Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8a2ca29a-804e-38f8-bf4d-7ba50c7b0196.roa
File:                     8a2ca29a-804e-38f8-bf4d-7ba50c7b0196.roa (raw, json)
Hash identifier:          3vBzBIPADvTN2zXcI+Q2pJGNTLm9cr1wYby3wqErEv0=
Subject key identifier:   7C:E7:E0:6E:B9:8A:A4:DD:F3:7B:49:7E:89:6B:AA:50:C5:AA:D7:57
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0DBAC4F448D059B6BF460
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8a2ca29a-804e-38f8-bf4d-7ba50c7b0196.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        2600:6c60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:db:ac:4f:44:8d:05:9b:6b:f4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=a826960b-a6e6-4732-ab5d-249a3fac9bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e9:a7:8f:bc:d2:d5:bc:e6:07:01:bf:17:63:
                    e0:83:b9:56:a0:94:e5:a6:a8:88:9b:8d:d7:4e:4f:
                    82:5c:32:f6:b9:f1:3a:11:7d:31:7b:04:95:e3:2f:
                    10:85:41:5a:c3:79:17:ac:9f:27:79:56:ca:23:b4:
                    bc:fc:39:0e:85:23:89:43:3a:23:91:89:71:37:d9:
                    04:d8:62:77:03:9a:4a:4d:52:a7:77:19:43:c5:77:
                    bb:e7:7b:a6:b9:e6:00:0f:87:01:98:5e:5c:a3:95:
                    29:39:84:23:81:19:a7:d9:2f:16:5c:9b:7a:52:1f:
                    c1:09:c8:c2:c1:64:c0:9f:6e:5c:1c:ce:e7:78:51:
                    41:e2:65:57:4b:85:b2:ca:77:6d:a5:76:43:7e:f6:
                    ed:8c:ad:af:cc:b5:62:46:27:70:8c:ce:53:e4:07:
                    7e:a2:19:6b:35:d0:ce:b7:79:06:77:e5:a9:2c:a5:
                    43:eb:ca:5a:11:ae:71:96:fe:10:be:01:6a:45:0a:
                    e3:b4:2c:01:bd:ca:b8:60:c1:5b:d4:ab:7e:c4:b8:
                    ff:c7:c3:f4:8d:b7:73:d7:6f:85:b6:69:5d:a1:c8:
                    02:fb:58:d5:f0:df:95:ce:1c:07:8e:9f:56:6e:cc:
                    65:d3:0c:72:3b:af:98:5b:5b:68:b0:5b:41:6f:53:
                    cd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E7:E0:6E:B9:8A:A4:DD:F3:7B:49:7E:89:6B:AA:50:C5:AA:D7:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8a2ca29a-804e-38f8-bf4d-7ba50c7b0196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c60::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:59:86:be:5a:92:cd:33:eb:0d:b6:13:32:97:09:bc:ef:8b:
         8b:8c:e0:e8:eb:8c:aa:b7:33:af:b9:2e:d6:a9:19:a3:86:13:
         1b:72:70:23:7b:87:fb:73:26:61:02:e3:43:97:00:ae:91:e8:
         bb:29:1b:a9:f7:5a:90:31:af:ba:56:2d:8e:4a:18:67:b4:39:
         83:5a:f3:79:7e:b3:c8:98:3a:09:15:3f:21:9a:72:88:40:58:
         cd:8c:ca:02:fe:9b:8b:08:2e:bc:ba:b5:a8:ec:4d:f9:c7:49:
         43:ca:84:cc:00:63:f6:3b:3c:bb:dd:ec:e9:1c:ec:e9:99:d5:
         30:0c:00:f9:f3:4f:60:fe:48:6f:db:61:bd:a7:62:b5:be:74:
         cd:d8:4a:88:89:5d:8e:d5:6c:6d:5c:35:ea:86:b0:5c:b1:40:
         00:a4:04:c3:d8:c2:94:a7:42:b8:83:76:bb:ac:50:f9:5a:35:
         9e:d9:a9:21:bf:95:cf:fb:ac:d3:13:fd:a1:d1:57:bd:87:70:
         86:e4:f4:82:cd:ae:4e:ce:2f:a1:6a:b6:85:97:76:f9:fd:54:
         df:40:5d:1a:d9:eb:1f:9a:41:2c:c9:73:ad:c6:9e:1d:94:f6:
         2b:13:7d:0c:8d:35:b9:1a:9d:78:d2:77:8c:f8:10:d0:24:d0:
         c8:7e:5d:dc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcioNusT0SNBZtr9GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
YTgyNjk2MGItYTZlNi00NzMyLWFiNWQtMjQ5YTNmYWM5YmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3emnj7zS1bzmBwG/F2Pgg7lWoJTlpqiIm43X
Tk+CXDL2ufE6EX0xewSV4y8QhUFaw3kXrJ8neVbKI7S8/DkOhSOJQzojkYlxN9kE
2GJ3A5pKTVKndxlDxXe753umueYAD4cBmF5co5UpOYQjgRmn2S8WXJt6Uh/BCcjC
wWTAn25cHM7neFFB4mVXS4WyyndtpXZDfvbtjK2vzLViRidwjM5T5Ad+ohlrNdDO
t3kGd+WpLKVD68paEa5xlv4QvgFqRQrjtCwBvcq4YMFb1Kt+xLj/x8P0jbdz12+F
tmldocgC+1jV8N+VzhwHjp9Wbsxl0wxyO6+YW1tosFtBb1PN/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHzn4G65iqTd83tJfolrqlDFqtdXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOGEyY2EyOWEtODA0ZS0z
OGY4LWJmNGQtN2JhNTBjN2IwMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgBsYDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAyWYa+WpLNM+sNthMylwm874uLjODo64yqtzOvuS7WqRmjhhMbcnAj
e4f7cyZhAuNDlwCukei7KRup91qQMa+6Vi2OShhntDmDWvN5frPImDoJFT8hmnKI
QFjNjMoC/puLCC68urWo7E35x0lDyoTMAGP2Ozy73ezpHOzpmdUwDAD5809g/khv
22G9p2K1vnTN2EqIiV2O1WxtXDXqhrBcsUAApATD2MKUp0K4g3a7rFD5WjWe2akh
v5XP+6zTE/2h0Ve9h3CG5PSCza5Ozi+haraFl3b5/VTfQF0a2esfmkEsyXOtxp4d
lPYrE30MjTW5Gp140neM+BDQJNDIfl3c
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:49 2024 by rpki-client on console-ams.rpki-client.org