Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b14f6dc6-aac6-354c-b773-19074de6cb64.roa
File:                     b14f6dc6-aac6-354c-b773-19074de6cb64.roa (raw, json)
Hash identifier:          Lc6TDOUFmqfdvwMU9g/Kap0+pYsMxxMYAs3uzrCFAQo=
Subject key identifier:   E2:74:BD:2F:C6:F3:C2:B3:79:7A:A0:BE:28:D0:A3:1D:B0:5C:B0:32
Certificate issuer:       /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
Certificate serial:       010D0C9F43285847AE36C5705DC6EC17A1E54340
Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b14f6dc6-aac6-354c-b773-19074de6cb64.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2620:197:de0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c5:70:5d:c6:ec:17:a1:e5:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=69e45c47-2cbd-4cc8-912e-bb23d566b454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:ed:20:57:ce:c0:80:76:8b:22:db:98:0f:
                    dc:a2:1a:24:a1:43:44:8b:0a:3c:5d:57:0e:43:1b:
                    5b:d0:f1:fa:6f:f3:e0:ce:a5:b8:9a:f9:0f:d8:30:
                    e9:ae:c9:a4:7d:92:dd:c9:18:87:c5:a6:3d:ff:69:
                    8e:08:7f:24:d2:4d:6b:1e:98:c5:e4:fa:fb:cf:a2:
                    e7:4d:6e:b3:6e:15:18:68:e0:1f:c0:73:33:1c:23:
                    49:7a:4c:e5:02:3c:33:49:3e:66:fc:46:90:ee:7e:
                    17:fd:37:b8:dc:ca:07:46:0f:2d:c0:dd:f7:1d:92:
                    02:15:51:69:29:84:6e:54:a2:90:dc:27:8f:ab:50:
                    8c:f7:6b:9d:36:ad:9d:3e:c3:8d:a4:ca:8f:a7:2c:
                    46:3e:23:65:4b:e0:0b:94:34:b6:ab:43:90:cf:fb:
                    f2:e0:23:e8:e7:3d:b7:d5:66:31:73:89:f5:de:a2:
                    b6:f7:ce:a1:3f:29:38:70:0b:66:46:96:28:45:4b:
                    32:c1:75:18:64:b0:17:a9:e2:aa:16:15:0a:ab:78:
                    aa:0b:77:49:6f:69:c3:f7:e4:da:32:42:5b:c4:84:
                    09:af:8d:99:4b:5c:ca:67:90:3c:d6:b8:1f:52:4a:
                    f6:4d:d8:fe:f8:e5:a4:ce:f2:ba:d2:18:7e:b9:f9:
                    aa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:74:BD:2F:C6:F3:C2:B3:79:7A:A0:BE:28:D0:A3:1D:B0:5C:B0:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b14f6dc6-aac6-354c-b773-19074de6cb64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl

            X509v3 Authority Key Identifier:
                keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:197:de0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e5:15:a5:09:0b:ba:3d:ff:ef:be:f6:c2:84:26:c3:a4:1b:
         87:f0:7b:c8:73:42:2f:1f:2a:f4:2c:44:71:fc:e0:80:9c:65:
         e0:20:6a:86:42:3c:99:52:af:89:76:c8:7a:cf:28:99:5b:ce:
         4f:92:97:e1:a7:5f:8c:b9:af:1e:ce:7a:e3:27:8d:18:11:4d:
         7e:29:01:f9:d3:6b:9c:7e:96:00:74:b3:08:26:31:75:1e:f5:
         83:21:02:3a:51:1a:36:0c:cc:7a:f7:e0:9c:c3:c2:74:a3:6e:
         06:6a:2b:05:df:6f:92:7c:f7:84:0a:8a:af:f9:d6:32:6f:09:
         e4:7f:2d:82:b6:9b:75:bf:fa:77:7f:14:0a:08:f0:4e:52:1b:
         6f:cd:01:02:b1:7d:d4:15:c1:b0:c5:91:b3:8b:a8:d0:3f:78:
         19:ae:9b:58:9c:68:f2:2e:87:46:3f:ea:14:92:04:50:3b:24:
         1e:a9:f4:bd:55:05:a8:4d:b3:83:ed:93:78:54:68:d3:fc:7f:
         7e:f8:c3:fc:9d:23:2f:53:38:09:52:79:30:13:30:b4:4e:08:
         19:fd:69:ee:f3:71:06:fb:ee:f5:bb:e1:78:66:89:1c:eb:b8:
         5b:ce:ae:27:bc:4e:85:56:ef:ef:a8:cc:76:c5:5b:c5:ab:fe:
         82:09:a6:08
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeuNsVwXcbsF6HlQ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4
ZGMzMB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
NjllNDVjNDctMmNiZC00Y2M4LTkxMmUtYmIyM2Q1NjZiNDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEXtIFfOwIB2iyLbmA/cohokoUNEiwo8XVcO
Qxtb0PH6b/PgzqW4mvkP2DDprsmkfZLdyRiHxaY9/2mOCH8k0k1rHpjF5Pr7z6Ln
TW6zbhUYaOAfwHMzHCNJekzlAjwzST5m/EaQ7n4X/Te43MoHRg8twN33HZICFVFp
KYRuVKKQ3CePq1CM92udNq2dPsONpMqPpyxGPiNlS+ALlDS2q0OQz/vy4CPo5z23
1WYxc4n13qK2986hPyk4cAtmRpYoRUsywXUYZLAXqeKqFhUKq3iqC3dJb2nD9+Ta
MkJbxIQJr42ZS1zKZ5A81rgfUkr2Tdj++OWkzvK60hh+ufmqNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOJ0vS/G88KzeXqgvijQox2wXLAyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4
ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvYjE0ZjZkYzYtYWFjNi0z
NTRjLWI3NzMtMTkwNzRkZTZjYjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm
ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0
OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw
MGRiNDhkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABlw3g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAADlFaUJC7o9/+++9sKEJsOkG4fwe8hzQi8fKvQsRHH84ICcZeAg
aoZCPJlSr4l2yHrPKJlbzk+Sl+GnX4y5rx7OeuMnjRgRTX4pAfnTa5x+lgB0swgm
MXUe9YMhAjpRGjYMzHr34JzDwnSjbgZqKwXfb5J894QKiq/51jJvCeR/LYK2m3W/
+nd/FAoI8E5SG2/NAQKxfdQVwbDFkbOLqNA/eBmum1icaPIuh0Y/6hSSBFA7JB6p
9L1VBahNs4Ptk3hUaNP8f374w/ydIy9TOAlSeTATMLROCBn9ae7zcQb77vW74Xhm
iRzruFvOrie8ToVW7++ozHbFW8Wr/oIJpgg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org