Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ecc9f137-7b9e-3c28-9cc8-bee9ed86aedb.roa
File:                     ecc9f137-7b9e-3c28-9cc8-bee9ed86aedb.roa (raw, json)
Hash identifier:          ikEH9dtLi6Rm8cab98/vYRzj7HD/jH4S/eE2EnaY9hM=
Subject key identifier:   0E:4D:A1:72:8C:7B:40:B6:B2:73:75:B7:A1:AC:E4:5D:AE:B4:80:DE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858395BD689EB38C743C471414D80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ecc9f137-7b9e-3c28-9cc8-bee9ed86aedb.roa
Signing time:             Wed 24 Mar 2021 04:00:00 +0000
ROA not before:           Wed 24 Mar 2021 04:00:00 +0000
ROA not after:            Wed 17 Mar 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2607:f098:50ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:5b:d6:89:eb:38:c7:43:c4:71:41:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 24 04:00:00 2021 GMT
            Not After : Mar 17 04:00:00 2027 GMT
        Subject: CN=fea4cf09-f0a5-4853-b07a-084c67ea8890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8c:7d:fa:7c:56:82:c9:cf:b8:83:b5:a3:07:
                    40:d2:d3:99:1f:65:f0:9e:21:4c:01:b9:1b:d0:71:
                    83:89:2f:f2:51:5e:20:10:49:be:33:2e:fe:78:e2:
                    95:f0:24:ee:ca:6f:a9:8c:d1:f4:ef:6b:4e:bc:81:
                    6c:ca:65:f4:6a:71:da:39:d9:8e:f2:84:ed:ae:af:
                    a6:3b:dc:d1:0a:03:c3:7f:26:d7:ad:3d:75:7b:d0:
                    88:5a:c0:b6:cd:25:be:ca:d4:7e:04:2f:03:2d:61:
                    22:a0:31:df:89:3f:83:21:98:94:d6:0d:30:76:51:
                    63:91:93:80:a7:2e:8a:45:51:86:bd:aa:2b:47:4a:
                    5f:d0:1b:11:fc:e6:6d:bb:fa:bc:81:0c:81:35:dc:
                    6c:7b:e5:47:e8:24:85:05:f5:ae:7c:92:0d:20:d1:
                    7e:79:81:d2:1f:9e:c4:69:59:71:51:02:2f:6a:18:
                    7b:0e:03:5b:d5:df:ed:11:04:b1:e9:c2:ec:da:2e:
                    5b:76:3d:1a:a5:d5:7a:cb:d2:80:5c:1c:89:93:bf:
                    81:72:3b:f0:18:4e:d7:db:42:a0:b7:c4:7f:dc:46:
                    ea:3a:f8:f8:44:f3:2e:b1:b8:b4:d5:ef:67:3a:5e:
                    2c:5c:e6:a0:7e:84:b0:6a:69:ff:72:c2:cd:d7:d4:
                    ad:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4D:A1:72:8C:7B:40:B6:B2:73:75:B7:A1:AC:E4:5D:AE:B4:80:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ecc9f137-7b9e-3c28-9cc8-bee9ed86aedb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:50ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e5:87:ee:83:66:85:a3:23:c5:a0:1d:a3:9f:39:82:1b:02:
         21:ab:b7:09:47:b5:e9:14:de:7e:37:4e:7f:ee:c6:c0:ea:eb:
         52:ed:59:ae:bd:4f:d2:ff:ef:e8:dd:9e:ba:a4:1c:d0:9c:05:
         9a:64:5f:72:b1:da:81:a5:25:ae:77:e7:9e:e9:be:30:da:10:
         5a:f5:b6:ec:4d:39:3c:54:a1:1b:95:e1:1f:5b:80:43:eb:34:
         9c:c2:c0:0e:7d:6a:7f:dc:91:d4:8b:ae:e7:b0:d2:f9:50:d3:
         c6:bf:ac:66:b7:85:a8:63:41:ed:0f:1d:a8:84:1c:16:f8:b7:
         d1:33:35:de:12:f1:46:f0:b6:d2:a7:f9:ed:88:d9:50:b7:1f:
         e6:1b:61:51:26:67:e3:41:fd:52:e8:14:e7:ba:3b:4c:48:8e:
         c9:ee:8c:11:a5:de:e6:c0:a2:a4:79:e5:e5:96:c1:87:64:74:
         64:19:e3:bc:e5:80:5a:fe:53:85:c8:5c:cb:7f:f5:8f:a4:f0:
         f4:70:97:bd:a0:a3:2c:cd:d6:6b:3a:40:44:1d:60:43:ff:0d:
         3f:86:00:db:97:5c:34:6b:5d:10:f7:aa:bc:31:93:d3:10:52:
         13:7a:7b:90:fc:23:c8:e3:97:47:ce:a0:92:8e:82:ec:43:dc:
         97:97:dd:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDlb1onrOMdDxHFBTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDMyNDA0MDAwMFoXDTI3MDMxNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZmVhNGNmMDktZjBhNS00ODUzLWIwN2EtMDg0YzY3ZWE4ODkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIx9+nxWgsnPuIO1owdA0tOZH2XwniFMAbkb
0HGDiS/yUV4gEEm+My7+eOKV8CTuym+pjNH072tOvIFsymX0anHaOdmO8oTtrq+m
O9zRCgPDfybXrT11e9CIWsC2zSW+ytR+BC8DLWEioDHfiT+DIZiU1g0wdlFjkZOA
py6KRVGGvaorR0pf0BsR/OZtu/q8gQyBNdxse+VH6CSFBfWufJININF+eYHSH57E
aVlxUQIvahh7DgNb1d/tEQSx6cLs2i5bdj0apdV6y9KAXByJk7+BcjvwGE7X20Kg
t8R/3EbqOvj4RPMusbi01e9nOl4sXOagfoSwamn/csLN19St3wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA5NoXKMe0C2snN1t6Gs5F2utIDeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZWNjOWYxMzctN2I5ZS0z
YzI4LTljYzgtYmVlOWVkODZhZWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwmFD/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHDlh+6DZoWjI8WgHaOfOYIbAiGrtwlHtekU3n43Tn/uxsDq61Lt
Wa69T9L/7+jdnrqkHNCcBZpkX3Kx2oGlJa53557pvjDaEFr1tuxNOTxUoRuV4R9b
gEPrNJzCwA59an/ckdSLruew0vlQ08a/rGa3hahjQe0PHaiEHBb4t9EzNd4S8Ubw
ttKn+e2I2VC3H+YbYVEmZ+NB/VLoFOe6O0xIjsnujBGl3ubAoqR55eWWwYdkdGQZ
47zlgFr+U4XIXMt/9Y+k8PRwl72goyzN1ms6QEQdYEP/DT+GANuXXDRrXRD3qrwx
k9MQUhN6e5D8I8jjl0fOoJKOguxD3JeX3YY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:27 2024 by rpki-client on console-fra.rpki-client.org