Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/025f189b-ca85-3020-8e51-403bd292c2d6.roa
File:                     025f189b-ca85-3020-8e51-403bd292c2d6.roa (raw, json)
Hash identifier:          aNXtGMDaS+Tq49Z5lT6pEqwFMUxqAdkumA1tvcRL908=
Subject key identifier:   C4:8D:58:15:0D:B0:5F:8E:6B:35:F2:16:A2:EE:B2:E5:61:9E:E1:8D
Certificate issuer:       /CN=29cf59bb-49d4-46dc-a312-da9c10dc336e
Certificate serial:       010D0C9F43285847C1DF57987EF68DBC8C5E7540
Authority key identifier: 75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/025f189b-ca85-3020-8e51-403bd292c2d6.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     11131
IP address blocks:        2620:0:5300::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:57:98:7e:f6:8d:bc:8c:5e:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29cf59bb-49d4-46dc-a312-da9c10dc336e
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=563ff6c7-85c5-42f5-86f1-b9296d03411d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:53:b3:45:c1:5c:f5:e3:9b:90:29:f6:48:
                    4e:f2:c7:85:83:8f:b3:ec:2f:84:20:2a:65:aa:d4:
                    7e:54:b7:3d:05:a1:d6:22:68:be:bd:e5:a0:95:06:
                    ed:5c:c5:d6:bd:d0:2c:64:de:9e:78:c8:ee:a1:77:
                    6d:e7:c5:b6:98:bd:fd:1e:b5:73:e4:b4:82:bb:66:
                    68:96:ee:2c:d2:71:0f:97:4d:16:11:f4:25:3a:96:
                    57:71:30:19:46:7a:c4:ee:4b:55:0d:fd:aa:39:24:
                    02:f8:c2:df:14:62:d3:52:5c:19:90:79:c1:ff:70:
                    24:a8:15:1b:3e:74:10:b7:74:74:fb:8c:6e:69:ab:
                    2b:43:29:6c:38:66:2a:8d:ad:50:78:30:ef:cd:9e:
                    f1:23:45:a5:66:64:db:a1:47:2d:72:7e:04:8d:4e:
                    e2:fb:f9:b2:05:e0:50:8e:97:34:09:0a:44:7a:39:
                    76:08:2d:f7:8c:e5:ba:5e:b9:be:73:6e:14:c5:61:
                    96:6b:41:71:c5:71:ee:4b:3d:52:84:0d:68:56:bb:
                    f9:56:19:26:53:48:f4:3e:4e:cc:06:34:f8:dc:95:
                    e4:8b:ca:b5:8e:70:5b:d5:49:ab:f3:63:99:92:7d:
                    39:d4:1a:8b:27:0b:92:03:cc:e9:58:43:e5:7e:c2:
                    f9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8D:58:15:0D:B0:5F:8E:6B:35:F2:16:A2:EE:B2:E5:61:9E:E1:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/025f189b-ca85-3020-8e51-403bd292c2d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl

            X509v3 Authority Key Identifier:
                keyid:75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:4a:10:1b:15:88:fc:f7:d2:c2:cc:08:3c:2f:d3:f6:3d:05:
         82:e9:fb:00:e5:97:f2:32:49:62:2a:d4:aa:b1:b5:c3:88:8e:
         d0:ea:46:a3:a2:02:d2:95:41:b7:bd:a3:96:8e:89:6b:6e:6c:
         d4:a5:7b:93:a2:72:d6:f8:9b:f5:78:16:70:e7:35:4a:59:f0:
         6b:54:68:3b:10:28:77:7c:83:90:41:ee:b8:62:9f:d9:90:59:
         c3:1b:7d:fe:c9:e0:20:81:0a:95:1c:d7:45:66:08:6c:bb:3b:
         90:1c:05:e6:c3:8d:eb:72:bc:dc:15:d4:66:00:1a:a7:4e:83:
         1d:9c:7d:fb:99:c6:38:53:0e:14:a3:2a:8e:81:13:b8:6f:38:
         98:4f:ee:52:ab:a6:2f:f5:80:76:a7:00:00:15:34:39:0e:8c:
         9b:9a:53:2a:17:b5:6e:ed:8f:95:33:86:6c:90:15:46:e0:9b:
         0d:59:2c:eb:29:ec:15:e0:0d:5d:f2:a4:7d:94:cb:a4:f9:8e:
         2a:20:78:2e:6d:01:d4:d2:08:63:76:1a:3a:06:cf:22:a1:ae:
         05:3c:6d:eb:11:ca:93:93:cf:98:0d:82:7a:34:44:5d:c4:23:
         4d:96:d5:8b:8d:e8:79:ac:3a:9e:63:07:ad:b4:1a:1b:0e:6b:
         cb:e6:cd:b0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfB31eYfvaNvIxedUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjljZjU5YmItNDlkNC00NmRjLWEzMTItZGE5YzEwZGMz
MzZlMB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk
NTYzZmY2YzctODVjNS00MmY1LTg2ZjEtYjkyOTZkMDM0MTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AVTs0XBXPXjm5Ap9khO8seFg4+z7C+EICpl
qtR+VLc9BaHWImi+veWglQbtXMXWvdAsZN6eeMjuoXdt58W2mL39HrVz5LSCu2Zo
lu4s0nEPl00WEfQlOpZXcTAZRnrE7ktVDf2qOSQC+MLfFGLTUlwZkHnB/3AkqBUb
PnQQt3R0+4xuaasrQylsOGYqja1QeDDvzZ7xI0WlZmTboUctcn4EjU7i+/myBeBQ
jpc0CQpEejl2CC33jOW6Xrm+c24UxWGWa0FxxXHuSz1ShA1oVrv5VhkmU0j0Pk7M
BjT43JXki8q1jnBb1Umr82OZkn051BqLJwuSA8zpWEPlfsL5cQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMSNWBUNsF+OazXyFqLusuVhnuGNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWNm
NTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTljMTBkYzMzNmUvMDI1ZjE4OWItY2E4NS0z
MDIwLThlNTEtNDAzYmQyOTJjMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljZjU5YmItNDlkNC00NmRjLWEz
MTItZGE5YzEwZGMzMzZlLzI5Y2Y1OWJiLTQ5ZDQtNDZkYy1hMzEyLWRhOWMxMGRj
MzM2ZS5jcmwwHwYDVR0jBBgwFoAUdW0571VxSnE3LJO8R28dqLw0I5AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWNmNTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTlj
MTBkYzMzNmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAAFMA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG1KEBsViPz30sLMCDwv0/Y9BYLp+wDll/IySWIq1KqxtcOIjtDq
RqOiAtKVQbe9o5aOiWtubNSle5Oictb4m/V4FnDnNUpZ8GtUaDsQKHd8g5BB7rhi
n9mQWcMbff7J4CCBCpUc10VmCGy7O5AcBebDjetyvNwV1GYAGqdOgx2cffuZxjhT
DhSjKo6BE7hvOJhP7lKrpi/1gHanAAAVNDkOjJuaUyoXtW7tj5UzhmyQFUbgmw1Z
LOsp7BXgDV3ypH2Uy6T5jiogeC5tAdTSCGN2GjoGzyKhrgU8besRypOTz5gNgno0
RF3EI02W1YuN6HmsOp5jB620GhsOa8vmzbA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:00 2024 by rpki-client on console-fra.rpki-client.org