Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/39fc107a-067e-33f3-b40f-4050eee42228.roa
File:                     39fc107a-067e-33f3-b40f-4050eee42228.roa (raw, json)
Hash identifier:          tqh0k2g5mai4tZy413gneIMnQ+YaMMV5C8PefQh373M=
Subject key identifier:   21:85:7D:0B:94:DF:7A:05:85:6C:8C:A9:7D:E8:44:27:08:9E:0F:F5
Certificate issuer:       /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
Certificate serial:       010D0C9F43285845453D6A7BFA8D236CA23FC200
Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/39fc107a-067e-33f3-b40f-4050eee42228.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     393732
IP address blocks:        2620:11d:500f::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:6a:7b:fa:8d:23:6c:a2:3f:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c50f0eb6-5f66-4834-b800-451a2aa0f40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:56:93:45:81:c5:28:10:fc:31:3c:91:de:
                    01:71:56:4f:a8:91:00:22:14:76:fd:62:e0:e0:21:
                    eb:ff:7c:1e:f3:42:ea:b1:db:c1:de:7a:2b:43:dc:
                    b7:bc:ab:e7:0e:2c:14:07:bc:35:dc:09:2b:4b:8e:
                    9d:01:7f:cf:00:7a:ce:df:78:f7:44:fa:71:f3:fb:
                    86:4c:32:ff:80:6a:71:5f:85:e0:b0:22:88:6b:18:
                    3b:8d:c3:e8:77:7f:79:41:38:f5:dd:4e:f6:56:58:
                    92:75:b7:d5:94:1b:ba:d3:aa:2b:c7:5c:9f:e8:50:
                    8f:04:db:da:c2:cc:9f:f4:50:31:8c:ae:eb:fb:4f:
                    7c:d2:80:c6:a7:3c:46:b3:7c:1e:d6:50:36:24:e9:
                    7d:47:be:d5:25:8e:91:e6:5a:00:f4:74:2f:65:32:
                    85:08:2b:6a:4d:48:a4:19:61:c0:17:3d:d0:b4:31:
                    55:d1:06:e7:5b:d0:9f:5e:f3:2a:bb:a7:e9:c8:64:
                    bf:72:9f:57:ea:3e:5d:bb:a0:8c:4e:78:82:f8:3a:
                    17:d2:0f:32:95:23:f0:8c:c7:17:28:43:6c:b2:06:
                    30:18:7d:b8:9b:f0:17:b6:bb:7e:d3:13:f5:40:36:
                    2d:d5:c6:2d:90:38:cc:ec:2e:c5:c0:d5:b8:e0:d5:
                    fd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:85:7D:0B:94:DF:7A:05:85:6C:8C:A9:7D:E8:44:27:08:9E:0F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/39fc107a-067e-33f3-b40f-4050eee42228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl

            X509v3 Authority Key Identifier:
                keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11d:500f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:a0:19:df:cf:bd:4a:55:f4:11:e3:00:80:54:4a:00:69:
         6b:9d:6a:3c:47:51:83:06:04:22:04:4d:e3:95:7e:ba:6c:96:
         8c:fe:a9:0b:e6:54:6f:68:2f:ba:2d:5b:a9:2d:25:f1:95:9e:
         3e:c0:a3:3a:a8:2c:68:36:ae:12:28:7a:77:95:9b:af:b6:03:
         30:26:f8:e0:a2:00:ac:16:25:31:c7:dc:33:5a:b2:d4:08:f1:
         6e:4b:52:07:9f:bb:05:b1:23:5c:15:db:c4:a4:08:4e:50:fe:
         64:39:01:a4:ca:6f:d8:ed:d7:6e:17:7e:e3:72:f7:b0:42:5d:
         b6:1e:72:5d:28:93:b4:3d:47:ce:4c:2e:94:a8:28:69:5a:67:
         e4:df:b3:e2:69:1c:f0:73:40:30:57:94:61:ad:b4:c6:4f:b5:
         c5:76:e4:3e:c4:d7:e4:f4:cf:f7:f8:f3:a3:99:84:16:df:d0:
         11:69:0e:1e:4f:a0:18:e8:51:4d:32:11:04:e3:91:93:55:27:
         9c:0c:43:d5:c9:eb:b6:f4:0c:b4:58:e5:88:d7:81:98:ec:15:
         9a:d5:b8:cb:6d:6c:7b:ec:1b:be:f8:ac:b9:62:79:b0:64:f8:
         a4:a8:25:a4:5b:b4:2c:94:5c:5b:8f:ce:98:ac:ea:ff:cf:a8:
         84:b3:48:42
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVFPWp7+o0jbKI/wgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUyYmZmMGUtYTdmMi00ZDkyLWIyZmYtMjRiZmEyMWE3
MzA2MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
YzUwZjBlYjYtNWY2Ni00ODM0LWI4MDAtNDUxYTJhYTBmNDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7RWk0WBxSgQ/DE8kd4BcVZPqJEAIhR2/WLg
4CHr/3we80LqsdvB3norQ9y3vKvnDiwUB7w13AkrS46dAX/PAHrO33j3RPpx8/uG
TDL/gGpxX4XgsCKIaxg7jcPod395QTj13U72VliSdbfVlBu606orx1yf6FCPBNva
wsyf9FAxjK7r+0980oDGpzxGs3we1lA2JOl9R77VJY6R5loA9HQvZTKFCCtqTUik
GWHAFz3QtDFV0QbnW9CfXvMqu6fpyGS/cp9X6j5du6CMTniC+DoX0g8ylSPwjMcX
KENssgYwGH24m/AXtrt+0xP1QDYt1cYtkDjM7C7FwNW44NX9pQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCGFfQuU33oFhWyMqX3oRCcIng/1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJi
ZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJmYTIxYTczMDYvMzlmYzEwN2EtMDY3ZS0z
M2YzLWI0MGYtNDA1MGVlZTQyMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjUyYmZmMGUtYTdmMi00ZDkyLWIy
ZmYtMjRiZmEyMWE3MzA2LzI1MmJmZjBlLWE3ZjItNGQ5Mi1iMmZmLTI0YmZhMjFh
NzMwNi5jcmwwHwYDVR0jBBgwFoAUEzQfORIlo2L0wsx8dJoVC7mUQngwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJiZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJm
YTIxYTczMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABHVAP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACYdoBnfz71KVfQR4wCAVEoAaWudajxHUYMGBCIETeOVfrpsloz+
qQvmVG9oL7otW6ktJfGVnj7AozqoLGg2rhIoeneVm6+2AzAm+OCiAKwWJTHH3DNa
stQI8W5LUgefuwWxI1wV28SkCE5Q/mQ5AaTKb9jt124XfuNy97BCXbYecl0ok7Q9
R85MLpSoKGlaZ+Tfs+JpHPBzQDBXlGGttMZPtcV25D7E1+T0z/f486OZhBbf0BFp
Dh5PoBjoUU0yEQTjkZNVJ5wMQ9XJ67b0DLRY5YjXgZjsFZrVuMttbHvsG774rLli
ebBk+KSoJaRbtCyUXFuPzpis6v/PqISzSEI=
-----END CERTIFICATE-----
Generated at Sun May 5 01:43:38 2024 by rpki-client on console-fra.rpki-client.org