Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa
File:                     2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa (raw, json)
Hash identifier:          E6RY/xbFd6br14Hm8uFEXh0XGRNahaW3k1JqKAltwHc=
Subject key identifier:   71:05:0C:F7:17:FE:07:4C:E2:9F:0A:99:2A:8A:B7:7E:38:16:D8:5F
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F432858457D133639307435CFE98AE580
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        2620:113:1001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:36:39:30:74:35:cf:e9:8a:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=e05b8237-57cb-46f7-9889-5f4979086d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:ea:a2:fc:5e:f8:a5:dc:94:ef:8b:f6:65:
                    ab:17:11:c8:96:57:20:82:8e:ef:ce:00:82:72:1d:
                    a8:11:be:d8:76:0d:bb:43:e2:f8:64:20:fc:6d:74:
                    85:3f:d9:2c:8c:52:ae:6b:8c:c3:53:e8:1f:c8:5f:
                    8a:9d:b8:43:95:d7:51:b0:c2:9c:93:51:e1:8a:8a:
                    ec:85:54:d6:36:6a:82:3f:dc:86:b8:2f:52:26:f8:
                    8f:87:cd:d4:4b:20:7a:15:8c:76:86:39:0d:3b:35:
                    88:61:a9:a6:b8:85:21:31:dc:47:25:f2:7a:82:d5:
                    56:66:29:e1:fc:49:e4:ec:cf:9b:90:83:ba:0e:1c:
                    ef:ab:aa:45:28:89:a7:f9:d2:bb:75:7a:85:dd:9f:
                    ba:c7:93:98:8c:62:3a:eb:42:72:3f:75:8e:d4:6b:
                    48:ce:80:0b:92:3d:c6:69:23:90:29:58:bf:28:b8:
                    37:70:ab:7d:fd:7a:e4:fb:96:5b:80:5c:c8:b2:9f:
                    e2:97:18:07:ed:be:c3:df:98:7b:3a:06:33:79:1f:
                    a3:ca:2b:25:36:df:2e:87:7e:60:ad:89:e0:63:ac:
                    30:a4:c3:3f:ee:d0:97:74:91:d5:df:fc:e3:de:30:
                    1a:c4:1a:e6:63:93:f6:d0:dc:ca:d4:e1:13:a6:5a:
                    76:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:05:0C:F7:17:FE:07:4C:E2:9F:0A:99:2A:8A:B7:7E:38:16:D8:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:1001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c9:76:6f:77:c1:65:d5:46:88:d8:0a:88:62:f3:c4:22:4f:
         5a:07:b6:d1:bf:8a:d6:34:bb:c6:06:22:bb:3f:a0:77:94:5d:
         eb:22:b6:8d:a8:65:86:18:56:f0:bf:31:23:ce:4d:76:52:63:
         58:f5:f7:bd:71:ef:b1:4e:91:01:d1:5f:77:cf:55:96:b9:b3:
         b8:94:37:80:d0:d4:09:5e:05:af:9e:3e:3c:ca:6d:8f:84:cf:
         4b:3e:c1:96:f0:22:b5:fd:b2:7a:f5:a2:0f:44:4e:ac:1c:e1:
         9c:c7:e3:d7:59:9a:26:79:8a:20:c3:38:f2:23:32:f7:51:9a:
         22:dc:ad:eb:a5:64:47:e7:23:d1:1c:7c:36:97:d7:a0:30:1d:
         42:eb:1a:e1:da:07:fd:77:88:f2:92:28:01:c8:ee:ac:93:14:
         3d:a0:d8:4f:90:b6:3b:42:0e:32:ef:dd:d2:da:1d:c6:2c:2f:
         b1:0a:73:62:2c:96:5f:05:a0:29:8a:c5:89:4a:3f:57:78:0d:
         f5:ea:4f:0f:4c:4d:c4:25:57:c9:4f:b8:70:f6:1a:cb:bf:ee:
         21:6a:88:f0:0b:f5:93:53:db:8b:0b:95:66:07:46:b8:b9:66:
         18:79:3e:23:1c:a1:88:94:e5:d7:a1:8b:4c:e0:ab:8f:14:da:
         78:01:bc:80
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV9EzY5MHQ1z+mK5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5
ZWE5MB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk
ZTA1YjgyMzctNTdjYi00NmY3LTk4ODktNWY0OTc5MDg2ZDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxDqovxe+KXclO+L9mWrFxHIllcggo7vzgCC
ch2oEb7Ydg27Q+L4ZCD8bXSFP9ksjFKua4zDU+gfyF+KnbhDlddRsMKck1Hhiors
hVTWNmqCP9yGuC9SJviPh83USyB6FYx2hjkNOzWIYammuIUhMdxHJfJ6gtVWZinh
/Enk7M+bkIO6Dhzvq6pFKImn+dK7dXqF3Z+6x5OYjGI660JyP3WO1GtIzoALkj3G
aSOQKVi/KLg3cKt9/Xrk+5ZbgFzIsp/ilxgH7b7D35h7OgYzeR+jyislNt8uh35g
rYngY6wwpMM/7tCXdJHV3/zj3jAaxBrmY5P20NzK1OETplp2OwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHEFDPcX/gdM4p8KmSqKt344FthfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh
ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvMmRjYzMxNjEtNjljNy0z
OGE1LTgyZWYtYjc3NTJjNmU3YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy
OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx
OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz
MjkyMTllYTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABExAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB3Jdm93wWXVRojYCohi88QiT1oHttG/itY0u8YGIrs/oHeUXesi
to2oZYYYVvC/MSPOTXZSY1j1971x77FOkQHRX3fPVZa5s7iUN4DQ1AleBa+ePjzK
bY+Ez0s+wZbwIrX9snr1og9ETqwc4ZzH49dZmiZ5iiDDOPIjMvdRmiLcreulZEfn
I9EcfDaX16AwHULrGuHaB/13iPKSKAHI7qyTFD2g2E+QtjtCDjLv3dLaHcYsL7EK
c2Isll8FoCmKxYlKP1d4DfXqTw9MTcQlV8lPuHD2Gsu/7iFqiPAL9ZNT24sLlWYH
Rri5Zhh5PiMcoYiU5dehi0zgq48U2ngBvIA=
-----END CERTIFICATE-----
Generated at Thu May 2 03:28:43 2024 by rpki-client on console-ams.rpki-client.org