Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/c1dbc48f-cb0b-3a0d-b700-86c10412a416.roa
File:                     c1dbc48f-cb0b-3a0d-b700-86c10412a416.roa (raw, json)
Hash identifier:          pf7KdlAyiikZA/LIxn6VkSLlisDJV7/Z7Me/Mrto3Vw=
Subject key identifier:   17:B4:3A:BC:1E:AD:D1:B2:F3:12:C7:03:13:1E:2B:CF:3A:CC:1A:1C
Certificate issuer:       /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial:       010D0C9F43285847B3CC195AF700C3FE83F4F600
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/c1dbc48f-cb0b-3a0d-b700-86c10412a416.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     40401
IP address blocks:        2620:12e:c000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:19:5a:f7:00:c3:fe:83:f4:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=b38bff44-b889-4dbf-994d-f26b40f4242f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:44:ae:d6:9d:25:e3:6c:e9:fc:a6:a7:42:bf:
                    36:6a:5b:f0:74:d8:14:ed:78:37:8a:6b:aa:d1:d7:
                    d8:c9:ed:f1:e2:1c:54:c9:bc:83:b3:c4:58:d0:e5:
                    0c:3f:9d:14:d6:9d:d6:a2:23:4c:60:ac:06:e9:1e:
                    3e:09:ce:bb:67:bf:77:f8:d1:b8:85:30:a4:41:31:
                    51:e5:43:61:e5:30:e6:4d:bb:f5:94:4b:16:e9:78:
                    16:70:ed:9f:db:ba:03:67:4d:39:a1:bb:bb:de:9e:
                    2e:60:b7:c0:9f:1f:0e:98:7b:9b:48:d3:15:cd:a9:
                    27:7b:69:f6:52:30:ff:fd:a7:2a:79:1b:b8:94:dd:
                    8d:14:ba:c6:3e:53:24:ac:a2:e4:24:6c:3c:2a:cd:
                    1b:a6:e7:7d:e3:4b:6f:1c:9b:a0:e4:ba:eb:1c:e8:
                    b6:28:48:7f:d9:cb:c0:a7:80:39:28:be:d1:8e:13:
                    23:20:8b:c6:d5:33:c3:e3:cf:fa:44:f6:9c:1e:13:
                    7b:88:08:de:72:3a:29:6a:e8:2e:6b:7c:43:e7:b3:
                    c3:7d:db:9a:67:ae:88:bf:2b:72:a6:73:05:6f:9f:
                    8e:55:20:63:ff:ea:b4:23:da:cf:8e:57:5b:c0:56:
                    a4:67:ec:46:86:14:b7:16:61:f3:3e:99:21:9a:7e:
                    44:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B4:3A:BC:1E:AD:D1:B2:F3:12:C7:03:13:1E:2B:CF:3A:CC:1A:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/c1dbc48f-cb0b-3a0d-b700-86c10412a416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl

            X509v3 Authority Key Identifier:
                keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12e:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ac:e8:c1:b0:82:fe:70:30:79:32:58:ea:97:95:d6:fd:07:
         62:11:a3:ab:3d:7c:e6:90:07:c5:0d:12:b1:47:d3:30:7b:fb:
         05:a2:2e:ea:c9:f0:15:fb:b4:c3:a9:8d:34:d9:32:92:18:3d:
         05:60:44:c8:06:84:62:04:4f:13:58:ae:3d:58:d7:07:33:5b:
         f8:9d:df:a2:54:28:f7:1a:80:7a:a1:86:c0:14:bb:0d:83:c5:
         a4:64:bf:5b:f0:69:63:dc:6e:2e:1f:7f:c3:15:12:b5:9d:eb:
         91:66:0e:38:60:aa:d4:5c:0b:d4:7d:5c:82:ec:63:5d:0c:94:
         32:d8:7f:c8:8b:7a:cb:43:a2:b8:ad:4d:80:ac:8e:9a:db:62:
         ed:ab:c3:12:eb:ea:ab:04:e7:21:7c:34:10:93:11:c4:05:15:
         40:dc:fa:ce:09:d8:3a:4f:f8:66:61:3d:1b:8b:43:d9:5f:65:
         68:af:49:8a:f8:f4:8f:14:50:77:7b:bd:b6:75:41:70:fd:54:
         33:15:e8:7e:a4:00:78:2f:53:1b:f1:cd:ca:ee:0e:c3:18:ac:
         5f:ac:fd:e4:87:75:f9:66:11:1e:82:a2:df:22:52:00:1d:32:
         76:f2:a5:27:fa:ed:11:d7:d6:40:c0:16:73:fe:4a:5b:02:28:
         95:f9:a1:71
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEezzBla9wDD/oP09gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2MzMTNlMzktOTFmMS00MWZjLWJjNWMtZDIxM2E0Mjll
Mjg3MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk
YjM4YmZmNDQtYjg4OS00ZGJmLTk5NGQtZjI2YjQwZjQyNDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0Su1p0l42zp/KanQr82alvwdNgU7Xg3imuq
0dfYye3x4hxUybyDs8RY0OUMP50U1p3WoiNMYKwG6R4+Cc67Z793+NG4hTCkQTFR
5UNh5TDmTbv1lEsW6XgWcO2f27oDZ005obu73p4uYLfAnx8OmHubSNMVzakne2n2
UjD//acqeRu4lN2NFLrGPlMkrKLkJGw8Ks0bpud940tvHJug5LrrHOi2KEh/2cvA
p4A5KL7RjhMjIIvG1TPD48/6RPacHhN7iAjecjopaugua3xD57PDfduaZ66Ivyty
pnMFb5+OVSBj/+q0I9rPjldbwFakZ+xGhhS3FmHzPpkhmn5EiwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBe0OrwerdGy8xLHAxMeK886zBocMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMx
M2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEzYTQyOWUyODcvYzFkYmM0OGYtY2IwYi0z
YTBkLWI3MDAtODZjMTA0MTJhNDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2MzMTNlMzktOTFmMS00MWZjLWJj
NWMtZDIxM2E0MjllMjg3LzdjMzEzZTM5LTkxZjEtNDFmYy1iYzVjLWQyMTNhNDI5
ZTI4Ny5jcmwwHwYDVR0jBBgwFoAUfZc5aNgWxyYUfpq5JQWS6V07FCEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMxM2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEz
YTQyOWUyODcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABLsAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADus6MGwgv5wMHkyWOqXldb9B2IRo6s9fOaQB8UNErFH0zB7+wWi
LurJ8BX7tMOpjTTZMpIYPQVgRMgGhGIETxNYrj1Y1wczW/id36JUKPcagHqhhsAU
uw2DxaRkv1vwaWPcbi4ff8MVErWd65FmDjhgqtRcC9R9XILsY10MlDLYf8iLestD
oritTYCsjprbYu2rwxLr6qsE5yF8NBCTEcQFFUDc+s4J2DpP+GZhPRuLQ9lfZWiv
SYr49I8UUHd7vbZ1QXD9VDMV6H6kAHgvUxvxzcruDsMYrF+s/eSHdflmER6Cot8i
UgAdMnbypSf67RHX1kDAFnP+SlsCKJX5oXE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org