Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/48e9f760-1601-35b1-9940-8cfc8cac9a16.roa
File:                     48e9f760-1601-35b1-9940-8cfc8cac9a16.roa (raw, json)
Hash identifier:          IFnZsdwvydhTHxgu1coVGe2IfjRX1FXv8qMkNwLi/JE=
Subject key identifier:   6A:CC:E6:02:73:71:5B:9E:E7:EA:81:2D:1F:AE:9F:47:3D:E4:A0:FD
Certificate issuer:       /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
Certificate serial:       010D0C9F43285845453D6DB5A30B766B45F75580
Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/48e9f760-1601-35b1-9940-8cfc8cac9a16.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     393732
IP address blocks:        2620:11d:5002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:6d:b5:a3:0b:76:6b:45:f7:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=a45b32b0-74f8-40e4-9ab6-8329dbbb3797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:0c:5d:be:7f:3e:92:cc:d1:07:76:88:1b:
                    a6:85:69:b4:ec:20:83:a0:9a:6d:10:e7:11:59:99:
                    bf:11:ae:73:f1:dd:c0:83:fa:fe:f8:cf:9d:5a:0c:
                    f2:cc:dd:f5:cb:82:a7:d9:e2:b4:08:ed:d4:51:2c:
                    31:85:38:b2:2b:72:78:4a:cf:95:56:cc:2f:52:ee:
                    16:75:67:2e:3e:e0:db:30:79:b5:7b:83:1b:f5:34:
                    fe:62:2c:96:cc:01:ab:2d:5d:ab:c0:2c:e1:b4:19:
                    24:fa:9f:4a:71:f4:82:e6:07:f9:cd:eb:83:8a:da:
                    0b:63:b0:61:b8:cc:a1:9f:db:5c:f2:0c:5c:e1:4d:
                    a7:b7:68:76:b3:3b:14:91:81:3c:6e:cf:60:bb:2f:
                    a3:ac:c4:39:64:72:d6:41:48:3d:9d:fb:e1:12:f7:
                    32:f1:6a:99:8f:58:e0:e7:f4:59:a7:fe:2f:55:1f:
                    43:d7:d7:6b:ff:54:61:54:c0:86:30:9e:aa:39:bc:
                    90:d0:71:12:b5:91:d4:cb:23:e2:d6:8e:89:f7:ad:
                    fc:a4:82:30:11:ac:d3:28:52:9d:87:e0:01:05:13:
                    3a:ce:24:f6:d9:c7:bf:6f:a2:33:4e:34:cc:9e:7b:
                    ba:2e:23:e8:63:04:f5:18:75:78:d6:d9:9d:d2:a3:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CC:E6:02:73:71:5B:9E:E7:EA:81:2D:1F:AE:9F:47:3D:E4:A0:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/48e9f760-1601-35b1-9940-8cfc8cac9a16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl

            X509v3 Authority Key Identifier:
                keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11d:5002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:3e:8f:eb:78:db:2a:a9:5f:cf:93:eb:59:ea:0c:a4:7b:48:
         fa:6f:7a:57:47:17:f8:19:a9:ef:6b:db:cd:e3:c8:0f:a4:ce:
         ca:f4:ec:83:4c:82:cc:4a:db:e8:a0:d1:ef:15:25:90:81:e3:
         00:c6:5e:ae:1b:75:a6:50:2a:e2:61:f4:3c:7d:50:18:10:60:
         b4:1d:f7:63:dc:14:8f:75:19:c5:e4:10:b5:f7:7e:3c:ec:02:
         64:95:2d:07:3b:04:60:cd:a3:31:61:3c:ba:a0:e8:51:a4:a4:
         84:30:f4:03:00:53:41:cb:90:5b:9e:6c:99:d9:29:50:a5:34:
         6d:c4:af:85:97:6f:fd:31:9f:b3:96:12:99:4e:3a:79:c6:be:
         41:87:56:ba:68:fe:24:0d:89:ea:93:a3:50:5c:29:ba:8e:3a:
         2c:68:5f:09:2f:de:c4:86:7b:80:2b:3b:be:c3:85:2d:ad:cd:
         0f:18:21:7f:78:79:0d:64:b4:c1:3e:2f:ef:22:66:9a:22:98:
         74:97:f8:b2:71:3b:0a:1b:50:d3:18:01:22:ee:bc:e2:e5:ea:
         1f:91:91:a1:e7:25:07:8c:31:08:b0:3b:7f:ad:7f:3e:8d:75:
         85:97:fd:4f:2a:3b:2a:46:8a:e8:cb:13:11:95:c2:0a:37:e3:
         3c:9e:83:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVFPW21owt2a0X3VYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUyYmZmMGUtYTdmMi00ZDkyLWIyZmYtMjRiZmEyMWE3
MzA2MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
YTQ1YjMyYjAtNzRmOC00MGU0LTlhYjYtODMyOWRiYmIzNzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2IMXb5/PpLM0Qd2iBumhWm07CCDoJptEOcR
WZm/Ea5z8d3Ag/r++M+dWgzyzN31y4Kn2eK0CO3UUSwxhTiyK3J4Ss+VVswvUu4W
dWcuPuDbMHm1e4Mb9TT+YiyWzAGrLV2rwCzhtBkk+p9KcfSC5gf5zeuDitoLY7Bh
uMyhn9tc8gxc4U2nt2h2szsUkYE8bs9guy+jrMQ5ZHLWQUg9nfvhEvcy8WqZj1jg
5/RZp/4vVR9D19dr/1RhVMCGMJ6qObyQ0HEStZHUyyPi1o6J9638pIIwEazTKFKd
h+ABBRM6ziT22ce/b6IzTjTMnnu6LiPoYwT1GHV41tmd0qMegwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGrM5gJzcVue5+qBLR+un0c95KD9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJi
ZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJmYTIxYTczMDYvNDhlOWY3NjAtMTYwMS0z
NWIxLTk5NDAtOGNmYzhjYWM5YTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjUyYmZmMGUtYTdmMi00ZDkyLWIy
ZmYtMjRiZmEyMWE3MzA2LzI1MmJmZjBlLWE3ZjItNGQ5Mi1iMmZmLTI0YmZhMjFh
NzMwNi5jcmwwHwYDVR0jBBgwFoAUEzQfORIlo2L0wsx8dJoVC7mUQngwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJiZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJm
YTIxYTczMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABHVAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGE+j+t42yqpX8+T61nqDKR7SPpveldHF/gZqe9r283jyA+kzsr0
7INMgsxK2+ig0e8VJZCB4wDGXq4bdaZQKuJh9Dx9UBgQYLQd92PcFI91GcXkELX3
fjzsAmSVLQc7BGDNozFhPLqg6FGkpIQw9AMAU0HLkFuebJnZKVClNG3Er4WXb/0x
n7OWEplOOnnGvkGHVrpo/iQNieqTo1BcKbqOOixoXwkv3sSGe4ArO77DhS2tzQ8Y
IX94eQ1ktME+L+8iZpoimHSX+LJxOwobUNMYASLuvOLl6h+RkaHnJQeMMQiwO3+t
fz6NdYWX/U8qOypGiujLExGVwgo34zyeg9o=
-----END CERTIFICATE-----
Generated at Sun May 5 01:43:38 2024 by rpki-client on console-fra.rpki-client.org