Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/552d64c1-58ba-3825-8bb4-1d0c0d6867d2.roa
File:                     552d64c1-58ba-3825-8bb4-1d0c0d6867d2.roa (raw, json)
Hash identifier:          itdaXFa0R6HLvj1qkvWaEtt2PticzEhIVxJ+KgyfW/Y=
Subject key identifier:   AE:79:E5:34:E0:BE:C8:E9:E1:A5:9A:3D:DA:FF:DD:80:77:C0:2F:2D
Certificate issuer:       /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial:       010D0C9F43285847AAC43C99F34FB659AEE81C40
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/552d64c1-58ba-3825-8bb4-1d0c0d6867d2.roa
Signing time:             Sat 26 Oct 2024 07:22:46 +0000
ROA not before:           Sat 26 Oct 2024 07:22:46 +0000
ROA not after:            Fri 24 Jan 2025 08:22:46 +0000
asID:                     897
IP address blocks:        2620:ab:a002::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:aa:c4:3c:99:f3:4f:b6:59:ae:e8:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
        Validity
            Not Before: Oct 26 07:22:46 2024 GMT
            Not After : Jan 24 08:22:46 2025 GMT
        Subject: CN=20501b1a-6ff9-4f84-beb7-508b8dd112a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:90:c8:fb:91:32:53:f5:09:58:db:94:30:5b:
                    2d:94:4c:e4:fd:80:c0:0f:ba:3f:3c:90:95:e8:b9:
                    35:f3:e2:e0:7a:6b:49:85:2a:5b:07:e8:a6:5a:4c:
                    ab:b9:33:5c:16:56:07:29:a0:23:b7:67:7f:a6:0b:
                    84:40:3f:31:d2:a8:ed:5d:20:5a:b6:78:e8:70:00:
                    0e:32:65:75:7a:a3:ee:32:6d:cc:30:00:f2:b5:bc:
                    f4:0b:f5:ae:8f:99:37:11:9a:f3:71:47:88:1d:11:
                    21:92:06:66:80:98:4d:1a:25:45:c6:6f:d1:cb:b7:
                    f8:7b:b1:37:47:5b:15:8a:f3:e2:4e:0e:f6:96:f2:
                    b0:8a:db:bf:ba:a7:a5:1f:29:cf:1c:59:33:3e:fc:
                    cc:9c:f7:2d:b9:c5:21:b3:72:0c:31:a2:64:e8:61:
                    bb:80:b1:3f:b5:0a:a4:ee:4b:ca:35:bd:4a:a4:fe:
                    d9:1b:ec:19:bf:7d:69:14:4a:3e:22:3c:cd:c9:9f:
                    7d:7c:08:43:74:7b:fd:10:1c:cb:82:32:58:64:3c:
                    fb:ce:2e:02:3b:ff:8a:4b:ef:b2:03:2c:a2:8c:9b:
                    50:93:5c:30:1d:93:21:d4:e4:32:34:b2:a9:56:1c:
                    ed:11:1a:23:01:40:07:96:fa:95:fc:08:38:40:a1:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:79:E5:34:E0:BE:C8:E9:E1:A5:9A:3D:DA:FF:DD:80:77:C0:2F:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/552d64c1-58ba-3825-8bb4-1d0c0d6867d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ab:a002::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1d:db:8b:fa:91:c1:4b:75:65:8c:ea:d3:4e:d5:4f:ec:39:
         e4:84:a8:11:1b:18:ff:6a:c4:19:c9:cb:4e:2b:cb:0d:06:bd:
         d8:9d:ab:5a:31:3c:3a:27:bf:2e:90:2f:83:4d:d9:5a:f0:8b:
         64:dc:f7:47:be:90:82:e7:0d:f5:d0:37:63:f6:be:b8:0e:77:
         9d:d3:53:e7:fd:32:b8:48:a7:16:e6:85:4b:68:b1:4d:f0:77:
         7f:1a:3e:6c:53:91:c4:4d:b4:98:00:4d:1d:58:6e:0b:5e:df:
         2b:81:52:f1:67:bf:a0:6f:4b:f1:f0:86:cb:d2:f3:54:86:bf:
         f7:aa:0f:06:ae:f2:0b:f1:ea:cb:7e:03:20:05:02:e4:5b:44:
         1c:19:83:1d:6f:a1:77:db:e4:82:84:82:04:f5:57:c3:38:9f:
         64:76:b6:a4:01:3a:6c:f8:ab:19:ad:b0:9c:8a:bc:28:d0:cf:
         f8:4f:83:98:cb:7e:fc:ab:cb:6f:05:06:36:70:5d:51:2d:6a:
         52:b2:77:cd:90:46:98:af:1b:d3:18:88:ee:14:b0:7f:21:51:
         35:d6:ea:2a:bb:14:31:e0:4a:d9:85:1d:a1:89:d5:41:bd:25:
         d7:8a:b9:00:1a:b6:5c:a8:50:37:b1:cf:64:8e:db:60:c1:c5:
         a6:d6:6d:06
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeqxDyZ80+2Wa7oHEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzliNmIyZmMtMzQyMi00NmU3LWI2MzctN2I4ZGNiODRi
ZmYxMB4XDTI0MTAyNjA3MjI0NloXDTI1MDEyNDA4MjI0NlowLzEtMCsGA1UEAxMk
MjA1MDFiMWEtNmZmOS00Zjg0LWJlYjctNTA4YjhkZDExMmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5DI+5EyU/UJWNuUMFstlEzk/YDAD7o/PJCV
6Lk18+LgemtJhSpbB+imWkyruTNcFlYHKaAjt2d/pguEQD8x0qjtXSBatnjocAAO
MmV1eqPuMm3MMADytbz0C/Wuj5k3EZrzcUeIHREhkgZmgJhNGiVFxm/Ry7f4e7E3
R1sVivPiTg72lvKwitu/uqelHynPHFkzPvzMnPctucUhs3IMMaJk6GG7gLE/tQqk
7kvKNb1KpP7ZG+wZv31pFEo+IjzNyZ99fAhDdHv9EBzLgjJYZDz7zi4CO/+KS++y
AyyijJtQk1wwHZMh1OQyNLKpVhztERojAUAHlvqV/Ag4QKGb9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK555TTgvsjp4aWaPdr/3YB3wC8tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zOWI2
YjJmYy0zNDIyLTQ2ZTctYjYzNy03YjhkY2I4NGJmZjEvNTUyZDY0YzEtNThiYS0z
ODI1LThiYjQtMWQwYzBkNjg2N2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzliNmIyZmMtMzQyMi00NmU3LWI2
MzctN2I4ZGNiODRiZmYxLzM5YjZiMmZjLTM0MjItNDZlNy1iNjM3LTdiOGRjYjg0
YmZmMS5jcmwwHwYDVR0jBBgwFoAU9Xm1K1wSfAvIzQB1QiwV/G+mN3MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zOWI2YjJmYy0zNDIyLTQ2ZTctYjYzNy03Yjhk
Y2I4NGJmZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAq6AC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIId24v6kcFLdWWM6tNO1U/sOeSEqBEbGP9qxBnJy04ryw0Gvdid
q1oxPDonvy6QL4NN2Vrwi2Tc90e+kILnDfXQN2P2vrgOd53TU+f9MrhIpxbmhUto
sU3wd38aPmxTkcRNtJgATR1Ybgte3yuBUvFnv6BvS/HwhsvS81SGv/eqDwau8gvx
6st+AyAFAuRbRBwZgx1voXfb5IKEggT1V8M4n2R2tqQBOmz4qxmtsJyKvCjQz/hP
g5jLfvyry28FBjZwXVEtalKyd82QRpivG9MYiO4UsH8hUTXW6iq7FDHgStmFHaGJ
1UG9JdeKuQAatlyoUDexz2SO22DBxabWbQY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:30 2024 by rpki-client on console-ams.rpki-client.org