Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/e26439d8-ada3-3143-aa76-717f5a5a268e.roa
File:                     e26439d8-ada3-3143-aa76-717f5a5a268e.roa (raw, json)
Hash identifier:          DwndF8+dym9Qkwj307xk/3ZiLBvv1xlqAU2h5TYHNHs=
Subject key identifier:   20:C8:88:4A:90:0C:29:32:A3:68:41:74:5F:A5:45:7A:B3:24:87:FB
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285845DBFE6C0B3305936B9EA32280
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/e26439d8-ada3-3143-aa76-717f5a5a268e.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     399976
IP address blocks:        2602:80c:20d9::/48 maxlen: 64
                          2602:80c:20da::/48 maxlen: 64
                          2602:80c:20db::/48 maxlen: 64
                          2602:80c:20dc::/48 maxlen: 64
                          2602:80c:20dd::/48 maxlen: 64
                          2602:80c:20de::/48 maxlen: 64
                          2602:80c:20d1::/48 maxlen: 64
                          2602:80c:20d2::/48 maxlen: 64
                          2602:80c:20df::/48 maxlen: 64
                          2602:80c:20d4::/48 maxlen: 64
                          2602:80c:20d5::/48 maxlen: 64
                          2602:80c:20d6::/48 maxlen: 64
                          2602:80c:20d7::/48 maxlen: 64
                          2602:80c:20d8::/48 maxlen: 64
                          2602:80c:20d3::/48 maxlen: 64
                          2602:80c:20d0::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:6c:0b:33:05:93:6b:9e:a3:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=e50acb7d-b47a-48f8-85af-96f89825fa94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:0d:06:6e:30:76:10:49:1f:c0:b1:dc:b3:
                    7a:ea:19:0b:f5:3e:9d:53:b5:8f:81:d4:c9:78:3f:
                    bf:07:9c:5c:9a:2c:ff:d2:0e:c0:c0:0c:c0:44:c2:
                    26:7e:66:ff:55:9a:fb:a2:0c:05:45:1f:ec:0d:31:
                    da:54:c9:cb:74:42:8c:06:c4:14:e0:ba:b2:f0:04:
                    25:ac:b4:ca:75:8e:73:12:f6:44:cc:cc:3b:7f:d9:
                    40:bf:b2:b8:41:97:c6:66:65:06:7c:e3:c3:ac:c7:
                    fc:f1:72:e8:29:e5:bf:52:8f:2b:64:55:e5:5e:27:
                    a9:44:40:f9:4c:27:ef:d7:f7:9e:18:73:82:b2:46:
                    e7:10:75:f6:86:6a:60:79:9f:5a:eb:4a:b8:50:33:
                    c5:fc:c8:06:ec:50:d4:d6:47:79:3c:35:b5:5f:cf:
                    22:2d:96:e4:54:28:ce:49:11:85:13:61:27:fb:e6:
                    b7:3b:50:9d:3e:e4:6b:48:04:9f:f6:14:18:df:11:
                    a4:28:4e:d7:dc:ba:39:4a:30:32:42:8b:75:67:2c:
                    67:3c:93:73:14:20:af:20:36:f3:42:cd:ac:19:96:
                    69:ac:b5:f5:63:ab:6e:09:75:1d:1c:fc:5f:86:f3:
                    2e:9f:e2:9a:5b:20:be:15:53:d5:a6:61:0e:48:4e:
                    79:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C8:88:4A:90:0C:29:32:A3:68:41:74:5F:A5:45:7A:B3:24:87:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/e26439d8-ada3-3143-aa76-717f5a5a268e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:74:e3:a0:78:3e:e1:9c:ab:59:03:40:c9:1c:83:c4:ca:d7:
         a6:25:80:78:63:ea:0c:55:dc:c5:48:0c:e5:0c:f2:8e:ab:a8:
         68:76:b1:11:27:17:48:76:0c:df:d5:9f:17:d0:08:32:30:c5:
         8d:02:ad:a5:fc:2c:a3:99:66:4e:44:9c:43:0a:7a:63:1c:2c:
         42:b9:7f:18:21:13:a9:1d:76:84:a4:19:3d:d9:ef:f7:66:45:
         53:69:b2:41:cc:27:80:54:9b:b0:26:e0:a3:57:a9:54:63:64:
         e0:ad:e3:55:e7:c2:65:a9:53:b9:2c:5a:a3:36:ad:f4:1b:31:
         83:7b:9f:cd:a3:14:ef:0c:a6:62:60:35:44:c0:3c:e3:90:0f:
         53:0a:54:8a:8a:2e:f6:3c:d9:03:d5:95:1c:13:d3:e8:c5:d4:
         d8:84:44:55:c7:22:c2:bb:b9:dd:40:ee:2d:95:42:fa:42:75:
         ad:11:cc:94:18:87:d8:54:ee:01:43:6c:d0:82:3b:4a:b4:69:
         1e:19:aa:16:9c:5d:90:b3:6d:c0:b6:62:df:bc:fb:bd:1c:08:
         7a:a0:ec:ed:e9:f4:b2:9d:94:0c:92:d5:cc:01:6f:ba:fe:cf:
         8a:0e:47:97:88:b0:ec:bf:10:b4:69:0d:08:41:f6:fa:50:68:
         ba:56:0a:b3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXb/mwLMwWTa56jIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI0MDUxMzEzMDAzNFoXDTI0MDgxMTEzMDAzNFowLzEtMCsGA1UEAxMk
ZTUwYWNiN2QtYjQ3YS00OGY4LTg1YWYtOTZmODk4MjVmYTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8wNBm4wdhBJH8Cx3LN66hkL9T6dU7WPgdTJ
eD+/B5xcmiz/0g7AwAzARMImfmb/VZr7ogwFRR/sDTHaVMnLdEKMBsQU4Lqy8AQl
rLTKdY5zEvZEzMw7f9lAv7K4QZfGZmUGfOPDrMf88XLoKeW/Uo8rZFXlXiepRED5
TCfv1/eeGHOCskbnEHX2hmpgeZ9a60q4UDPF/MgG7FDU1kd5PDW1X88iLZbkVCjO
SRGFE2En++a3O1CdPuRrSASf9hQY3xGkKE7X3Lo5SjAyQot1ZyxnPJNzFCCvIDbz
Qs2sGZZprLX1Y6tuCXUdHPxfhvMun+KaWyC+FVPVpmEOSE55wwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCDIiEqQDCkyo2hBdF+lRXqzJIf7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvZTI2NDM5ZDgtYWRhMy0z
MTQzLWFhNzYtNzE3ZjVhNWEyNjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIDCDQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACp046B4PuGcq1kDQMkcg8TK16YlgHhj6gxV3MVIDOUM8o6rqGh2
sREnF0h2DN/VnxfQCDIwxY0CraX8LKOZZk5EnEMKemMcLEK5fxghE6kddoSkGT3Z
7/dmRVNpskHMJ4BUm7Am4KNXqVRjZOCt41XnwmWpU7ksWqM2rfQbMYN7n82jFO8M
pmJgNUTAPOOQD1MKVIqKLvY82QPVlRwT0+jF1NiERFXHIsK7ud1A7i2VQvpCda0R
zJQYh9hU7gFDbNCCO0q0aR4ZqhacXZCzbcC2Yt+8+70cCHqg7O3p9LKdlAyS1cwB
b7r+z4oOR5eIsOy/ELRpDQhB9vpQaLpWCrM=
-----END CERTIFICATE-----
Generated at Fri May 17 15:31:21 2024 by rpki-client on console-ams.rpki-client.org