Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1a640b8d-2f75-3f95-bc47-eca644a37c87.roa
File:                     1a640b8d-2f75-3f95-bc47-eca644a37c87.roa (raw, json)
Hash identifier:          khquSWz/44LosBeH7zKxhNB+KIRZY2OXEvUzcaBghz4=
Subject key identifier:   E0:9D:37:C8:33:51:67:F3:89:19:07:66:41:92:91:3D:D3:CA:D0:B9
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584633EEDF2D2612ADD7F6894B80
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1a640b8d-2f75-3f95-bc47-eca644a37c87.roa
Signing time:             Fri 14 Jun 2024 01:00:26 +0000
ROA not before:           Fri 14 Jun 2024 01:00:26 +0000
ROA not after:            Thu 12 Sep 2024 01:00:26 +0000
asID:                     394354
IP address blocks:        2620:10a:8017::/48 maxlen: 48
                          2620:10a:801a::/48 maxlen: 48
                          2620:10a:80e7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:33:ee:df:2d:26:12:ad:d7:f6:89:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Jun 14 01:00:26 2024 GMT
            Not After : Sep 12 01:00:26 2024 GMT
        Subject: CN=65488078-84f8-4e58-8e92-329e34d51c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:6e:12:d4:5b:35:44:73:b7:8b:b9:09:6a:
                    0c:13:7d:7a:85:c8:6e:93:29:ff:29:cb:dd:76:96:
                    b5:41:7c:b1:e5:ab:f8:c4:14:80:b5:9d:91:1a:82:
                    8e:4b:66:77:94:fd:95:07:f8:97:10:c4:9c:07:f1:
                    56:9d:53:03:6e:1f:e2:6a:bc:47:c0:cc:31:5f:20:
                    38:c0:b3:f1:2a:a6:ae:ec:f5:2a:f7:94:a2:85:65:
                    33:8e:d2:6c:56:82:00:d5:2d:e6:9d:e8:e3:af:08:
                    c0:35:35:e9:58:e8:d3:54:c5:24:28:67:c0:cf:cc:
                    f4:44:26:b8:73:a1:ed:15:bf:32:a6:c3:93:8a:4e:
                    d1:bd:6a:2f:bf:65:fe:5f:2f:93:b4:b3:51:e2:8d:
                    d0:ba:7c:14:41:d3:bb:f6:70:f0:af:ed:56:f8:b1:
                    4b:04:9f:a8:a3:7e:4e:0b:f2:97:13:b6:9f:35:55:
                    d3:74:f0:98:41:5c:de:cb:15:e0:fd:ea:04:67:95:
                    51:64:ca:c2:d6:d8:35:d8:1f:ca:a5:6d:dd:34:db:
                    a4:64:e3:11:41:f4:52:f1:56:ff:78:ac:63:ce:cf:
                    ee:0a:dc:79:f7:70:f8:e1:ac:77:7c:ef:ab:83:f2:
                    e6:23:4c:81:b0:8e:ee:c3:8c:00:d7:4b:ed:9b:d6:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9D:37:C8:33:51:67:F3:89:19:07:66:41:92:91:3D:D3:CA:D0:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1a640b8d-2f75-3f95-bc47-eca644a37c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:8017::/48
                  2620:10a:801a::/48
                  2620:10a:80e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:12:71:de:7e:42:05:a9:09:47:41:d3:c0:03:67:eb:e1:0a:
         0b:6a:4a:05:29:03:6f:17:31:57:98:04:4b:1a:d6:ec:ac:79:
         89:6f:86:51:57:b5:12:f0:49:e6:23:39:37:5e:36:ba:17:58:
         97:4e:d1:42:46:b0:52:bb:96:b8:41:3a:e1:0a:38:25:b2:80:
         89:2c:5b:93:1a:e3:a5:13:49:bb:61:3c:90:41:fe:46:f9:ed:
         8f:cb:09:3b:60:cc:66:40:0f:3b:fb:ff:1c:74:e4:7f:52:16:
         60:c1:9f:97:16:6c:dc:ba:4e:c4:30:73:85:d2:3e:3f:08:7a:
         ec:82:28:fc:3a:f3:41:f7:8b:eb:fa:b4:e2:a2:a7:68:1c:51:
         ec:89:a6:5d:f3:9f:90:60:22:0c:1d:b1:c1:88:02:84:f1:90:
         13:19:fe:15:ba:29:b9:91:a8:bf:7b:dc:95:25:bd:b8:73:42:
         f0:e9:5e:c1:b0:58:0c:6f:a1:39:78:3e:4d:50:89:cb:cd:8c:
         9b:04:2c:c1:47:7d:ab:72:69:15:dc:33:5d:ee:c5:8d:02:f9:
         20:71:03:d7:cf:08:48:9d:f9:26:2f:3e:a2:9c:22:9b:b9:db:
         71:e3:90:81:79:63:76:c5:a7:3e:15:1d:58:cf:74:11:c0:2f:
         d7:1d:fc:a7
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEYz7t8tJhKt1/aJS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx
OGU4MB4XDTI0MDYxNDAxMDAyNloXDTI0MDkxMjAxMDAyNlowLzEtMCsGA1UEAxMk
NjU0ODgwNzgtODRmOC00ZTU4LThlOTItMzI5ZTM0ZDUxYzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymJuEtRbNURzt4u5CWoME316hchukyn/Kcvd
dpa1QXyx5av4xBSAtZ2RGoKOS2Z3lP2VB/iXEMScB/FWnVMDbh/iarxHwMwxXyA4
wLPxKqau7PUq95SihWUzjtJsVoIA1S3mnejjrwjANTXpWOjTVMUkKGfAz8z0RCa4
c6HtFb8ypsOTik7RvWovv2X+Xy+TtLNR4o3QunwUQdO79nDwr+1W+LFLBJ+oo35O
C/KXE7afNVXTdPCYQVzeyxXg/eoEZ5VRZMrC1tg12B/KpW3dNNukZOMRQfRS8Vb/
eKxjzs/uCtx593D44ax3fO+rg/LmI0yBsI7uw4wA10vtm9ZYrwIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFOCdN8gzUWfziRkHZkGSkT3TytC5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2
MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvMWE2NDBiOGQtMmY3NS0z
Zjk1LWJjNDctZWNhNjQ0YTM3Yzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2
MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi
MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5
NzZhYjE4ZTguY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAJiABCoAX
AwcAJiABCoAaAwcAJiABCoDnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIoScd5+QgWpCUdB08ADZ+vhCgtq
SgUpA28XMVeYBEsa1uyseYlvhlFXtRLwSeYjOTdeNroXWJdO0UJGsFK7lrhBOuEK
OCWygIksW5Ma46UTSbthPJBB/kb57Y/LCTtgzGZADzv7/xx05H9SFmDBn5cWbNy6
TsQwc4XSPj8IeuyCKPw680H3i+v6tOKip2gcUeyJpl3zn5BgIgwdscGIAoTxkBMZ
/hW6KbmRqL973JUlvbhzQvDpXsGwWAxvoTl4Pk1QicvNjJsELMFHfatyaRXcM13u
xY0C+SBxA9fPCEid+SYvPqKcIpu523HjkIF5Y3bFpz4VHVjPdBHAL9cd/Kc=
-----END CERTIFICATE-----
Generated at Mon Jun 17 01:57:01 2024 by rpki-client on console-fra.rpki-client.org