Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6766b9ab-ccb8-394f-9198-92a3e0641174.roa
File:                     6766b9ab-ccb8-394f-9198-92a3e0641174.roa (raw, json)
Hash identifier:          dALcx4qvx4lm7NThtSO4jq/OwUZfhVKNWkqOXAH8Fww=
Subject key identifier:   2D:EB:6E:28:99:BD:92:28:39:3B:E8:D1:B4:6E:24:12:57:2C:9D:80
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A107C84FD6414F1A8DCD80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6766b9ab-ccb8-394f-9198-92a3e0641174.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        2600:6c0c:28f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:07:c8:4f:d6:41:4f:1a:8d:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=615b5178-c730-4273-b6b1-cc77a44e6085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:30:c3:4e:ff:43:59:1a:96:29:a3:57:71:9d:
                    3f:ea:03:6c:86:0d:bb:27:87:a4:0d:25:0c:3c:f2:
                    c1:7c:7f:6a:44:a5:72:c0:ba:0f:5a:46:f8:31:54:
                    1d:49:3f:e8:f9:45:03:05:dc:b1:e1:15:93:22:33:
                    dc:4e:9d:38:1c:df:b3:fd:e4:ad:ec:32:95:45:4b:
                    44:0d:59:df:0a:3e:a4:aa:04:3e:be:9c:6b:f1:ec:
                    f1:63:4d:f4:78:9f:f7:0f:ef:2a:55:1e:ce:fb:e2:
                    51:c5:7e:f5:3d:94:9b:ef:af:ee:73:35:94:b8:8e:
                    c1:e7:08:63:1a:76:fa:71:ef:21:c3:89:16:16:99:
                    5a:c7:86:0b:a0:b0:a4:9d:ae:ab:95:8d:a8:83:45:
                    c6:27:fd:9f:1c:21:eb:c9:73:0b:28:2d:d8:85:70:
                    78:d5:71:2f:1a:59:15:ca:9d:a7:a6:b3:fc:ad:2e:
                    a0:de:26:15:9a:34:b5:98:c4:2e:a1:0f:7f:c4:87:
                    f0:1d:c7:e3:62:88:e0:9c:dd:66:23:a8:d4:7d:55:
                    3c:1a:8f:d0:54:4f:58:82:b7:bc:ec:19:af:48:bf:
                    20:25:12:93:c3:1e:45:ba:6b:cd:a8:b8:fe:28:cf:
                    29:26:fd:8d:dd:74:05:ce:31:cf:4d:d2:00:1c:af:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EB:6E:28:99:BD:92:28:39:3B:E8:D1:B4:6E:24:12:57:2C:9D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6766b9ab-ccb8-394f-9198-92a3e0641174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:28f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ae:70:3e:a4:bf:9a:34:2d:b0:a9:63:0f:a5:55:f9:d5:77:
         52:5b:b5:36:5d:89:4a:55:3f:e1:9d:04:75:c6:ed:36:5b:8c:
         ca:d6:1f:a0:ec:af:e0:be:79:3b:9d:49:4a:9a:e1:f5:62:c4:
         d6:fb:c9:05:a0:46:b2:cf:49:39:d5:db:a2:eb:cb:65:c3:6d:
         aa:b2:ad:f5:af:06:f9:14:87:71:95:b3:70:91:36:ec:53:24:
         d0:53:73:c7:46:54:a5:57:58:ae:4c:f4:c0:d5:60:6f:c0:3a:
         4e:8c:1d:15:ab:e0:a7:1f:9a:03:2c:c1:ef:6c:20:02:f3:c7:
         1b:d5:33:6b:d4:cb:45:e8:66:aa:07:0c:0e:da:49:c7:cf:85:
         2f:af:b4:3d:ec:03:59:c6:50:60:a0:83:75:20:98:ad:8c:22:
         ad:a6:b2:dd:d6:92:f4:98:50:f6:b2:85:70:7d:27:6d:d7:d7:
         95:a1:e1:d1:40:d6:18:ef:68:b1:2d:b1:51:e7:8c:af:70:5d:
         7d:cc:34:fa:05:ea:95:3c:f3:91:be:49:ed:f3:8a:db:26:45:
         5a:9e:02:89:ab:98:0c:0d:92:e2:00:f8:fc:42:78:c3:59:f1:
         d6:36:94:14:c0:42:5b:88:88:01:d8:5a:54:70:06:34:bf:0f:
         ed:b1:b6:80
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcioQfIT9ZBTxqNzYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
NjE1YjUxNzgtYzczMC00MjczLWI2YjEtY2M3N2E0NGU2MDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjDDTv9DWRqWKaNXcZ0/6gNshg27J4ekDSUM
PPLBfH9qRKVywLoPWkb4MVQdST/o+UUDBdyx4RWTIjPcTp04HN+z/eSt7DKVRUtE
DVnfCj6kqgQ+vpxr8ezxY030eJ/3D+8qVR7O++JRxX71PZSb76/uczWUuI7B5whj
Gnb6ce8hw4kWFplax4YLoLCkna6rlY2og0XGJ/2fHCHryXMLKC3YhXB41XEvGlkV
yp2nprP8rS6g3iYVmjS1mMQuoQ9/xIfwHcfjYojgnN1mI6jUfVU8Go/QVE9Ygre8
7BmvSL8gJRKTwx5FumvNqLj+KM8pJv2N3XQFzjHPTdIAHK+SuwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC3rbiiZvZIoOTvo0bRuJBJXLJ2AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjc2NmI5YWItY2NiOC0z
OTRmLTkxOTgtOTJhM2UwNjQxMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBsDAKP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFCucD6kv5o0LbCpYw+lVfnVd1JbtTZdiUpVP+GdBHXG7TZbjMrW
H6Dsr+C+eTudSUqa4fVixNb7yQWgRrLPSTnV26Lry2XDbaqyrfWvBvkUh3GVs3CR
NuxTJNBTc8dGVKVXWK5M9MDVYG/AOk6MHRWr4KcfmgMswe9sIALzxxvVM2vUy0Xo
ZqoHDA7aScfPhS+vtD3sA1nGUGCgg3UgmK2MIq2mst3WkvSYUPayhXB9J23X15Wh
4dFA1hjvaLEtsVHnjK9wXX3MNPoF6pU885G+Se3zitsmRVqeAomrmAwNkuIA+PxC
eMNZ8dY2lBTAQluIiAHYWlRwBjS/D+2xtoA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:43 2024 by rpki-client on console-ams.rpki-client.org