Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d55e0fe8-e623-358e-8724-18bd483855d9.roa
File:                     d55e0fe8-e623-358e-8724-18bd483855d9.roa (raw, json)
Hash identifier:          +B6aoOgP2/cQnl7sXWmxmTcCOlAczCDP7iro6W4XMvI=
Subject key identifier:   3D:5D:DC:AB:0B:E4:3B:C6:13:F4:E8:01:B0:22:D4:90:A3:48:0C:C6
Certificate issuer:       /CN=487abf98-3073-43c6-b10e-a615e64ccc65
Certificate serial:       010D0C9F43285845BA7E332D8E39D91DB7EE9E80
Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d55e0fe8-e623-358e-8724-18bd483855d9.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        2620:133:c000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:33:2d:8e:39:d9:1d:b7:ee:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=90348423-3470-4506-b9a7-39d9fcc5cbcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:af:61:38:15:1c:98:39:61:84:63:f6:59:
                    99:9a:93:73:79:bc:2f:98:27:1c:87:a6:f3:94:58:
                    ba:07:a5:6a:9a:ee:54:6e:ad:b3:1b:22:10:a3:14:
                    58:88:d4:04:df:4c:e7:b2:43:5b:9b:d3:7f:01:58:
                    4b:e5:1e:24:3c:fa:80:b6:73:d6:49:5e:ae:9e:4a:
                    fb:dd:b6:de:a3:8d:91:73:b7:89:7a:10:84:14:a0:
                    b9:82:6d:fe:c2:76:fb:57:f2:2d:df:4a:e3:82:e8:
                    ff:ab:c2:e7:9a:3f:57:25:76:91:94:82:07:3a:36:
                    57:85:da:70:61:d6:09:57:4c:25:13:7d:cb:30:a3:
                    b5:76:1b:05:d4:d2:9b:06:31:4a:e8:fe:a0:d8:72:
                    1d:b4:67:d2:5a:67:7e:6d:73:33:13:28:5c:28:b3:
                    2c:69:fe:54:6d:95:8c:1f:86:e4:3e:2b:2d:a7:00:
                    2a:9f:14:96:d2:4f:95:8f:e3:52:ee:f0:52:f7:18:
                    68:a5:04:eb:5c:fe:dc:e6:d0:23:be:2b:89:2a:fa:
                    9b:2e:b2:92:51:f7:18:40:fb:ac:c8:e4:fb:a1:68:
                    b3:2c:0e:a0:73:c3:01:25:a5:06:af:56:0f:61:ae:
                    1b:53:43:2e:08:a8:64:e6:c5:04:19:07:72:54:5c:
                    2a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5D:DC:AB:0B:E4:3B:C6:13:F4:E8:01:B0:22:D4:90:A3:48:0C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d55e0fe8-e623-358e-8724-18bd483855d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl

            X509v3 Authority Key Identifier:
                keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:133:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:96:c5:32:e1:15:1a:06:62:3c:8b:49:ad:57:46:ef:85:af:
         79:7c:0b:6f:9a:b3:c5:cf:33:ae:d3:d7:18:28:e0:91:09:bd:
         08:03:20:6d:bc:cd:cd:e9:0f:57:7a:c1:36:6e:09:8d:d0:52:
         7e:34:d3:79:a1:a3:83:5e:05:27:87:c4:57:f3:06:80:4a:d9:
         70:f4:87:81:1a:e6:c0:e2:bf:90:40:25:47:8d:f5:f2:59:7f:
         06:2e:a3:54:ba:1d:23:e6:e3:72:0c:4a:19:e6:b4:11:cc:82:
         c6:d7:ec:7e:d5:80:2f:a4:78:3f:3d:df:6a:ed:ad:f3:f4:54:
         ee:87:72:96:f8:55:87:3a:5c:40:bd:c2:02:bf:86:ea:00:d5:
         d4:36:9d:b4:5c:32:00:57:c2:3b:9e:63:73:c5:d3:23:78:74:
         7c:a6:ce:86:1a:44:a7:60:fb:7f:96:14:4b:f4:64:50:9f:fa:
         1c:5c:2f:39:65:b5:36:77:0b:88:aa:f7:86:2e:84:bc:b5:f6:
         3d:72:57:a1:2b:67:62:70:0e:14:ed:c1:d4:d5:48:ac:d8:7c:
         29:da:4f:40:4b:b3:5d:a6:8a:a8:28:86:40:bf:1e:72:15:ce:
         71:13:b0:e8:64:dc:69:c3:fc:3a:94:4b:87:13:e9:22:50:b4:
         4b:b3:3b:62
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEW6fjMtjjnZHbfunoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj
YzY1MB4XDTI0MDUwMTEzMDAzNFoXDTI0MDczMDEzMDAzNFowLzEtMCsGA1UEAxMk
OTAzNDg0MjMtMzQ3MC00NTA2LWI5YTctMzlkOWZjYzVjYmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnimvYTgVHJg5YYRj9lmZmpNzebwvmCcch6bz
lFi6B6Vqmu5Ubq2zGyIQoxRYiNQE30znskNbm9N/AVhL5R4kPPqAtnPWSV6unkr7
3bbeo42Rc7eJehCEFKC5gm3+wnb7V/It30rjguj/q8Lnmj9XJXaRlIIHOjZXhdpw
YdYJV0wlE33LMKO1dhsF1NKbBjFK6P6g2HIdtGfSWmd+bXMzEyhcKLMsaf5UbZWM
H4bkPistpwAqnxSW0k+Vj+NS7vBS9xhopQTrXP7c5tAjviuJKvqbLrKSUfcYQPus
yOT7oWizLA6gc8MBJaUGr1YPYa4bU0MuCKhk5sUEGQdyVFwqUQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD1d3KsL5DvGE/ToAbAi1JCjSAzGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh
YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvZDU1ZTBmZTgtZTYyMy0z
NThlLTg3MjQtMThiZDQ4Mzg1NWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx
MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj
Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1
ZTY0Y2NjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABM8AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMuWxTLhFRoGYjyLSa1XRu+Fr3l8C2+as8XPM67T1xgo4JEJvQgD
IG28zc3pD1d6wTZuCY3QUn4003mho4NeBSeHxFfzBoBK2XD0h4Ea5sDiv5BAJUeN
9fJZfwYuo1S6HSPm43IMShnmtBHMgsbX7H7VgC+keD8932rtrfP0VO6Hcpb4VYc6
XEC9wgK/huoA1dQ2nbRcMgBXwjueY3PF0yN4dHymzoYaRKdg+3+WFEv0ZFCf+hxc
LzlltTZ3C4iq94YuhLy19j1yV6ErZ2JwDhTtwdTVSKzYfCnaT0BLs12miqgohkC/
HnIVznETsOhk3GnD/DqUS4cT6SJQtEuzO2I=
-----END CERTIFICATE-----
Generated at Thu May 2 22:30:30 2024 by rpki-client on console-ams.rpki-client.org