Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52de9e87-d422-3a3e-b99c-c0f5df6e7623.roa
File:                     52de9e87-d422-3a3e-b99c-c0f5df6e7623.roa (raw, json)
Hash identifier:          1zdVWVVHtX6l38nPUd19WZP6FkpCiJiOq2hH1bu6JnQ=
Subject key identifier:   32:99:22:95:E4:71:72:DC:A4:5E:63:2F:79:36:70:45:F2:47:D5:06
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967D6A9EDE2DF788A9FCFC40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52de9e87-d422-3a3e-b99c-c0f5df6e7623.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8202::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:6a:9e:de:2d:f7:88:a9:fc:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=07961436-3f18-4fbe-996f-b358f66bfa8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:97:d6:7c:d4:1f:06:4d:b8:5a:24:34:4f:
                    a8:0d:47:16:c4:9b:87:b2:c7:9f:06:79:5c:71:b8:
                    fc:17:ac:09:e0:d7:ad:ad:a3:d4:d9:ae:2a:9e:ae:
                    78:3e:8a:af:20:63:4f:3f:c4:d2:fd:05:25:b1:80:
                    44:b2:7f:54:b6:a8:41:18:0a:c0:76:f9:4d:b3:c9:
                    17:ef:72:5b:6e:b4:7d:82:4d:9b:6e:8c:68:50:68:
                    0b:47:a0:55:bf:3b:35:37:61:56:55:b8:94:50:a4:
                    aa:47:2d:ee:d1:ca:6a:05:95:79:3d:ff:30:84:52:
                    b4:56:83:38:0e:11:c7:43:98:93:76:e6:c3:e4:65:
                    a8:50:94:0f:33:09:b4:cf:c1:f0:bf:68:93:0e:84:
                    de:59:88:72:97:85:34:93:9f:c1:8e:34:1c:98:eb:
                    a6:9d:03:3c:94:f0:36:a6:d6:be:32:ed:86:09:7c:
                    14:30:32:dd:6b:61:7f:96:7f:17:d6:e3:6b:74:a6:
                    10:a7:be:8b:2e:40:f2:ee:99:f6:d4:5d:98:57:52:
                    69:b2:d4:28:d4:e2:66:9f:23:0e:af:2e:e7:72:db:
                    b5:1f:7c:6b:cb:9a:94:7d:14:d2:3d:de:27:e2:55:
                    1c:e4:97:11:7f:c5:42:be:6c:85:bc:82:6d:f5:09:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:99:22:95:E4:71:72:DC:A4:5E:63:2F:79:36:70:45:F2:47:D5:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52de9e87-d422-3a3e-b99c-c0f5df6e7623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8202::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f5:db:4c:9d:ba:c9:94:a9:a0:36:88:2c:a0:83:3f:7b:e2:
         42:54:1e:a3:dc:f4:00:bb:4a:2e:a5:ba:d3:85:4d:11:13:58:
         fc:24:51:cc:4f:c5:7a:b7:27:35:4e:5f:4a:47:6d:69:b2:61:
         e7:85:16:64:66:55:8a:d6:31:79:7d:ce:d8:20:5f:8a:49:67:
         25:7c:5c:0c:17:db:bc:51:88:82:32:14:44:d2:b6:55:67:4d:
         52:4b:99:f2:50:59:e2:98:da:74:ce:fb:fc:3a:97:f7:49:b7:
         6c:d9:30:d8:f3:e5:b5:93:e1:84:c7:5a:c6:ae:f6:d6:19:9c:
         88:4c:98:da:32:7a:7b:74:51:01:be:d5:a4:2f:72:a3:71:8b:
         60:d8:d0:f6:be:41:63:bf:ed:59:1f:b7:13:5d:e4:68:9e:3f:
         f9:74:82:a7:75:1b:e0:5e:c7:a2:4a:1e:e0:7b:7c:79:86:d5:
         68:1f:be:1f:2c:d1:b2:d7:0c:30:71:37:b2:0e:55:85:a2:95:
         b0:1c:68:76:8b:f6:04:c3:79:55:56:a2:85:d1:16:3c:5a:eb:
         c1:57:42:e8:27:4b:e2:cf:d5:ef:dc:14:fd:35:cb:41:f9:1f:
         5a:35:5e:d0:a9:b3:2f:97:e9:1c:b7:23:d6:57:20:c3:c7:f4:
         0b:cf:8e:07
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDmWfWqe3i33iKn8/EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDQxNDA0MDAwMFoXDTI3MDQwNzA0MDAwMFowLzEtMCsGA1UEAxMk
MDc5NjE0MzYtM2YxOC00ZmJlLTk5NmYtYjM1OGY2NmJmYThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuaX1nzUHwZNuFokNE+oDUcWxJuHssefBnlc
cbj8F6wJ4NetraPU2a4qnq54PoqvIGNPP8TS/QUlsYBEsn9UtqhBGArAdvlNs8kX
73JbbrR9gk2bboxoUGgLR6BVvzs1N2FWVbiUUKSqRy3u0cpqBZV5Pf8whFK0VoM4
DhHHQ5iTdubD5GWoUJQPMwm0z8Hwv2iTDoTeWYhyl4U0k5/BjjQcmOumnQM8lPA2
pta+Mu2GCXwUMDLda2F/ln8X1uNrdKYQp76LLkDy7pn21F2YV1JpstQo1OJmnyMO
ry7nctu1H3xry5qUfRTSPd4n4lUc5JcRf8VCvmyFvIJt9QkUnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDKZIpXkcXLcpF5jL3k2cEXyR9UGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNTJkZTllODctZDQyMi0z
YTNlLWI5OWMtYzBmNWRmNmU3NjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYIC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFT120ydusmUqaA2iCyggz974kJUHqPc9AC7Si6lutOFTRETWPwk
UcxPxXq3JzVOX0pHbWmyYeeFFmRmVYrWMXl9ztggX4pJZyV8XAwX27xRiIIyFETS
tlVnTVJLmfJQWeKY2nTO+/w6l/dJt2zZMNjz5bWT4YTHWsau9tYZnIhMmNoyent0
UQG+1aQvcqNxi2DY0Pa+QWO/7VkftxNd5GieP/l0gqd1G+Bex6JKHuB7fHmG1Wgf
vh8s0bLXDDBxN7IOVYWilbAcaHaL9gTDeVVWooXRFjxa68FXQugnS+LP1e/cFP01
y0H5H1o1XtCpsy+X6Ry3I9ZXIMPH9AvPjgc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:07 2024 by rpki-client on console-ams.rpki-client.org