Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa
File:                     deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa (raw, json)
Hash identifier:          pF53To7GG6c0wS4OOQRj9WvuHdPfPCOGuWMccOLRKQU=
Subject key identifier:   94:B7:37:85:26:6C:A2:DE:39:21:83:C3:6B:93:79:C6:B7:13:08:89
Certificate issuer:       /CN=1fb001d4-3a2b-436f-a572-51822a315945
Certificate serial:       010D0C9F43285845734DB27285C70C539AA54100
Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     395363
IP address blocks:        2620:129:6020::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b2:72:85:c7:0c:53:9a:a5:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=278d6841-9a77-4856-ae39-1dd000473207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:d3:2b:41:b5:08:84:49:90:05:5a:78:d1:
                    50:e8:b5:e3:10:c7:38:67:4a:4a:60:42:47:4e:84:
                    94:2b:1a:9c:2b:ea:b7:77:93:1f:9e:1b:e1:7e:d2:
                    0e:ea:43:33:a2:d8:55:f8:37:d7:9b:11:98:6b:41:
                    ee:05:6e:c5:9c:db:d3:53:7b:90:0e:1b:6e:b4:c3:
                    43:07:81:37:c4:d0:cb:f7:0c:4a:00:0f:9d:a0:5b:
                    b8:ef:75:3f:9a:4b:34:e1:e1:c1:ec:cb:af:a7:ee:
                    3e:12:61:7b:3b:9f:14:c1:32:d8:0c:ad:d5:49:f1:
                    61:09:e9:b2:9c:72:97:1f:58:f6:22:02:77:10:a5:
                    cd:fa:52:b8:8d:4e:d8:f6:fc:1a:dd:57:7a:b0:0a:
                    60:3c:d1:66:b6:1e:0d:d0:85:5b:d8:d8:30:0b:96:
                    08:25:8f:74:6e:cc:24:84:ac:cb:71:92:42:2f:25:
                    50:86:9e:82:35:29:86:01:b8:ec:74:8e:f7:4a:ba:
                    71:36:cd:15:58:17:0d:c1:19:6f:5c:0f:cc:76:ed:
                    47:d0:b8:3d:f2:01:18:6f:91:b4:8e:12:c5:61:f2:
                    a7:e4:bc:ef:ed:2c:f9:76:2f:0f:6c:83:c1:3b:5a:
                    35:5b:fa:de:00:97:b5:b8:e5:e3:e8:21:6f:c6:a6:
                    0a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B7:37:85:26:6C:A2:DE:39:21:83:C3:6B:93:79:C6:B7:13:08:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl

            X509v3 Authority Key Identifier:
                keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:129:6020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:24:58:82:10:11:7f:a0:e9:23:7d:73:7d:d8:67:c9:17:d4:
         0f:7d:12:02:b8:a6:c5:f0:a2:30:14:8d:03:cc:c5:6e:43:12:
         62:25:48:f5:2e:b0:1f:18:f4:cf:16:d5:c1:47:1f:8a:cd:41:
         e8:63:88:51:93:90:fc:16:5e:80:76:ab:03:d4:dd:e2:c0:bc:
         91:db:86:8d:5e:3f:55:4b:a2:19:ce:b3:79:8d:5b:fd:de:43:
         57:95:57:55:6c:46:01:3a:d1:d5:bf:b5:fd:15:aa:9e:cf:0e:
         59:8b:6f:31:04:70:c7:ce:4c:20:3d:30:0a:80:8c:c2:b4:c0:
         94:63:c2:53:40:23:18:fe:24:27:76:36:0d:ea:63:94:0e:e1:
         63:48:f2:15:2c:ec:28:37:76:59:1b:1f:8c:1a:03:96:45:b2:
         e1:f5:34:96:c8:e6:e9:16:a6:27:19:49:7b:51:46:96:0e:39:
         c2:38:b0:bb:ff:7f:10:6b:82:93:59:2f:f1:a0:5c:f8:62:a5:
         bc:3e:9d:9d:44:58:4b:7f:58:28:4e:7b:fc:ea:79:7e:61:db:
         b2:cb:11:99:81:9d:57:96:f3:8d:7d:79:df:69:df:0a:5b:cd:
         c7:8f:b1:c8:d4:28:b8:75:dd:cf:82:d3:6c:dd:2a:37:a6:e4:
         47:9b:aa:60
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVzTbJyhccMU5qlQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZiMDAxZDQtM2EyYi00MzZmLWE1NzItNTE4MjJhMzE1
OTQ1MB4XDTI0MDQwNjAxMDAyNloXDTI0MDcwNTAxMDAyNlowLzEtMCsGA1UEAxMk
Mjc4ZDY4NDEtOWE3Ny00ODU2LWFlMzktMWRkMDAwNDczMjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwnTK0G1CIRJkAVaeNFQ6LXjEMc4Z0pKYEJH
ToSUKxqcK+q3d5MfnhvhftIO6kMzothV+DfXmxGYa0HuBW7FnNvTU3uQDhtutMND
B4E3xNDL9wxKAA+doFu473U/mks04eHB7Muvp+4+EmF7O58UwTLYDK3VSfFhCemy
nHKXH1j2IgJ3EKXN+lK4jU7Y9vwa3Vd6sApgPNFmth4N0IVb2NgwC5YIJY90bswk
hKzLcZJCLyVQhp6CNSmGAbjsdI73SrpxNs0VWBcNwRlvXA/Mdu1H0Lg98gEYb5G0
jhLFYfKn5Lzv7Sz5di8PbIPBO1o1W/reAJe1uOXj6CFvxqYKjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJS3N4UmbKLeOSGDw2uTeca3EwiJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIw
MDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgyMmEzMTU5NDUvZGViNDcxMjItMTBjYS0z
YTQ0LWFhMTYtY2JjOWI2MWFmZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWZiMDAxZDQtM2EyYi00MzZmLWE1
NzItNTE4MjJhMzE1OTQ1LzFmYjAwMWQ0LTNhMmItNDM2Zi1hNTcyLTUxODIyYTMx
NTk0NS5jcmwwHwYDVR0jBBgwFoAUdKd9Tqw3iqgM0MIrTF1vWza8INEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIwMDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgy
MmEzMTU5NDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKWAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG0kWIIQEX+g6SN9c33YZ8kX1A99EgK4psXwojAUjQPMxW5DEmIl
SPUusB8Y9M8W1cFHH4rNQehjiFGTkPwWXoB2qwPU3eLAvJHbho1eP1VLohnOs3mN
W/3eQ1eVV1VsRgE60dW/tf0Vqp7PDlmLbzEEcMfOTCA9MAqAjMK0wJRjwlNAIxj+
JCd2Ng3qY5QO4WNI8hUs7Cg3dlkbH4waA5ZFsuH1NJbI5ukWpicZSXtRRpYOOcI4
sLv/fxBrgpNZL/GgXPhipbw+nZ1EWEt/WChOe/zqeX5h27LLEZmBnVeW8419ed9p
3wpbzcePscjUKLh13c+C02zdKjem5EebqmA=
-----END CERTIFICATE-----
Generated at Fri Apr 26 04:02:58 2024 by rpki-client on console-ams.rpki-client.org