb 2025 16:37:04 +0000
asID:                     49
IP address blocks:        2610:20:6000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d0:22:3c:f3:f3:63:56:cb:58:5d:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Nov  8 16:37:04 2024 GMT
            Not After : Feb  6 16:37:04 2025 GMT
        Subject: CN=d52268b0-9319-43a7-8d42-00624659896e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:51:8b:12:e7:3d:4b:db:ff:87:40:51:b8:
                    aa:89:7d:e3:da:4a:ae:6b:62:a9:e7:1c:06:48:5b:
                    bc:f8:59:43:f8:63:d0:d7:6b:53:9a:44:30:f4:f6:
                    f2:4c:ee:c0:30:87:ed:33:22:24:85:cd:09:0e:a9:
                    98:60:aa:8b:37:2d:3c:0a:59:e6:ba:cb:df:77:8a:
                    6b:68:fc:19:43:05:89:1f:9c:52:ed:da:67:a5:0d:
                    c6:b8:4a:60:e2:67:a0:c0:26:44:2e:35:70:ca:4b:
                    0f:24:41:55:29:ec:f4:d1:df:62:72:85:cc:ab:70:
                    49:dc:96:d3:2b:f7:90:a7:98:1e:45:af:d9:a4:d9:
                    d4:24:e2:7b:4e:8a:57:00:92:03:ef:68:0e:8f:27:
                    ae:62:80:7b:96:2d:a8:0d:e6:f1:04:25:ed:47:e6:
                    95:8a:18:b8:6d:d1:2c:47:f4:27:90:9b:f3:d1:73:
                    6d:54:1c:25:1d:19:f7:16:81:de:0f:e3:69:ad:f5:
                    e8:2e:2b:b2:7e:7a:5c:b2:c9:38:a2:f1:f8:4f:70:
                    8f:56:7d:91:ab:ed:3f:46:1a:ba:e2:93:f7:87:76:
                    bd:58:b2:bc:13:46:f5:f6:0a:dd:66:b0:dd:8a:b9:
                    73:ce:3d:b7:e9:f5:06:3a:f9:02:2e:4c:43:24:58:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0F:07:C1:BD:7A:0A:89:49:29:BF:E1:3F:A6:AE:5C:E3:9E:E8:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/2455ae16-e22c-38fe-8c06-719fb9bee946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6000::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:72:7c:ae:91:9b:54:c5:80:75:1e:4b:4a:0a:de:59:24:8c:
         34:c1:e3:ed:4d:7f:63:ee:e7:b1:70:b2:ac:62:6a:e4:55:71:
         b1:f7:55:38:64:ed:d8:d8:3a:eb:03:c2:ba:77:6d:45:b0:90:
         f1:ea:87:74:be:c9:96:0e:0d:52:4c:8a:b3:4f:ad:d0:37:49:
         c8:30:81:d7:a6:35:fa:46:5a:f8:98:78:13:f5:a2:a5:a8:5e:
         14:ac:b6:c8:b6:81:51:43:95:db:f1:b7:0a:45:ba:70:04:8a:
         dd:01:e9:c6:31:b5:8b:7d:1d:b0:cb:af:4a:bb:f6:cd:99:ec:
         22:5d:26:17:d9:28:41:06:7a:fb:1a:ff:5a:2f:8b:35:17:3b:
         d2:f2:3a:f2:0b:d3:bf:0b:f2:58:b0:c1:99:24:a5:3e:61:4c:
         41:ab:a6:40:4a:aa:1c:f7:c0:b7:a6:9f:d9:80:ef:09:c1:8c:
         ae:e5:84:63:cf:dd:ab:64:71:58:31:5d:f8:e9:96:97:7e:a5:
         53:8a:27:60:7f:25:ce:0d:77:61:b8:5a:e4:46:33:1a:8a:bb:
         86:90:67:37:7f:09:36:66:5d:e7:96:00:c0:0d:d7:44:fc:6a:
         ea:24:2c:1b:87:cc:5e:cc:b8:bb:51:fe:0b:82:e2:67:9c:bb:
         ac:f5:44:49
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfQIjzz82NWy1hdm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAyMWM0M2YtYjc4YS00OTZmLWE4Y2MtODE0YWJjMTFh
N2U5MB4XDTI0MTEwODE2MzcwNFoXDTI1MDIwNjE2MzcwNFowLzEtMCsGA1UEAxMk
ZDUyMjY4YjAtOTMxOS00M2E3LThkNDItMDA2MjQ2NTk4OTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHBRixLnPUvb/4dAUbiqiX3j2kqua2Kp5xwG
SFu8+FlD+GPQ12tTmkQw9PbyTO7AMIftMyIkhc0JDqmYYKqLNy08Clnmusvfd4pr
aPwZQwWJH5xS7dpnpQ3GuEpg4megwCZELjVwyksPJEFVKez00d9icoXMq3BJ3JbT
K/eQp5geRa/ZpNnUJOJ7TopXAJID72gOjyeuYoB7li2oDebxBCXtR+aVihi4bdEs
R/QnkJvz0XNtVBwlHRn3FoHeD+NprfXoLiuyfnpcssk4ovH4T3CPVn2Rq+0/Rhq6
4pP3h3a9WLK8E0b19grdZrDdirlzzj236fUGOvkCLkxDJFj+5wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJYPB8G9egqJSSm/4T+mrlzjnugGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MDIx
YzQzZi1iNzhhLTQ5NmYtYThjYy04MTRhYmMxMWE3ZTkvMjQ1NWFlMTYtZTIyYy0z
OGZlLThjMDYtNzE5ZmI5YmVlOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDAyMWM0M2YtYjc4YS00OTZmLWE4
Y2MtODE0YWJjMTFhN2U5LzQwMjFjNDNmLWI3OGEtNDk2Zi1hOGNjLTgxNGFiYzEx
YTdlOS5jcmwwHwYDVR0jBBgwFoAUGc1MW2xbN6s15QYAo+MXri+DU1wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MDIxYzQzZi1iNzhhLTQ5NmYtYThjYy04MTRh
YmMxMWE3ZTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJhAAIGAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQXJ8rpGbVMWAdR5LSgreWSSMNMHj7U1/Y+7nsXCyrGJq5FVxsfdV
OGTt2Ng66wPCundtRbCQ8eqHdL7Jlg4NUkyKs0+t0DdJyDCB16Y1+kZa+Jh4E/Wi
paheFKy2yLaBUUOV2/G3CkW6cASK3QHpxjG1i30dsMuvSrv2zZnsIl0mF9koQQZ6
+xr/Wi+LNRc70vI68gvTvwvyWLDBmSSlPmFMQaumQEqqHPfAt6af2YDvCcGMruWE
Y8/dq2RxWDFd+OmWl36lU4onYH8lzg13Ybha5EYzGoq7hpBnN38JNmZd55YAwA3X
RPxq6iQsG4fMXsy4u1H+C4LiZ5y7rPVESQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:28 2024 by rpki-client on console-fra.rpki-client.org