Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa
File:                     5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa (raw, json)
Hash identifier:          gPlBpPnxAg33kWKQG1jctQ8MnqSopT8zp75+77BTywc=
Subject key identifier:   08:52:AA:27:9C:29:89:42:9A:89:2E:7E:99:4C:83:AB:F4:84:C4:9E
Certificate issuer:       /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Certificate serial:       010D0C9F43285845CE0907913CEF540B508F2080
Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     396204
IP address blocks:        2620:22:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:07:91:3c:ef:54:0b:50:8f:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=1de213ed-2524-4d1b-9e13-aae2a923f174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:27:ad:87:47:0b:bd:4c:9a:c7:11:a5:1c:
                    ca:76:fe:f0:5b:36:ef:b8:19:48:fe:39:20:94:d5:
                    c9:01:17:a0:ff:1b:b7:44:cc:64:31:df:ab:93:11:
                    7d:bb:77:cb:3f:a4:33:cc:9a:53:2f:d2:a1:ee:a1:
                    28:a7:e6:08:9a:a9:69:b5:b6:d8:7b:5d:8c:4d:34:
                    3a:71:a1:0b:7b:18:e7:60:3c:04:c3:0c:87:23:a6:
                    b6:74:8d:d1:21:b7:eb:1d:e1:f0:95:14:64:23:3b:
                    ac:59:7e:ce:17:6f:9d:87:f6:99:c5:a8:9a:af:fa:
                    be:fc:c5:b1:4f:7d:c8:3e:f3:d1:92:db:ec:f3:52:
                    a4:1d:65:07:84:c9:60:66:6f:c0:7e:bf:ea:e5:10:
                    30:58:65:29:31:33:06:aa:bf:3b:ca:aa:2c:92:48:
                    ce:48:d5:ea:a6:e3:40:eb:25:47:67:4b:58:16:ae:
                    6f:6f:06:3c:a9:36:bb:1d:dc:8e:5c:60:7c:95:3d:
                    48:6c:bd:8c:07:ad:b5:26:af:8f:23:c2:99:a0:7a:
                    f7:f1:cf:98:91:98:f7:88:83:1e:ce:7b:1c:15:c7:
                    3f:c2:8d:e4:5c:5d:03:79:02:6a:b0:95:20:fd:f9:
                    da:37:94:03:a5:9c:97:3c:19:ec:09:72:0a:7c:1a:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:52:AA:27:9C:29:89:42:9A:89:2E:7E:99:4C:83:AB:F4:84:C4:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:22:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:b3:c2:cf:67:99:a8:0f:9c:19:11:b8:6d:ef:e9:b1:11:
         d4:28:aa:88:90:7c:7c:b2:90:cd:d0:d1:16:d8:72:3c:96:5a:
         0d:e2:a1:68:50:17:df:6e:19:7f:9a:22:30:5c:69:cf:d0:a3:
         15:d6:96:90:57:04:49:91:ba:c7:a3:ed:87:5c:f2:4c:76:60:
         c4:4d:3c:94:3c:03:42:64:5e:72:0f:2d:46:2f:88:48:5b:86:
         42:45:6d:24:6f:3e:24:58:04:61:60:2c:7e:18:03:45:93:43:
         9d:0c:18:a9:fe:98:b8:44:8b:05:55:c0:f6:ca:f9:05:a9:fe:
         73:ac:20:40:51:15:95:de:60:6c:9c:a4:0c:05:60:f3:1e:40:
         a7:42:ae:82:34:cf:d6:0b:57:bf:2f:f0:5e:e4:8d:b0:35:8a:
         b0:29:7e:31:22:3d:aa:7f:22:f0:3b:8a:c2:0b:bc:63:76:57:
         3c:8d:9e:e5:e6:34:de:df:49:0f:37:ab:8a:c0:21:25:be:72:
         b4:ba:d8:ad:c6:5d:35:39:e5:df:02:f7:c7:b9:05:86:42:61:
         5f:35:6a:7b:98:54:49:38:aa:9b:bc:bb:f7:62:2f:1f:e6:8a:
         2d:59:90:14:bb:1b:16:41:a8:79:a2:14:1f:9a:c1:e9:1c:08:
         02:2b:1a:5f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXOCQeRPO9UC1CPIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE4YzgzZmEtZmZjYi00YzE0LTllM2ItYzNmYTQwNTYx
YWQ5MB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk
MWRlMjEzZWQtMjUyNC00ZDFiLTllMTMtYWFlMmE5MjNmMTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6onrYdHC71MmscRpRzKdv7wWzbvuBlI/jkg
lNXJAReg/xu3RMxkMd+rkxF9u3fLP6QzzJpTL9Kh7qEop+YImqlptbbYe12MTTQ6
caELexjnYDwEwwyHI6a2dI3RIbfrHeHwlRRkIzusWX7OF2+dh/aZxaiar/q+/MWx
T33IPvPRktvs81KkHWUHhMlgZm/Afr/q5RAwWGUpMTMGqr87yqoskkjOSNXqpuNA
6yVHZ0tYFq5vbwY8qTa7HdyOXGB8lT1IbL2MB621Jq+PI8KZoHr38c+YkZj3iIMe
znscFcc/wo3kXF0DeQJqsJUg/fnaN5QDpZyXPBnsCXIKfBriQQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAhSqiecKYlCmokufplMg6v0hMSeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YThj
ODNmYS1mZmNiLTRjMTQtOWUzYi1jM2ZhNDA1NjFhZDkvNWIxNzQ5YjktNDMwYy0z
M2RkLThiODYtNWRjOTI2OGVmYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGE4YzgzZmEtZmZjYi00YzE0LTll
M2ItYzNmYTQwNTYxYWQ5LzhhOGM4M2ZhLWZmY2ItNGMxNC05ZTNiLWMzZmE0MDU2
MWFkOS5jcmwwHwYDVR0jBBgwFoAUjccdmxK7+UZwIdMaRkD1JyDt1ZgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YThjODNmYS1mZmNiLTRjMTQtOWUzYi1jM2Zh
NDA1NjFhZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIqAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHp7s8LPZ5moD5wZEbht7+mxEdQoqoiQfHyykM3Q0RbYcjyWWg3i
oWhQF99uGX+aIjBcac/QoxXWlpBXBEmRusej7Ydc8kx2YMRNPJQ8A0JkXnIPLUYv
iEhbhkJFbSRvPiRYBGFgLH4YA0WTQ50MGKn+mLhEiwVVwPbK+QWp/nOsIEBRFZXe
YGycpAwFYPMeQKdCroI0z9YLV78v8F7kjbA1irApfjEiPap/IvA7isILvGN2VzyN
nuXmNN7fSQ83q4rAISW+crS62K3GXTU55d8C98e5BYZCYV81anuYVEk4qpu8u/di
Lx/mii1ZkBS7GxZBqHmiFB+awekcCAIrGl8=
-----END CERTIFICATE-----
Generated at Sat May 18 15:37:48 2024 by rpki-client on console-fra.rpki-client.org