Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ec595abd-69f6-33b4-abf4-efb5fc7d9b4e.roa
File:                     ec595abd-69f6-33b4-abf4-efb5fc7d9b4e.roa (raw, json)
Hash identifier:          kckaXgQQDZlQpyjQTplQuDqS2mdMfSEqrW7GgjjEFFg=
Subject key identifier:   61:B2:90:42:88:F5:B0:F8:3B:EB:B1:BD:A7:2D:D0:09:01:DD:B0:42
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967CA29439B360567B267400
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ec595abd-69f6-33b4-abf4-efb5fc7d9b4e.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8044::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7c:a2:94:39:b3:60:56:7b:26:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=27d88712-1d54-4be9-af3a-47648b13c8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:21:48:95:4f:02:52:1d:27:85:d6:1b:f0:
                    66:9c:a3:29:8a:35:54:4f:f9:10:3e:e8:8f:35:93:
                    78:5a:0d:19:7a:ef:42:11:ec:01:e1:ce:15:16:b2:
                    9d:73:50:ac:ff:98:04:40:5e:9b:7a:69:b4:4d:a4:
                    68:9e:aa:51:42:19:e1:69:69:57:e3:d3:c1:29:fc:
                    a8:1f:15:d1:e7:f9:94:6a:51:af:ba:5c:a2:02:2a:
                    8e:6d:90:5d:90:bf:12:14:0c:81:bb:fd:a7:f0:c8:
                    98:97:bf:11:74:93:fd:23:3c:93:a7:ce:61:c0:94:
                    59:67:21:0f:ea:87:cb:b9:87:15:d1:54:f0:4b:82:
                    83:bd:a7:33:37:84:6c:ac:ba:b5:43:79:b0:e5:a5:
                    e2:69:1a:31:91:59:ea:6f:de:a3:80:35:b8:6b:d4:
                    b4:e0:e5:f7:05:bf:66:0a:53:9e:b1:2c:8e:b8:25:
                    d8:e8:45:81:a9:ad:71:5a:18:55:06:ef:57:e9:e1:
                    f4:7d:d4:f9:80:c4:9b:e0:00:db:3d:a0:00:39:12:
                    06:d8:e3:6f:bc:ca:ec:c2:b2:d6:c3:db:36:a2:3b:
                    8c:6d:ee:1a:65:24:21:6b:c1:88:86:15:b5:2f:0e:
                    62:4c:f0:b7:cb:ce:31:a1:ef:51:3c:ef:46:fc:df:
                    22:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B2:90:42:88:F5:B0:F8:3B:EB:B1:BD:A7:2D:D0:09:01:DD:B0:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ec595abd-69f6-33b4-abf4-efb5fc7d9b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8044::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:c5:df:d9:87:54:4d:f2:47:28:79:87:34:ee:fa:a9:8e:e5:
         0d:b4:07:c1:a9:82:1f:ac:e9:04:c2:85:57:ba:a5:7b:5b:c8:
         52:40:09:1c:60:dc:1d:82:15:9f:04:a0:58:ce:eb:35:3e:a9:
         d4:97:72:5e:e3:93:ce:10:2a:8c:f9:1f:47:14:a9:5a:ad:38:
         e8:8e:3b:c9:6b:8d:83:cf:97:0d:f1:72:0f:78:66:2a:31:40:
         57:42:0a:6e:a1:05:38:89:e2:83:f1:96:f5:12:d4:10:85:85:
         53:29:17:0c:f8:82:45:34:d7:3c:3b:5a:42:40:98:01:16:ac:
         de:48:7e:fc:bb:59:d5:01:00:1c:b4:9e:32:58:40:31:32:34:
         28:cb:f4:0e:ad:84:7b:e7:8c:19:d9:22:9b:26:fb:01:85:ad:
         bb:29:04:46:0c:a8:5e:a4:ab:55:06:1e:4e:84:b9:b9:c2:b7:
         52:02:74:d2:fa:98:cf:86:fd:78:f0:66:db:eb:d3:f0:36:e5:
         9a:fe:10:66:35:9a:4c:a2:31:a9:8c:65:c4:43:19:7b:0e:17:
         f9:98:15:29:bd:f2:da:c8:9f:8a:02:cf:31:69:e1:a0:3d:98:
         ba:50:24:98:54:fc:7c:d0:f9:f5:ae:76:4d:02:e2:7f:f3:4d:
         43:e6:c9:e7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDmWfKKUObNgVnsmdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDQxNDA0MDAwMFoXDTI3MDQwNzA0MDAwMFowLzEtMCsGA1UEAxMk
MjdkODg3MTItMWQ1NC00YmU5LWFmM2EtNDc2NDhiMTNjOGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvUhSJVPAlIdJ4XWG/BmnKMpijVUT/kQPuiP
NZN4Wg0Zeu9CEewB4c4VFrKdc1Cs/5gEQF6bemm0TaRonqpRQhnhaWlX49PBKfyo
HxXR5/mUalGvulyiAiqObZBdkL8SFAyBu/2n8MiYl78RdJP9IzyTp85hwJRZZyEP
6ofLuYcV0VTwS4KDvaczN4RsrLq1Q3mw5aXiaRoxkVnqb96jgDW4a9S04OX3Bb9m
ClOesSyOuCXY6EWBqa1xWhhVBu9X6eH0fdT5gMSb4ADbPaAAORIG2ONvvMrswrLW
w9s2ojuMbe4aZSQha8GIhhW1Lw5iTPC3y84xoe9RPO9G/N8i5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGGykEKI9bD4O+uxvact0AkB3bBCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZWM1OTVhYmQtNjlmNi0z
M2I0LWFiZjQtZWZiNWZjN2Q5YjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYBE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGvF39mHVE3yRyh5hzTu+qmO5Q20B8Gpgh+s6QTChVe6pXtbyFJA
CRxg3B2CFZ8EoFjO6zU+qdSXcl7jk84QKoz5H0cUqVqtOOiOO8lrjYPPlw3xcg94
ZioxQFdCCm6hBTiJ4oPxlvUS1BCFhVMpFwz4gkU01zw7WkJAmAEWrN5Ifvy7WdUB
ABy0njJYQDEyNCjL9A6thHvnjBnZIpsm+wGFrbspBEYMqF6kq1UGHk6EubnCt1IC
dNL6mM+G/XjwZtvr0/A25Zr+EGY1mkyiMamMZcRDGXsOF/mYFSm98trIn4oCzzFp
4aA9mLpQJJhU/HzQ+fWudk0C4n/zTUPmyec=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org