Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/38694fa7-4755-3ca3-86a9-6a9808f72d22.roa
File:                     38694fa7-4755-3ca3-86a9-6a9808f72d22.roa (raw, json)
Hash identifier:          KZlxObIystPuGdDov46+uA+YPRGPVzE8s8n12As1jzM=
Subject key identifier:   78:7F:1A:A5:3C:D2:C2:4F:30:FB:7D:4A:66:72:2F:59:EC:F6:85:0B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838EC48C0F3253CA54B510CFA00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/38694fa7-4755-3ca3-86a9-6a9808f72d22.roa
Signing time:             Fri 12 Feb 2021 05:00:00 +0000
ROA not before:           Fri 12 Feb 2021 05:00:00 +0000
ROA not after:            Fri 05 Feb 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        2600:6c63::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ec:48:c0:f3:25:3c:a5:4b:51:0c:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 12 05:00:00 2021 GMT
            Not After : Feb  5 05:00:00 2027 GMT
        Subject: CN=a2b996cd-98fe-42e6-86bc-99e5c8d8c420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:50:49:97:51:77:94:89:74:78:2c:5f:7f:
                    58:ae:67:32:ff:8c:7a:58:59:cf:1a:7b:bb:5a:de:
                    75:2f:54:65:15:04:2f:44:5c:8d:e4:4f:c3:6e:ed:
                    f8:1a:16:66:71:fa:c5:5b:69:0b:37:7e:ce:ee:e5:
                    8f:13:e9:68:88:47:91:76:2e:b5:4a:0f:8d:74:34:
                    2a:50:51:95:24:d0:80:d7:d8:20:0d:7d:c0:41:e6:
                    59:c1:42:d3:e4:b6:cd:fc:dd:1a:46:ca:ce:3f:f6:
                    c8:74:77:33:e7:27:59:b1:19:e4:6f:a3:fa:85:17:
                    cd:43:00:61:4c:2d:3f:35:ee:10:3e:b5:56:0b:e8:
                    e0:12:15:60:88:31:7b:7b:56:58:c6:af:2f:a2:b9:
                    f7:8a:31:68:bf:91:91:d4:a4:07:e6:ae:f7:fd:b6:
                    73:52:b2:cb:d8:e3:b0:8f:d5:88:9f:1e:81:af:c5:
                    e2:cb:31:0e:63:28:42:69:af:ca:9c:b5:24:4b:69:
                    34:6f:05:1a:e9:98:73:68:6e:bb:0a:e3:64:b4:34:
                    6f:9e:00:7a:7a:2b:c7:5f:34:73:df:f4:f4:a5:41:
                    02:8c:15:70:d3:c6:af:50:2a:be:6b:6d:e5:f9:c5:
                    e8:db:86:8f:ec:16:2b:95:5d:b6:6c:47:a4:32:03:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7F:1A:A5:3C:D2:C2:4F:30:FB:7D:4A:66:72:2F:59:EC:F6:85:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/38694fa7-4755-3ca3-86a9-6a9808f72d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c63::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:a7:13:6c:b5:2c:4c:b4:23:25:52:f2:02:f9:81:90:77:f4:
         8a:19:e8:c7:e3:dc:cc:46:6a:40:96:85:ce:3a:e4:d3:80:de:
         10:ec:ed:07:4a:5f:c3:bb:e6:e4:a4:fe:35:ce:1d:a1:6e:0c:
         c5:cc:f3:fe:ba:0f:13:82:f7:78:c6:84:33:ae:8c:cd:70:dd:
         cc:a6:65:f7:ef:6b:5e:07:5d:e5:6c:46:04:20:4f:29:12:bd:
         24:00:d6:64:1d:9c:f6:ff:2c:09:87:be:f6:3f:f2:7d:ff:60:
         30:08:04:61:19:16:f4:22:46:0d:e7:5d:4c:22:2e:b8:07:e3:
         f0:48:5b:6d:09:e9:b7:7b:2c:ed:7f:df:9f:cf:27:20:ce:80:
         b5:28:65:59:38:bf:e4:73:77:62:a5:20:3c:af:3e:fd:e3:58:
         23:07:9d:11:83:aa:38:1d:e3:70:1b:82:30:48:dc:cd:47:e8:
         f0:af:67:2d:a9:ea:49:a5:6a:58:d0:4b:7a:9c:e5:b5:91:1b:
         78:9c:37:37:f7:d4:e8:c8:82:be:8f:91:73:83:7c:24:43:5b:
         87:12:14:f1:ab:4a:81:13:be:68:05:f0:44:ae:83:60:13:ef:
         4a:a0:82:f9:9d:fb:56:38:c9:5c:d8:15:52:f2:3c:88:42:14:
         56:40:b2:bc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWDjsSMDzJTylS1EM+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDIxMjA1MDAwMFoXDTI3MDIwNTA1MDAwMFowLzEtMCsGA1UEAxMk
YTJiOTk2Y2QtOThmZS00MmU2LTg2YmMtOTllNWM4ZDhjNDIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus1QSZdRd5SJdHgsX39Yrmcy/4x6WFnPGnu7
Wt51L1RlFQQvRFyN5E/Dbu34GhZmcfrFW2kLN37O7uWPE+loiEeRdi61Sg+NdDQq
UFGVJNCA19ggDX3AQeZZwULT5LbN/N0aRsrOP/bIdHcz5ydZsRnkb6P6hRfNQwBh
TC0/Ne4QPrVWC+jgEhVgiDF7e1ZYxq8vorn3ijFov5GR1KQH5q73/bZzUrLL2OOw
j9WInx6Br8XiyzEOYyhCaa/KnLUkS2k0bwUa6ZhzaG67CuNktDRvngB6eivHXzRz
3/T0pUECjBVw08avUCq+a23l+cXo24aP7BYrlV22bEekMgMQ3wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHh/GqU80sJPMPt9SmZyL1ns9oULMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzg2OTRmYTctNDc1NS0z
Y2EzLTg2YTktNmE5ODA4ZjcyZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgBsYzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDFpxNstSxMtCMlUvIC+YGQd/SKGejH49zMRmpAloXOOuTTgN4Q7O0H
Sl/Du+bkpP41zh2hbgzFzPP+ug8Tgvd4xoQzrozNcN3MpmX372teB13lbEYEIE8p
Er0kANZkHZz2/ywJh772P/J9/2AwCARhGRb0IkYN511MIi64B+PwSFttCem3eyzt
f9+fzycgzoC1KGVZOL/kc3dipSA8rz7941gjB50Rg6o4HeNwG4IwSNzNR+jwr2ct
qepJpWpY0Et6nOW1kRt4nDc399ToyIK+j5Fzg3wkQ1uHEhTxq0qBE75oBfBEroNg
E+9KoIL5nftWOMlc2BVS8jyIQhRWQLK8
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:05 2024 by rpki-client on console-fra.rpki-client.org