Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa
File:                     5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa (raw, json)
Hash identifier:          RDj/YyD/UetcWSogAB63dGFT7ketmKeIjtac2Pn85E0=
Subject key identifier:   81:EA:E7:0F:33:9E:99:F7:1E:95:DE:68:6A:F7:A0:17:DD:F4:CD:85
Certificate issuer:       /CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6
Certificate serial:       010D0C9F432858454D9D78793E5F80492A751150
Authority key identifier: 6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     14618
IP address blocks:        2620:10b:b008::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:78:79:3e:5f:80:49:2a:75:11:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=351185e4-baf4-4d03-959e-525f1b636990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:63:22:28:20:a2:5c:1c:c5:c5:57:50:18:c7:
                    fe:62:38:e9:6a:a0:ed:ea:6b:18:09:99:bc:7a:5e:
                    c7:a2:73:e5:bb:b3:9f:7b:0f:4c:4e:5c:c7:79:59:
                    b4:8b:8e:1e:70:08:82:15:20:58:6f:d0:fb:30:a6:
                    8c:4b:d8:2a:a6:e3:3d:1a:8f:a9:0b:b7:2c:e1:3c:
                    51:b5:70:16:a1:17:09:e2:19:34:ba:e1:39:38:4c:
                    ee:e5:c6:cc:e8:d7:40:39:61:e3:e7:e3:07:77:ca:
                    9b:2e:b9:c8:f6:fb:a4:80:8e:fa:4f:97:e9:5d:d2:
                    81:da:48:7f:6c:29:92:c5:1b:a8:fa:cb:06:1b:2c:
                    14:8a:8d:4e:c2:d7:87:7e:85:47:1a:de:2d:d2:65:
                    94:2a:b8:80:ca:6d:89:da:5b:61:03:03:5d:1c:a9:
                    05:dd:62:f6:ec:79:47:a8:be:52:37:25:66:33:6c:
                    99:53:b0:5c:44:55:79:c0:b1:29:9f:44:db:f5:5c:
                    fa:25:24:46:0b:8c:eb:b5:81:43:37:e8:bd:e9:81:
                    54:c4:47:b5:42:e4:68:c0:48:41:5a:81:7d:ba:a6:
                    98:c3:02:df:88:03:01:1e:de:77:8c:6e:d4:07:a9:
                    23:52:57:29:b3:1b:e6:27:33:6b:ec:79:ac:f3:f6:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EA:E7:0F:33:9E:99:F7:1E:95:DE:68:6A:F7:A0:17:DD:F4:CD:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl

            X509v3 Authority Key Identifier:
                keyid:6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10b:b008::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d3:cc:3b:45:56:93:89:13:58:4e:4f:a7:9b:6e:90:6a:f8:
         9f:f4:83:77:38:17:11:18:08:4d:0a:fc:d6:c3:23:e7:0e:76:
         ca:43:f5:92:7e:26:8d:1e:49:84:5e:22:d5:48:65:63:13:32:
         6e:5b:41:7f:a0:36:ef:d8:39:5e:99:cc:e7:b7:c2:9e:8b:c2:
         db:9e:33:a9:60:bf:ee:9d:a6:cc:42:02:7d:be:c7:b0:b2:6e:
         f3:f3:d8:e4:48:43:30:65:95:cb:46:08:d7:ee:63:d9:9f:78:
         5c:9e:51:f5:fd:1e:6b:45:cc:a1:8c:4e:95:15:12:ba:f1:75:
         c9:46:6b:cf:d2:bd:91:35:82:0e:6b:5d:d6:86:75:78:ad:e5:
         c9:62:3e:f4:58:35:ba:d0:47:fe:36:22:77:d7:9c:17:76:a0:
         8b:ba:df:1b:56:e5:8d:42:86:1a:eb:91:63:e8:68:6e:2b:e3:
         23:ea:d2:d8:25:00:64:5c:91:72:1a:00:f2:74:32:06:c9:f7:
         90:18:62:1f:65:60:0f:99:cc:19:1f:04:99:9a:b3:84:aa:ae:
         44:07:3c:49:f6:3c:9c:3b:5a:25:ef:a4:14:db:cb:ae:2e:f3:
         fd:39:fa:89:3c:59:bd:75:73:67:df:2d:b0:de:c8:c6:a1:4a:
         fd:16:7a:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVNnXh5Pl+ASSp1EVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNlZjdkYjEtZDBmNy00YTk1LThjMzYtZDE2MmEyOGE1
MmM2MB4XDTI0MDMyMzEzMDAzMloXDTI0MDYyMTEzMDAzMlowLzEtMCsGA1UEAxMk
MzUxMTg1ZTQtYmFmNC00ZDAzLTk1OWUtNTI1ZjFiNjM2OTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42MiKCCiXBzFxVdQGMf+YjjpaqDt6msYCZm8
el7HonPlu7Ofew9MTlzHeVm0i44ecAiCFSBYb9D7MKaMS9gqpuM9Go+pC7cs4TxR
tXAWoRcJ4hk0uuE5OEzu5cbM6NdAOWHj5+MHd8qbLrnI9vukgI76T5fpXdKB2kh/
bCmSxRuo+ssGGywUio1OwteHfoVHGt4t0mWUKriAym2J2lthAwNdHKkF3WL27HlH
qL5SNyVmM2yZU7BcRFV5wLEpn0Tb9Vz6JSRGC4zrtYFDN+i96YFUxEe1QuRowEhB
WoF9uqaYwwLfiAMBHt53jG7UB6kjUlcpsxvmJzNr7Hms8/bRpwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIHq5w8znpn3HpXeaGr3oBfd9M2FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2Vm
N2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYyYTI4YTUyYzYvNWUzYWUxYzAtNGU1Yy0z
ODM5LWJjYzctODU5NDQ3NDFmNmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGNlZjdkYjEtZDBmNy00YTk1LThj
MzYtZDE2MmEyOGE1MmM2LzRjZWY3ZGIxLWQwZjctNGE5NS04YzM2LWQxNjJhMjhh
NTJjNi5jcmwwHwYDVR0jBBgwFoAUbEoioeXy+BtrS/P6NFeOguEXuyMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2VmN2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYy
YTI4YTUyYzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABC7AI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD/TzDtFVpOJE1hOT6ebbpBq+J/0g3c4FxEYCE0K/NbDI+cOdspD
9ZJ+Jo0eSYReItVIZWMTMm5bQX+gNu/YOV6ZzOe3wp6LwtueM6lgv+6dpsxCAn2+
x7CybvPz2ORIQzBllctGCNfuY9mfeFyeUfX9HmtFzKGMTpUVErrxdclGa8/SvZE1
gg5rXdaGdXit5cliPvRYNbrQR/42InfXnBd2oIu63xtW5Y1ChhrrkWPoaG4r4yPq
0tglAGRckXIaAPJ0MgbJ95AYYh9lYA+ZzBkfBJmas4SqrkQHPEn2PJw7WiXvpBTb
y64u8/05+ok8Wb11c2ffLbDeyMahSv0WejQ=
-----END CERTIFICATE-----
Generated at Wed May 1 20:51:36 2024 by rpki-client on console-ams.rpki-client.org