Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/c805133a-6cf1-3d14-bae5-074c7cdbd175.roa
File:                     c805133a-6cf1-3d14-bae5-074c7cdbd175.roa (raw, json)
Hash identifier:          ei9m3ZFPKjzkci8ldx/EEDPbvWTBfj2m/hYH1NJrikY=
Subject key identifier:   F2:05:BE:3E:90:4B:62:4C:0D:F7:11:52:BD:84:F9:47:8D:BD:53:7C
Certificate issuer:       /CN=928d2060-10a9-4ea3-becb-9d0ffe02a156
Certificate serial:       010D0C9F432858474F4B7A98EB37C00FE4FCF8A0
Authority key identifier: E9:A2:53:7A:2E:7F:88:7F:5B:ED:46:A5:8B:5D:83:4C:C4:1F:84:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/c805133a-6cf1-3d14-bae5-074c7cdbd175.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     22953
IP address blocks:        2620:60:8000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:7a:98:eb:37:c0:0f:e4:fc:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928d2060-10a9-4ea3-becb-9d0ffe02a156
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=98615765-cdd8-4df8-93c0-6ff917f89f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d5:9f:5f:ab:dc:b7:07:8e:7e:17:07:c2:80:
                    aa:f6:b1:f2:57:6a:8c:08:4a:c4:81:d1:c4:34:da:
                    d7:81:7c:c5:2c:ab:1b:e0:88:ab:44:68:e5:bc:3e:
                    33:09:4f:ca:48:5e:7b:14:44:5b:1d:5a:61:65:c3:
                    18:41:b0:bc:77:06:09:a6:16:70:61:7a:61:63:86:
                    b0:ed:ae:aa:58:db:91:37:45:08:ca:a9:af:09:8c:
                    3c:09:76:4a:83:51:63:57:ea:b9:31:94:f3:53:07:
                    35:e4:64:84:9e:5f:d7:8f:58:59:49:3d:49:25:27:
                    db:ad:47:28:eb:39:fa:b0:74:0b:81:24:57:46:69:
                    aa:b1:9c:16:08:a1:85:92:46:9b:4d:63:52:2f:62:
                    66:4a:c0:15:f2:cb:7f:56:db:ab:e2:6c:0c:9c:11:
                    f0:71:c6:69:68:58:fd:28:63:78:f5:ec:80:e3:47:
                    43:a2:e7:58:c6:75:4b:a4:8a:06:8c:94:90:59:5e:
                    7d:2c:b1:b7:fc:bc:c9:bd:75:7e:a8:3a:5c:67:d2:
                    ce:96:95:6a:53:d0:ed:3a:44:b6:08:96:ef:6b:62:
                    43:67:93:44:0b:81:1d:94:d6:63:b5:59:a5:92:c2:
                    77:ed:58:b3:b4:8f:a5:b9:25:b7:f3:71:81:22:30:
                    47:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:05:BE:3E:90:4B:62:4C:0D:F7:11:52:BD:84:F9:47:8D:BD:53:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/c805133a-6cf1-3d14-bae5-074c7cdbd175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.crl

            X509v3 Authority Key Identifier:
                keyid:E9:A2:53:7A:2E:7F:88:7F:5B:ED:46:A5:8B:5D:83:4C:C4:1F:84:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:60:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:c3:ce:7a:5a:2a:38:58:79:f5:d9:e8:d0:d7:dc:31:95:df:
         12:44:25:c9:63:99:0f:7a:55:ca:ef:e7:bd:99:9a:bf:c2:cc:
         9b:7c:74:92:51:78:90:1d:7a:10:20:24:b1:f9:85:d3:77:f9:
         a3:ac:15:2a:ed:f1:f2:e9:dc:c5:48:09:c9:1e:9d:95:78:d0:
         98:ef:00:88:94:c6:04:87:d9:99:79:a5:ef:1f:43:15:f5:cd:
         2e:fd:b6:39:e1:2b:cd:c0:71:4f:cd:a2:1d:1c:a3:89:5a:1b:
         da:42:f0:2f:ca:42:98:96:d3:df:32:3a:03:60:68:62:49:7b:
         38:ff:de:6c:e7:5a:c7:50:b3:80:ef:8d:8f:05:2c:14:f3:2b:
         2a:1d:61:7c:4f:49:5f:0f:3b:5e:41:5b:58:c5:a4:8b:9c:b8:
         d0:c8:4f:ea:c1:f5:2d:ee:43:2e:fc:b0:bd:22:52:df:ef:7d:
         9a:bb:cd:d2:6a:46:a4:28:27:da:d7:34:5a:97:65:ca:b6:af:
         1c:3e:06:c4:6c:df:82:b3:53:2e:76:85:5e:68:8a:4e:03:e1:
         e1:f8:08:4f:9a:cc:c6:49:e1:7f:17:6a:3d:ec:c7:19:a0:1f:
         f1:35:6c:e1:9f:ad:da:fa:09:73:14:11:ab:5c:c0:60:93:03:
         a7:f8:48:30
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdPS3qY6zfAD+T8+KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI4ZDIwNjAtMTBhOS00ZWEzLWJlY2ItOWQwZmZlMDJh
MTU2MB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk
OTg2MTU3NjUtY2RkOC00ZGY4LTkzYzAtNmZmOTE3Zjg5ZjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNWfX6vctweOfhcHwoCq9rHyV2qMCErEgdHE
NNrXgXzFLKsb4IirRGjlvD4zCU/KSF57FERbHVphZcMYQbC8dwYJphZwYXphY4aw
7a6qWNuRN0UIyqmvCYw8CXZKg1FjV+q5MZTzUwc15GSEnl/Xj1hZST1JJSfbrUco
6zn6sHQLgSRXRmmqsZwWCKGFkkabTWNSL2JmSsAV8st/Vtur4mwMnBHwccZpaFj9
KGN49eyA40dDoudYxnVLpIoGjJSQWV59LLG3/LzJvXV+qDpcZ9LOlpVqU9DtOkS2
CJbva2JDZ5NEC4EdlNZjtVmlksJ37ViztI+luSW383GBIjBHPwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPIFvj6QS2JMDfcRUr2E+UeNvVN8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85Mjhk
MjA2MC0xMGE5LTRlYTMtYmVjYi05ZDBmZmUwMmExNTYvYzgwNTEzM2EtNmNmMS0z
ZDE0LWJhZTUtMDc0YzdjZGJkMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTI4ZDIwNjAtMTBhOS00ZWEzLWJl
Y2ItOWQwZmZlMDJhMTU2LzkyOGQyMDYwLTEwYTktNGVhMy1iZWNiLTlkMGZmZTAy
YTE1Ni5jcmwwHwYDVR0jBBgwFoAU6aJTei5/iH9b7Uali12DTMQfhKQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85MjhkMjA2MC0xMGE5LTRlYTMtYmVjYi05ZDBm
ZmUwMmExNTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAYIAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEHDznpaKjhYefXZ6NDX3DGV3xJEJcljmQ96Vcrv572Zmr/CzJt8
dJJReJAdehAgJLH5hdN3+aOsFSrt8fLp3MVICckenZV40JjvAIiUxgSH2Zl5pe8f
QxX1zS79tjnhK83AcU/Noh0co4laG9pC8C/KQpiW098yOgNgaGJJezj/3mznWsdQ
s4DvjY8FLBTzKyodYXxPSV8PO15BW1jFpIucuNDIT+rB9S3uQy78sL0iUt/vfZq7
zdJqRqQoJ9rXNFqXZcq2rxw+BsRs34KzUy52hV5oik4D4eH4CE+azMZJ4X8Xaj3s
xxmgH/E1bOGfrdr6CXMUEatcwGCTA6f4SDA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:56 2024 by rpki-client on console-fra.rpki-client.org