Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa
File:                     2523a460-454b-387d-8a94-5c40f8f7d030.roa (raw, json)
Hash identifier:          JkobuVhWvvyiPPTF0HjniRtrobQMvkeCk1C46B8DFbU=
Subject key identifier:   40:C1:BB:93:8D:6F:D9:9A:2A:B6:BD:D7:41:CC:E5:B0:F9:FC:ED:75
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584782F0FD4BE2F69A3E787557C0
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     29834
IP address blocks:        2620:1f7:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f0:fd:4b:e2:f6:9a:3e:78:75:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=cb317257-84b2-4f1b-8c22-07bcaca0430d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:96:54:df:61:4b:05:52:23:9c:01:61:9c:24:
                    e7:5b:d3:e1:cb:e9:d6:8e:e2:a9:7b:94:85:11:ea:
                    dc:f9:09:81:c8:a2:ea:08:e2:16:19:bc:6b:a8:1f:
                    63:7e:3d:18:4c:68:17:8e:a3:78:99:51:01:aa:74:
                    fb:bc:ba:94:84:b0:b3:3d:04:02:b1:a8:ee:3f:32:
                    41:a7:d5:55:c5:d3:d5:07:49:24:20:6a:b8:71:8b:
                    a8:46:6a:04:31:9c:c6:e0:e7:37:93:8e:4e:2d:aa:
                    4c:10:d8:fa:54:ef:19:3d:07:2b:b6:6c:ab:7f:d4:
                    06:94:64:f1:ba:ad:20:8c:e7:6f:73:07:f8:76:0d:
                    56:4c:8a:eb:18:95:74:d8:4b:9a:2e:a1:cc:d7:ba:
                    62:e6:66:bb:5a:0e:9e:f5:3b:12:5b:e5:7e:5b:e3:
                    e8:f4:80:75:22:4f:1c:e9:57:07:56:03:32:0f:19:
                    bd:64:fc:7e:4f:c2:ce:39:94:2f:a7:f8:ca:0a:ed:
                    4c:26:cf:14:aa:2e:cb:e9:77:fa:be:93:d7:5c:1d:
                    7b:4b:8c:23:c4:f8:be:37:f8:6e:87:63:fc:bc:d9:
                    3f:92:29:98:44:90:9d:c3:f5:f0:0e:8f:53:67:11:
                    0e:a0:08:99:17:46:a7:ba:74:f5:be:c6:65:2a:dc:
                    06:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C1:BB:93:8D:6F:D9:9A:2A:B6:BD:D7:41:CC:E5:B0:F9:FC:ED:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c3:d2:7a:96:6b:d3:5d:09:d6:88:41:97:ae:7a:da:c8:90:
         9c:1f:fb:e3:99:64:7b:25:d4:11:fc:e3:49:62:d0:3d:be:e1:
         14:2a:25:0d:a5:f4:6d:4a:90:3a:59:7d:10:4f:a7:d4:88:03:
         63:17:db:fb:85:45:d2:05:20:7d:75:32:5d:99:54:72:1a:33:
         34:0c:8d:f1:12:9e:6a:7a:92:51:9e:ce:6b:f1:cf:e0:b1:d7:
         6d:bc:c3:8c:26:46:19:b0:3a:c0:1e:47:57:ca:00:eb:19:e1:
         2d:42:19:07:1c:a2:2d:29:1a:39:2e:a2:fc:1f:d4:1e:d7:42:
         92:5c:3a:94:b6:bb:ef:7e:e5:5f:95:07:a4:d3:36:71:8e:2a:
         01:7d:7c:89:00:45:a8:46:b7:50:cc:83:6a:d3:a8:cb:4d:70:
         26:c0:b4:34:be:09:db:1f:72:ce:d1:c9:a6:52:7e:12:c9:ea:
         28:39:d7:3b:fa:4b:00:7c:5e:61:0c:26:d3:e8:77:b3:92:ba:
         ae:fe:41:e9:13:4d:f7:aa:49:aa:ba:55:ce:8c:f3:74:e8:b9:
         f8:26:c9:73:40:e3:27:54:04:49:d1:2a:08:3c:65:d8:8f:65:
         af:d7:94:0c:f5:30:58:7d:36:25:ed:55:fc:59:3d:30:1c:9a:
         ea:e7:e9:53
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeC8P1L4vaaPnh1V8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5
OTNkMB4XDTI0MTAxMjAxMDAzMloXDTI1MDExMDAyMDAzMlowLzEtMCsGA1UEAxMk
Y2IzMTcyNTctODRiMi00ZjFiLThjMjItMDdiY2FjYTA0MzBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJZU32FLBVIjnAFhnCTnW9Phy+nWjuKpe5SF
Eerc+QmByKLqCOIWGbxrqB9jfj0YTGgXjqN4mVEBqnT7vLqUhLCzPQQCsajuPzJB
p9VVxdPVB0kkIGq4cYuoRmoEMZzG4Oc3k45OLapMENj6VO8ZPQcrtmyrf9QGlGTx
uq0gjOdvcwf4dg1WTIrrGJV02EuaLqHM17pi5ma7Wg6e9TsSW+V+W+Po9IB1Ik8c
6VcHVgMyDxm9ZPx+T8LOOZQvp/jKCu1MJs8Uqi7L6Xf6vpPXXB17S4wjxPi+N/hu
h2P8vNk/kimYRJCdw/XwDo9TZxEOoAiZF0anunT1vsZlKtwG5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEDBu5ONb9maKra910HM5bD5/O11MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi
OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvMjUyM2E0NjAtNDU0Yi0z
ODdkLThhOTQtNWM0MGY4ZjdkMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky
NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk
OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy
NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADHD0nqWa9NdCdaIQZeuetrIkJwf++OZZHsl1BH840li0D2+4RQq
JQ2l9G1KkDpZfRBPp9SIA2MX2/uFRdIFIH11Ml2ZVHIaMzQMjfESnmp6klGezmvx
z+Cx1228w4wmRhmwOsAeR1fKAOsZ4S1CGQccoi0pGjkuovwf1B7XQpJcOpS2u+9+
5V+VB6TTNnGOKgF9fIkARahGt1DMg2rTqMtNcCbAtDS+Cdsfcs7RyaZSfhLJ6ig5
1zv6SwB8XmEMJtPod7OSuq7+QekTTfeqSaq6Vc6M83ToufgmyXNA4ydUBEnRKgg8
ZdiPZa/XlAz1MFh9NiXtVfxZPTAcmurn6VM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:37 2024 by rpki-client on console-fra.rpki-client.org