Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/6cd0bba9-129b-39b1-b942-efb9d16b311f.roa
File:                     6cd0bba9-129b-39b1-b942-efb9d16b311f.roa (raw, json)
Hash identifier:          B2s6qHDfEwS2HDwsqfOP+5DuMRbJCWb7bF8c1RnsQRs=
Subject key identifier:   E2:D7:CE:16:1E:C3:AE:7B:10:17:6F:4E:A2:04:90:C8:58:68:33:76
Certificate issuer:       /CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3
Certificate serial:       010D0C9F43285845C01391471318BED01F8A3040
Authority key identifier: 4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/6cd0bba9-129b-39b1-b942-efb9d16b311f.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     400490
IP address blocks:        2602:fbc2::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:91:47:13:18:be:d0:1f:8a:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=3d1dc03a-6c38-4fb7-94ff-bfcfb438c031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:62:a6:69:bf:10:c9:a0:4d:b3:cb:bb:0f:
                    f1:fe:10:13:f6:be:af:dc:0c:18:1b:eb:5c:d6:e2:
                    64:9b:10:9f:de:61:65:a3:18:7e:c8:32:cc:b7:8f:
                    3f:aa:5f:70:72:d0:eb:89:a1:ea:66:be:b5:71:a5:
                    b3:cb:e5:df:8a:0b:cd:76:e8:18:23:35:86:90:12:
                    29:5c:d2:69:23:ea:51:77:27:9b:40:7f:7c:45:4a:
                    08:b5:4a:c6:39:8e:d0:88:0c:e9:9a:95:ee:d3:e9:
                    aa:1b:fc:8a:cb:38:fe:aa:a1:ed:e9:ee:1d:ec:bb:
                    fc:af:8c:17:42:bb:f2:66:3a:ff:b7:36:d8:c4:e0:
                    8d:c3:8f:c1:ab:37:57:9a:8d:b0:7c:ed:ae:ec:57:
                    9c:3f:44:83:9d:ea:a0:14:59:f0:64:ba:cd:0d:04:
                    39:94:2d:99:b2:89:09:7b:1e:7d:e1:52:a0:73:39:
                    31:d0:f3:bc:0e:b0:07:45:a9:28:b7:9f:95:d9:5e:
                    28:6c:dc:18:d8:dc:e6:2f:fb:d6:79:aa:2d:02:84:
                    e1:2f:69:44:ca:86:8b:7e:81:8d:db:8d:7a:da:cd:
                    95:38:b6:8a:40:75:16:e2:17:50:68:7c:88:f5:95:
                    7d:5b:bf:40:4e:4f:f1:41:e5:15:8a:9e:a4:69:9c:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D7:CE:16:1E:C3:AE:7B:10:17:6F:4E:A2:04:90:C8:58:68:33:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/6cd0bba9-129b-39b1-b942-efb9d16b311f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbc2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c7:34:4e:7b:a5:81:d6:24:45:f4:9f:ec:d5:4a:02:fd:e2:
         c4:21:56:ad:da:17:33:2e:9b:c7:16:e4:3d:2b:02:4e:9a:59:
         6c:70:80:6e:55:2a:52:6c:f8:fb:9f:4c:6f:73:be:28:f4:84:
         53:ef:8c:17:0d:ac:fc:a2:50:b9:98:29:1a:b2:c1:41:3a:da:
         a3:fd:b0:e3:ef:3a:6e:84:dd:1b:2b:27:4a:88:22:5b:9d:dc:
         fb:b5:22:3a:75:28:fa:68:58:7f:d3:27:ba:2b:ad:21:f2:a8:
         f0:77:72:24:8a:10:99:37:42:4c:d7:f3:7c:ad:df:b4:00:7c:
         04:97:3e:de:e5:dd:c4:a5:a3:74:6d:0e:8f:8c:9c:51:f4:54:
         80:95:29:9e:be:a7:dd:de:c9:e6:cd:3f:f8:88:c4:be:c2:3d:
         9c:1d:ff:f2:26:e5:57:ab:7a:8d:b1:d0:b2:10:27:9a:9d:ae:
         5b:79:c1:45:53:99:ff:57:f4:36:5f:c4:2c:00:09:d6:80:5f:
         3c:3a:58:45:42:00:bc:b8:be:0f:8a:90:84:fb:1e:5a:91:fa:
         ee:6c:51:ef:17:26:8b:38:c9:73:de:5d:40:63:66:51:07:93:
         2c:68:dc:44:97:ae:48:b7:37:d8:14:e0:27:fd:e0:40:1e:92:
         f0:b3:5f:77
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEXAE5FHExi+0B+KMEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGRlMzdkMTctMjY2NC00Yzg1LTliZTQtYTM1YmFmMGZk
MmIzMB4XDTI0MDUwMzEzMDAzNFoXDTI0MDgwMTEzMDAzNFowLzEtMCsGA1UEAxMk
M2QxZGMwM2EtNmMzOC00ZmI3LTk0ZmYtYmZjZmI0MzhjMDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGpipmm/EMmgTbPLuw/x/hAT9r6v3AwYG+tc
1uJkmxCf3mFloxh+yDLMt48/ql9wctDriaHqZr61caWzy+XfigvNdugYIzWGkBIp
XNJpI+pRdyebQH98RUoItUrGOY7QiAzpmpXu0+mqG/yKyzj+qqHt6e4d7Lv8r4wX
QrvyZjr/tzbYxOCNw4/BqzdXmo2wfO2u7FecP0SDneqgFFnwZLrNDQQ5lC2ZsokJ
ex594VKgczkx0PO8DrAHRakot5+V2V4obNwY2NzmL/vWeaotAoThL2lEyoaLfoGN
24162s2VOLaKQHUW4hdQaHyI9ZV9W79ATk/xQeUVip6kaZw7DQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOLXzhYew657EBdvTqIEkMhYaDN2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZGUz
N2QxNy0yNjY0LTRjODUtOWJlNC1hMzViYWYwZmQyYjMvNmNkMGJiYTktMTI5Yi0z
OWIxLWI5NDItZWZiOWQxNmIzMTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGRlMzdkMTctMjY2NC00Yzg1LTli
ZTQtYTM1YmFmMGZkMmIzLzBkZTM3ZDE3LTI2NjQtNGM4NS05YmU0LWEzNWJhZjBm
ZDJiMy5jcmwwHwYDVR0jBBgwFoAUTXOciO9LF1iQCUMJdowOO/hl608wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZGUzN2QxNy0yNjY0LTRjODUtOWJlNC1hMzVi
YWYwZmQyYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7wgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJ8c0TnulgdYkRfSf7NVKAv3ixCFWrdoXMy6bxxbkPSsCTppZbHCA
blUqUmz4+59Mb3O+KPSEU++MFw2s/KJQuZgpGrLBQTrao/2w4+86boTdGysnSogi
W53c+7UiOnUo+mhYf9MnuiutIfKo8HdyJIoQmTdCTNfzfK3ftAB8BJc+3uXdxKWj
dG0Oj4ycUfRUgJUpnr6n3d7J5s0/+IjEvsI9nB3/8iblV6t6jbHQshAnmp2uW3nB
RVOZ/1f0Nl/ELAAJ1oBfPDpYRUIAvLi+D4qQhPseWpH67mxR7xcmizjJc95dQGNm
UQeTLGjcRJeuSLc32BTgJ/3gQB6S8LNfdw==
-----END CERTIFICATE-----
Generated at Sat May 18 07:19:28 2024 by rpki-client on console-fra.rpki-client.org