Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e0276a2e-9530-3b7e-afb5-6f2b55d27b71.roa
File:                     e0276a2e-9530-3b7e-afb5-6f2b55d27b71.roa (raw, json)
Hash identifier:          D8xuCrNpxZi8ynDIRltEoMLa804ckuWjd0lUf9tdVGU=
Subject key identifier:   CF:31:73:D7:CA:47:DF:C0:CF:6E:D1:FD:83:DB:D4:10:41:C4:6C:45
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F43285847739660C8BD7EC8DECAFD9E80
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e0276a2e-9530-3b7e-afb5-6f2b55d27b71.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2620:1f7:c020::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:60:c8:bd:7e:c8:de:ca:fd:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=6a852336-a0a8-411b-88c8-463686f3d3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8e:9a:34:26:29:ed:36:cf:2b:07:c4:6d:be:
                    55:f3:4a:df:d0:0c:83:0b:06:96:ae:bb:5f:cf:27:
                    1c:f5:ec:8c:06:21:65:ed:86:74:a9:37:97:4f:cc:
                    ea:11:a4:36:7e:f5:98:ed:30:d1:50:10:02:c1:f1:
                    14:53:ed:7d:b4:d9:b0:3e:b2:c5:4f:f1:e9:24:60:
                    66:b6:c4:e7:17:1b:79:74:b8:a0:c3:a6:02:15:c5:
                    e4:43:bb:4d:9c:3f:d7:17:d8:26:ed:b2:06:9b:1e:
                    5b:2c:6b:0a:38:34:65:6d:f3:66:3e:92:0b:16:06:
                    13:7c:37:70:98:9a:f1:45:4a:72:58:f3:26:1a:c2:
                    0a:be:e9:11:24:16:1f:34:ab:fd:c8:65:33:be:cb:
                    cc:5f:20:55:a6:60:fd:78:9c:d0:1b:56:d9:d7:87:
                    17:3c:bb:95:fb:d4:14:b8:ca:28:26:54:e4:4f:b4:
                    0c:8a:3b:06:4f:c3:bb:6c:43:fd:b0:c6:e3:eb:a9:
                    a8:86:63:f2:ae:69:3a:6b:3c:4a:55:5f:04:21:3a:
                    ef:ca:1c:9b:a9:af:cc:e0:7e:34:57:a0:f7:21:cc:
                    39:94:ee:8c:96:b4:a6:11:e6:4b:9d:0d:55:7a:98:
                    5d:e3:83:20:2d:18:2e:b1:94:7b:eb:39:41:14:fc:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:31:73:D7:CA:47:DF:C0:CF:6E:D1:FD:83:DB:D4:10:41:C4:6C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e0276a2e-9530-3b7e-afb5-6f2b55d27b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:7b:fd:f1:af:c6:31:05:82:77:8f:84:06:d2:fa:16:e4:28:
         af:f8:d0:7d:48:a3:64:fb:fb:54:56:26:14:fa:57:04:d2:41:
         51:8e:a8:4e:df:a9:b0:64:ef:7a:c5:e7:04:22:e3:93:ce:3d:
         1c:9f:e1:b2:7c:9b:2f:ed:b6:c4:6f:e7:82:9a:da:1f:44:d5:
         ce:67:29:1d:70:55:d1:f7:82:07:28:8e:30:ce:9a:f8:64:ee:
         1b:3b:60:92:5c:fb:7b:0d:1c:61:93:ef:33:70:b6:a7:b2:78:
         d6:ee:3b:88:e8:12:3a:8f:17:4e:bf:22:4d:52:5a:62:bc:10:
         80:d0:e2:18:f4:74:2a:b4:bd:de:57:d7:d6:58:78:a6:09:9e:
         17:de:e0:25:bc:77:5f:b2:bd:de:96:81:6b:0f:43:af:64:50:
         4b:1b:1e:ab:ae:e7:1c:7c:49:e5:0d:6a:ee:52:6c:08:8c:09:
         2d:f1:b0:9f:b7:c5:84:a4:34:df:92:0f:78:2b:eb:cb:f0:78:
         ba:67:97:c8:9c:17:0c:3f:f0:8a:5f:7d:bb:be:fa:97:4b:e5:
         d5:06:fa:3e:2e:03:8b:ed:d0:ca:ae:74:a7:36:72:fe:fe:93:
         8f:bd:d3:e9:05:cc:75:a5:b6:60:73:74:1b:c0:3b:11:46:cf:
         f8:b1:86:c7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdzlmDIvX7I3sr9noAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5
OTNkMB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NmE4NTIzMzYtYTBhOC00MTFiLTg4YzgtNDYzNjg2ZjNkM2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi46aNCYp7TbPKwfEbb5V80rf0AyDCwaWrrtf
zycc9eyMBiFl7YZ0qTeXT8zqEaQ2fvWY7TDRUBACwfEUU+19tNmwPrLFT/HpJGBm
tsTnFxt5dLigw6YCFcXkQ7tNnD/XF9gm7bIGmx5bLGsKODRlbfNmPpILFgYTfDdw
mJrxRUpyWPMmGsIKvukRJBYfNKv9yGUzvsvMXyBVpmD9eJzQG1bZ14cXPLuV+9QU
uMooJlTkT7QMijsGT8O7bEP9sMbj66mohmPyrmk6azxKVV8EITrvyhybqa/M4H40
V6D3Icw5lO6MlrSmEeZLnQ1Vephd44MgLRgusZR76zlBFPzCwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM8xc9fKR9/Az27R/YPb1BBBxGxFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi
OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvZTAyNzZhMmUtOTUzMC0z
YjdlLWFmYjUtNmYyYjU1ZDI3YjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky
NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk
OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy
NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98Ag
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAt7/fGvxjEFgnePhAbS+hbkKK/40H1Io2T7+1RWJhT6VwTSQVGO
qE7fqbBk73rF5wQi45POPRyf4bJ8my/ttsRv54Ka2h9E1c5nKR1wVdH3ggcojjDO
mvhk7hs7YJJc+3sNHGGT7zNwtqeyeNbuO4joEjqPF06/Ik1SWmK8EIDQ4hj0dCq0
vd5X19ZYeKYJnhfe4CW8d1+yvd6WgWsPQ69kUEsbHquu5xx8SeUNau5SbAiMCS3x
sJ+3xYSkNN+SD3gr68vweLpnl8icFww/8Ipffbu++pdL5dUG+j4uA4vt0MqudKc2
cv7+k4+90+kFzHWltmBzdBvAOxFGz/ixhsc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:24 2024 by rpki-client on console-ams.rpki-client.org