Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
File:                     b9fed38b-7833-339a-a34b-0e0e40f943aa.roa (raw, json)
Hash identifier:          rqycaoqe5Rt7zmcnot1lQkXnxYNQawFsYxqgXbqS0wQ=
Subject key identifier:   DE:F6:14:97:9F:E2:24:27:84:B0:C6:6A:93:3E:96:33:BD:7E:FB:28
Certificate issuer:       /CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
Certificate serial:       010D0C9F43285847A5D6A05EC4BE026F0D487980
Authority key identifier: 16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     32726
IP address blocks:        2620:12f:2000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a0:5e:c4:be:02:6f:0d:48:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=1b5ec0d8-0875-43b4-b40b-935bfca367fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:33:1e:67:b5:af:84:38:b0:57:74:0e:0d:
                    34:f9:65:4a:91:c3:1b:7b:5d:88:c3:f9:8d:da:32:
                    f6:5f:28:93:c8:71:68:01:dd:71:c4:f6:64:74:89:
                    65:a5:36:58:c2:d8:c5:49:fa:55:0b:bd:f7:dd:84:
                    b4:91:45:d8:66:e4:4d:a0:c8:93:b2:98:46:87:95:
                    23:eb:73:4b:cf:2b:cd:16:0b:6d:8d:c9:44:40:2c:
                    1f:08:4a:12:e0:a6:7f:bf:9d:f9:2a:a4:91:e9:8c:
                    f9:7a:bc:60:76:e2:8f:d8:df:86:5a:d4:0d:15:00:
                    7b:2d:3d:c9:88:8d:4e:6c:1c:61:85:ed:87:d8:ad:
                    03:3e:87:b3:85:10:5c:e2:72:a2:b0:31:bf:2c:5e:
                    ba:f3:ca:e9:c1:31:23:0b:e3:b2:3a:a4:4a:5e:68:
                    12:ab:14:1d:da:e6:52:ba:3d:f5:02:24:91:bf:c6:
                    31:50:f5:4b:96:30:ff:54:0a:f2:69:1a:7c:55:95:
                    83:4f:49:8c:07:0c:4e:68:d7:a8:71:f6:0d:4b:e9:
                    c0:7a:79:cb:d1:6e:bd:6e:7d:d7:e7:f4:9b:7e:0f:
                    1a:f0:db:1d:00:77:93:e5:fe:8b:d9:28:66:a3:12:
                    eb:dd:9a:ee:cf:5a:da:57:7c:e4:ed:65:87:7d:8c:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F6:14:97:9F:E2:24:27:84:B0:C6:6A:93:3E:96:33:BD:7E:FB:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl

            X509v3 Authority Key Identifier:
                keyid:16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12f:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:5c:fc:e3:78:32:6d:1a:e4:1d:8e:fb:5f:99:4c:19:12:cd:
         a3:1a:06:c5:c5:ec:8f:d7:cf:da:f9:c8:db:94:bb:7e:3c:99:
         e9:19:1f:c6:bc:fc:b7:e4:2c:68:8f:d8:6a:5e:88:8e:2d:b7:
         1c:2b:45:68:a0:f1:3d:7b:fe:99:19:b9:b9:50:fd:f6:2a:1d:
         7f:1a:60:6e:df:80:1a:7d:0c:6f:de:d6:87:02:a6:d6:13:1b:
         95:98:31:69:88:7b:6d:54:ac:93:9b:46:a2:40:48:82:2d:f1:
         e0:34:90:cd:f2:ad:3b:d3:48:e8:fa:44:88:41:dc:ac:a3:db:
         bd:31:43:ac:0b:c3:b0:0a:b6:e2:cf:04:78:15:c2:f1:bb:a4:
         72:da:fa:73:89:ef:00:58:33:86:33:5b:7b:49:a7:2c:a3:7a:
         aa:ea:9f:fc:ff:e2:36:a5:9e:e7:61:08:58:50:1f:1f:cd:b9:
         c7:73:d2:71:4f:cb:ca:26:45:06:d0:70:8f:d7:d4:f6:b4:69:
         e8:ce:5a:ac:e2:56:7f:45:38:5b:1b:6e:b0:81:83:38:93:c4:
         8e:f8:df:9e:5d:23:18:3e:b5:13:60:8e:17:e6:d0:37:34:64:
         7c:ee:55:70:69:13:46:a6:91:00:d3:15:57:b2:66:13:ae:8d:
         2a:eb:96:07
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEel1qBexL4Cbw1IeYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzI0NWNkYmYtOTdkNy00Mzc2LTlkOGQtMjk4Y2RhNWQz
ODU0MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
MWI1ZWMwZDgtMDg3NS00M2I0LWI0MGItOTM1YmZjYTM2N2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvszHme1r4Q4sFd0Dg00+WVKkcMbe12Iw/mN
2jL2XyiTyHFoAd1xxPZkdIllpTZYwtjFSfpVC7333YS0kUXYZuRNoMiTsphGh5Uj
63NLzyvNFgttjclEQCwfCEoS4KZ/v535KqSR6Yz5erxgduKP2N+GWtQNFQB7LT3J
iI1ObBxhhe2H2K0DPoezhRBc4nKisDG/LF6688rpwTEjC+OyOqRKXmgSqxQd2uZS
uj31AiSRv8YxUPVLljD/VAryaRp8VZWDT0mMBwxOaNeocfYNS+nAennL0W69bn3X
5/Sbfg8a8NsdAHeT5f6L2ShmoxLr3Zruz1raV3zk7WWHfYz7dwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFN72FJef4iQnhLDGapM+ljO9fvsoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MjQ1
Y2RiZi05N2Q3LTQzNzYtOWQ4ZC0yOThjZGE1ZDM4NTQvYjlmZWQzOGItNzgzMy0z
MzlhLWEzNGItMGUwZTQwZjk0M2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzI0NWNkYmYtOTdkNy00Mzc2LTlk
OGQtMjk4Y2RhNWQzODU0LzcyNDVjZGJmLTk3ZDctNDM3Ni05ZDhkLTI5OGNkYTVk
Mzg1NC5jcmwwHwYDVR0jBBgwFoAUFuGCsE5FDCqe3Q3wqqwGKD7Zlz8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MjQ1Y2RiZi05N2Q3LTQzNzYtOWQ4ZC0yOThj
ZGE1ZDM4NTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABLyAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAolz843gybRrkHY77X5lMGRLNoxoGxcXsj9fP2vnI25S7fjyZ6Rkf
xrz8t+QsaI/Yal6Iji23HCtFaKDxPXv+mRm5uVD99iodfxpgbt+AGn0Mb97WhwKm
1hMblZgxaYh7bVSsk5tGokBIgi3x4DSQzfKtO9NI6PpEiEHcrKPbvTFDrAvDsAq2
4s8EeBXC8bukctr6c4nvAFgzhjNbe0mnLKN6quqf/P/iNqWe52EIWFAfH825x3PS
cU/LyiZFBtBwj9fU9rRp6M5arOJWf0U4WxtusIGDOJPEjvjfnl0jGD61E2COF+bQ
NzRkfO5VcGkTRqaRANMVV7JmE66NKuuWBw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:01 2024 by rpki-client on console-ams.rpki-client.org