Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d44c3ecc-38d4-30d1-9fc0-039f45de35eb.roa
File:                     d44c3ecc-38d4-30d1-9fc0-039f45de35eb.roa (raw, json)
Hash identifier:          0KkbLZbwJststJ+gBB96kN2LUMzPLRKvPLOEhcKmTLU=
Subject key identifier:   4F:D7:25:4D:27:79:99:5F:1F:C6:A5:B4:A3:8A:C3:D9:8B:93:4A:97
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838EC48A777849C3194B2ED1300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d44c3ecc-38d4-30d1-9fc0-039f45de35eb.roa
Signing time:             Fri 12 Feb 2021 05:00:00 +0000
ROA not before:           Fri 12 Feb 2021 05:00:00 +0000
ROA not after:            Fri 05 Feb 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        2602:10d:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ec:48:a7:77:84:9c:31:94:b2:ed:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 12 05:00:00 2021 GMT
            Not After : Feb  5 05:00:00 2027 GMT
        Subject: CN=34910c4f-2aeb-4020-9138-a88f2700da81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6d:cc:49:b9:b8:8b:8a:68:95:2c:7f:67:62:
                    41:0e:a6:5a:f7:c3:3a:92:97:47:08:4f:87:b9:be:
                    61:42:24:ee:58:59:1a:6b:a9:c3:6e:3a:9b:d3:10:
                    61:2d:a7:6d:6e:b0:bb:92:b0:a2:1a:1a:1b:92:77:
                    68:c2:2d:15:cf:3d:6a:e4:09:f7:06:38:97:51:65:
                    8a:30:fc:7b:2a:a6:94:f8:8d:1d:5d:72:fd:46:e8:
                    50:6b:96:58:b5:e4:37:72:b9:a6:99:43:03:82:8b:
                    e3:e6:ab:74:30:88:57:1e:72:9c:0a:d1:c4:6b:84:
                    db:42:06:3d:c2:62:6f:6b:52:f9:81:fc:08:32:da:
                    2e:cd:ab:4c:75:f9:26:d0:46:22:e6:2c:37:a8:56:
                    5b:d8:03:f9:a3:4a:18:fd:3b:ea:ac:c9:24:e4:82:
                    70:df:80:2b:41:e7:6e:10:c0:23:0a:e6:5d:58:76:
                    5f:ed:4b:73:65:17:12:93:e5:b6:b3:d7:6f:12:0a:
                    6e:cf:54:3e:34:14:3b:8d:7c:41:10:0d:c0:27:55:
                    9d:42:68:0b:30:3c:3c:1d:72:87:dd:94:92:40:f3:
                    ba:26:fd:ad:6a:bd:b9:c4:b1:4d:76:b3:50:36:54:
                    50:65:7f:a5:7f:93:23:c1:48:44:70:54:49:11:e3:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D7:25:4D:27:79:99:5F:1F:C6:A5:B4:A3:8A:C3:D9:8B:93:4A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d44c3ecc-38d4-30d1-9fc0-039f45de35eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:10d:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:85:2b:b0:ab:93:68:f0:73:fa:61:21:06:14:40:4e:c4:61:
         2d:2d:bf:cd:33:39:19:0a:be:a8:b6:f2:6d:ec:59:54:c0:97:
         a7:02:7f:79:c5:09:99:e0:ea:f0:59:49:cd:22:06:94:9b:e7:
         54:fb:b6:d3:dd:93:71:9a:9f:3b:d0:70:33:24:5a:c3:f6:53:
         af:65:8c:66:24:79:dd:ec:12:5b:65:61:a9:5c:31:aa:eb:98:
         71:cd:c7:38:fe:0b:da:ff:c7:91:c4:8c:b8:8f:c0:b8:eb:0e:
         87:a8:79:11:5e:58:21:97:47:e6:fa:14:c5:07:d4:bd:c1:de:
         47:9f:45:c4:27:90:70:23:8f:33:e4:8c:a5:7a:98:b3:67:9f:
         b8:f1:b0:70:1b:17:81:1d:b7:84:9a:e6:3d:0d:6e:1b:3a:7f:
         2f:07:9d:ad:f7:b4:95:02:9b:2c:bb:76:c7:1e:c7:51:6d:e4:
         f3:31:a4:e2:76:e0:1d:12:70:bb:f8:54:99:8f:e1:d5:d0:08:
         b3:d7:83:94:b2:39:83:ff:d9:99:65:fa:41:29:cf:27:aa:57:
         45:f8:e7:1e:f3:fd:d1:dc:1c:81:e7:29:b6:8f:05:d8:31:e4:
         e9:8c:40:9f:7a:05:3b:ba:01:11:d7:4e:c5:24:b8:1b:fd:94:
         c3:03:d1:73
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWDjsSKd3hJwxlLLtEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDIxMjA1MDAwMFoXDTI3MDIwNTA1MDAwMFowLzEtMCsGA1UEAxMk
MzQ5MTBjNGYtMmFlYi00MDIwLTkxMzgtYTg4ZjI3MDBkYTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W3MSbm4i4polSx/Z2JBDqZa98M6kpdHCE+H
ub5hQiTuWFkaa6nDbjqb0xBhLadtbrC7krCiGhobkndowi0Vzz1q5An3BjiXUWWK
MPx7KqaU+I0dXXL9RuhQa5ZYteQ3crmmmUMDgovj5qt0MIhXHnKcCtHEa4TbQgY9
wmJva1L5gfwIMtouzatMdfkm0EYi5iw3qFZb2AP5o0oY/TvqrMkk5IJw34ArQedu
EMAjCuZdWHZf7UtzZRcSk+W2s9dvEgpuz1Q+NBQ7jXxBEA3AJ1WdQmgLMDw8HXKH
3ZSSQPO6Jv2tar25xLFNdrNQNlRQZX+lf5MjwUhEcFRJEeNeawIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE/XJU0neZlfH8altKOKw9mLk0qXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDQ0YzNlY2MtMzhkNC0z
MGQxLTlmYzAtMDM5ZjQ1ZGUzNWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIBDZAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEApIUrsKuTaPBz+mEhBhRATsRhLS2/zTM5GQq+qLbybexZVMCXpwJ/
ecUJmeDq8FlJzSIGlJvnVPu2092TcZqfO9BwMyRaw/ZTr2WMZiR53ewSW2VhqVwx
quuYcc3HOP4L2v/HkcSMuI/AuOsOh6h5EV5YIZdH5voUxQfUvcHeR59FxCeQcCOP
M+SMpXqYs2efuPGwcBsXgR23hJrmPQ1uGzp/Lwedrfe0lQKbLLt2xx7HUW3k8zGk
4nbgHRJwu/hUmY/h1dAIs9eDlLI5g//ZmWX6QSnPJ6pXRfjnHvP90dwcgecpto8F
2DHk6YxAn3oFO7oBEddOxSS4G/2UwwPRcw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:21 2024 by rpki-client on console-fra.rpki-client.org