Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/6269a69e-bf5b-3e8d-803e-453361f16e27.roa
File:                     6269a69e-bf5b-3e8d-803e-453361f16e27.roa (raw, json)
Hash identifier:          xZp/d+/LsS1lPGmK01Qb9OdGJoitBCSR+3YXFTDex0A=
Subject key identifier:   33:47:75:40:85:29:4A:13:24:91:AB:93:96:6A:D2:E0:DA:85:69:9B
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F432858458C6DD53DAC9E237F40BE2E80
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/6269a69e-bf5b-3e8d-803e-453361f16e27.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        2605:84c0:54::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d5:3d:ac:9e:23:7f:40:be:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=2aeac65d-d44a-4ffe-8d28-2cb5d10afe18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:d8:70:5a:d0:0b:d3:70:08:b9:d8:0f:07:
                    a9:55:24:7d:f0:c3:49:60:1a:15:aa:ea:35:4c:45:
                    ff:a7:f9:b9:4d:44:36:44:ab:33:0f:5a:37:94:20:
                    4f:9d:ab:9e:90:3e:30:6b:18:41:4b:47:37:93:e3:
                    b7:7e:76:8c:9e:f6:4c:e2:a3:1b:01:ea:8d:84:9d:
                    11:65:ff:9f:88:60:7a:30:5b:bd:a8:0e:2d:0c:66:
                    07:04:f4:c4:ae:18:42:b6:90:d2:19:ff:84:bb:33:
                    4a:4e:4c:97:2e:b8:fb:db:1b:51:55:18:50:12:8a:
                    8a:eb:fc:1e:8c:3a:f3:d4:15:60:1a:0f:6c:a0:d0:
                    4e:58:5a:75:8d:f4:b2:68:e0:2d:77:80:64:9b:62:
                    19:8c:c9:e7:0f:99:1b:75:82:62:e4:f7:1a:59:8c:
                    e1:e4:b4:06:c6:58:45:db:da:04:dd:0f:e4:aa:22:
                    54:02:c1:46:f4:ae:cc:e0:e5:ec:8b:e5:2b:d5:ba:
                    e2:62:c8:ec:48:86:80:0b:9b:9c:ad:8c:c1:bc:cd:
                    1f:f1:44:42:40:23:d4:1a:2b:f1:3b:af:35:2a:fb:
                    b2:a7:6f:b3:cd:71:3e:05:46:23:e1:9b:5a:5d:42:
                    72:ce:8b:d7:7c:3d:ce:a8:fc:c6:10:cc:e7:8a:d1:
                    f1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:47:75:40:85:29:4A:13:24:91:AB:93:96:6A:D2:E0:DA:85:69:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/6269a69e-bf5b-3e8d-803e-453361f16e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:ca:16:e9:31:0a:65:a2:96:4c:7b:d3:2a:b7:4f:32:54:ee:
         8d:48:ed:ba:3c:7c:10:5d:fd:05:fe:c6:fe:df:72:8e:04:60:
         b5:0e:9f:eb:63:7a:75:07:4a:90:85:72:f7:6a:4a:1a:ac:2e:
         56:be:9d:3d:43:00:98:6f:47:72:2f:b0:8c:90:af:26:e3:e9:
         59:c5:7a:b3:23:46:f8:7d:8b:42:09:ab:70:7d:00:7e:1f:b2:
         a1:91:e1:cd:9b:0d:35:c4:a4:02:90:d9:63:7f:1f:be:a6:40:
         82:24:dd:eb:fc:3f:05:60:8b:db:bb:92:2e:66:89:85:39:3b:
         ab:f0:df:d9:65:29:4e:f8:87:b8:7e:76:83:e9:22:c4:65:68:
         62:3d:c4:60:fa:9a:d6:f3:6c:ea:90:ca:a3:eb:8c:ea:1d:32:
         f5:56:93:a5:55:30:30:52:f4:ab:48:9d:8b:cd:2d:7a:80:2c:
         83:98:71:5e:bc:2b:5b:b7:d5:9e:80:fc:08:a7:53:e2:99:5d:
         4c:3b:14:a3:65:85:e3:2a:e3:f3:e1:53:6c:ac:f3:39:4a:e5:
         df:4b:a4:5c:8d:4d:d6:26:21:8f:5b:df:2a:53:38:51:41:bc:
         21:cf:b6:3d:2c:ed:4d:3c:3e:24:46:be:2f:e7:db:32:98:54:
         8d:ed:32:6b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWMbdU9rJ4jf0C+LoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3
MDBjMB4XDTI0MDQxNTAxMDAyNloXDTI0MDcxNDAxMDAyNlowLzEtMCsGA1UEAxMk
MmFlYWM2NWQtZDQ0YS00ZmZlLThkMjgtMmNiNWQxMGFmZTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/rYcFrQC9NwCLnYDwepVSR98MNJYBoVquo1
TEX/p/m5TUQ2RKszD1o3lCBPnauekD4waxhBS0c3k+O3fnaMnvZM4qMbAeqNhJ0R
Zf+fiGB6MFu9qA4tDGYHBPTErhhCtpDSGf+EuzNKTkyXLrj72xtRVRhQEoqK6/we
jDrz1BVgGg9soNBOWFp1jfSyaOAtd4Bkm2IZjMnnD5kbdYJi5PcaWYzh5LQGxlhF
29oE3Q/kqiJUAsFG9K7M4OXsi+Ur1briYsjsSIaAC5ucrYzBvM0f8URCQCPUGivx
O681Kvuyp2+zzXE+BUYj4ZtaXUJyzovXfD3OqPzGEMznitHxOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDNHdUCFKUoTJJGrk5Zq0uDahWmbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3
MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvNjI2OWE2OWUtYmY1Yi0z
ZThkLTgwM2UtNDUzMzYxZjE2ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0
MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2
NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy
N2E5NjcwMGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWEwABU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMbKFukxCmWilkx70yq3TzJU7o1I7bo8fBBd/QX+xv7fco4EYLUO
n+tjenUHSpCFcvdqShqsLla+nT1DAJhvR3IvsIyQrybj6VnFerMjRvh9i0IJq3B9
AH4fsqGR4c2bDTXEpAKQ2WN/H76mQIIk3ev8PwVgi9u7ki5miYU5O6vw39llKU74
h7h+doPpIsRlaGI9xGD6mtbzbOqQyqPrjOodMvVWk6VVMDBS9KtInYvNLXqALIOY
cV68K1u31Z6A/AinU+KZXUw7FKNlheMq4/PhU2ys8zlK5d9LpFyNTdYmIY9b3ypT
OFFBvCHPtj0s7U08PiRGvi/n2zKYVI3tMms=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:18:03 2024 by rpki-client on console-ams.rpki-client.org