Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c78129b-87ff-38ea-8cd7-a246c0876ba3.roa
File:                     9c78129b-87ff-38ea-8cd7-a246c0876ba3.roa (raw, json)
Hash identifier:          MwIXRV0KXk/H3ICAEM0COokpIjF5oLNMBrNz2CHMcRo=
Subject key identifier:   5C:71:22:60:53:38:9A:11:BF:42:09:B0:E2:71:05:CA:10:18:27:7E
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858450D8589B4C4648E225CB0C130
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c78129b-87ff-38ea-8cd7-a246c0876ba3.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     30103
IP address blocks:        2620:123:2007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:89:b4:c4:64:8e:22:5c:b0:c1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=7185ed34-f46b-453d-88eb-c0fc62af1273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:fc:2b:65:61:3c:f3:17:ec:f5:ee:06:68:
                    41:80:99:f6:97:ae:b6:d6:a5:6b:01:05:c5:dd:6d:
                    e5:66:f2:d9:9e:3b:30:96:8d:76:01:a0:8a:50:d4:
                    c5:03:7e:4a:e3:f6:87:b7:5b:98:62:04:0d:a8:27:
                    f5:f0:44:89:59:93:c6:8f:64:ea:00:a0:fc:58:6c:
                    07:82:54:09:63:9f:ca:93:22:15:35:a2:4e:b1:e1:
                    4f:35:61:93:21:c1:6d:ca:31:40:1c:39:37:38:d1:
                    81:a4:c5:84:72:ce:01:6c:10:48:d4:07:67:9a:1b:
                    a2:7a:05:d1:fe:e7:46:86:86:ec:6d:b1:d1:86:53:
                    54:5f:87:f2:c6:67:5b:c8:67:69:b1:56:80:27:17:
                    23:c0:d8:cb:fa:6c:7c:04:2b:8c:df:a7:75:e2:e9:
                    0d:a5:6d:43:1e:86:38:30:18:dd:42:25:4f:49:e0:
                    6b:1e:e3:de:d6:41:10:29:36:3b:a4:cb:5b:5e:76:
                    eb:10:4a:8c:60:56:55:06:0e:c4:ec:3e:84:95:56:
                    66:4d:c6:53:47:82:10:5a:d7:e1:f0:ed:e2:85:d3:
                    27:d3:1e:ba:f0:a9:49:98:18:24:c5:aa:0c:e4:64:
                    f2:5e:61:6c:05:58:16:96:2c:0d:c2:ac:d0:f8:78:
                    3e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:71:22:60:53:38:9A:11:BF:42:09:B0:E2:71:05:CA:10:18:27:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c78129b-87ff-38ea-8cd7-a246c0876ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:9a:f8:51:c3:81:08:f7:db:18:80:36:ff:dc:bb:57:7f:76:
         c3:8f:7d:9c:e6:07:1a:09:fa:9a:f7:8c:83:50:81:df:22:e8:
         b9:a0:6b:57:fa:96:73:d1:7a:f8:b4:b9:aa:53:dc:68:1d:ec:
         eb:87:47:03:71:53:10:db:91:8c:72:28:b9:25:a4:60:6a:ad:
         3b:81:9a:ab:5b:c1:f4:08:ae:dc:a8:0b:da:28:a1:18:8b:fc:
         26:61:9a:77:9e:b0:af:f6:2e:d4:43:c7:d4:24:f1:21:96:fd:
         ae:7c:c7:0c:90:d6:bc:cb:fd:5d:5b:4e:5e:8f:d4:50:e9:75:
         c7:f0:9c:63:c7:6e:0b:4f:2f:7a:ef:61:15:da:02:6d:33:60:
         f7:e2:d1:c7:69:ab:9b:01:4e:4c:6e:93:da:ec:db:e7:20:52:
         0c:43:3a:cc:56:be:ca:7e:f1:6a:1e:00:9a:ce:b5:7e:31:d0:
         ef:9c:84:1c:3b:1c:e4:9c:64:25:2d:41:bd:f5:38:8c:3b:29:
         dc:36:9f:f4:79:72:5c:c0:1c:ea:85:75:cc:0c:58:02:16:f9:
         a8:bd:a7:6b:5e:84:2d:45:52:98:85:44:32:a1:ea:ec:e0:c4:
         8a:74:df:ad:99:08:48:7a:51:2a:dd:f5:42:22:85:63:ee:b4:
         f9:d2:c6:4b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUNhYm0xGSOIlywwTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI0MDIyOTE0MDAzMVoXDTI0MDUyOTEzMDAzMVowLzEtMCsGA1UEAxMk
NzE4NWVkMzQtZjQ2Yi00NTNkLTg4ZWItYzBmYzYyYWYxMjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzz8K2VhPPMX7PXuBmhBgJn2l6621qVrAQXF
3W3lZvLZnjswlo12AaCKUNTFA35K4/aHt1uYYgQNqCf18ESJWZPGj2TqAKD8WGwH
glQJY5/KkyIVNaJOseFPNWGTIcFtyjFAHDk3ONGBpMWEcs4BbBBI1AdnmhuiegXR
/udGhobsbbHRhlNUX4fyxmdbyGdpsVaAJxcjwNjL+mx8BCuM36d14ukNpW1DHoY4
MBjdQiVPSeBrHuPe1kEQKTY7pMtbXnbrEEqMYFZVBg7E7D6ElVZmTcZTR4IQWtfh
8O3ihdMn0x668KlJmBgkxaoM5GTyXmFsBVgWliwNwqzQ+Hg+PwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFxxImBTOJoRv0IJsOJxBcoQGCd+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvOWM3ODEyOWItODdmZi0z
OGVhLThjZDctYTI0NmMwODc2YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyAH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB6a+FHDgQj32xiANv/cu1d/dsOPfZzmBxoJ+pr3jINQgd8i6Lmg
a1f6lnPRevi0uapT3Ggd7OuHRwNxUxDbkYxyKLklpGBqrTuBmqtbwfQIrtyoC9oo
oRiL/CZhmneesK/2LtRDx9Qk8SGW/a58xwyQ1rzL/V1bTl6P1FDpdcfwnGPHbgtP
L3rvYRXaAm0zYPfi0cdpq5sBTkxuk9rs2+cgUgxDOsxWvsp+8WoeAJrOtX4x0O+c
hBw7HOScZCUtQb31OIw7Kdw2n/R5clzAHOqFdcwMWAIW+ai9p2tehC1FUpiFRDKh
6uzgxIp0362ZCEh6USrd9UIihWPutPnSxks=
-----END CERTIFICATE-----
Generated at Thu May 9 15:25:56 2024 by rpki-client on console-ams.rpki-client.org