Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/98e886f1-cc44-3839-b7f0-048f0f3f04af.roa
File:                     98e886f1-cc44-3839-b7f0-048f0f3f04af.roa (raw, json)
Hash identifier:          Crwssuvq8PDtBo/f/Iu1VwNV6EveCt4FP3B/j93pmsw=
Subject key identifier:   BB:CD:F6:BC:E9:8C:AE:BE:59:29:C8:C0:B4:2B:0C:2F:11:1D:AE:3B
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F43285845B4E8D1D4F60FE58310610000
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/98e886f1-cc44-3839-b7f0-048f0f3f04af.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     206018
IP address blocks:        2602:fc09:f80::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d1:d4:f6:0f:e5:83:10:61:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=7cf6e78c-bad7-4e1b-a697-4416b940380c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7b:6e:11:91:67:bd:a7:a7:9d:df:ce:09:5a:
                    9c:79:9b:a7:8d:67:4b:1a:bf:b6:a7:0a:0e:da:d4:
                    34:27:2e:c7:c9:c5:f5:bb:68:a2:6c:e6:ea:c9:1e:
                    e7:b3:12:fa:3f:e4:ab:8e:80:14:80:93:0c:cc:68:
                    55:69:93:36:05:9d:d2:0b:82:12:76:54:48:24:37:
                    b6:9e:5b:62:a0:ae:ea:eb:cc:cd:ab:86:7b:32:f3:
                    78:3a:9e:db:c3:e5:f5:65:da:60:80:48:4b:e6:10:
                    8d:79:cb:90:4c:88:05:46:99:2a:c2:bb:5e:08:3d:
                    ee:37:6f:25:b5:da:d0:c3:cb:8d:24:92:e2:c7:a3:
                    d1:82:75:51:49:a8:71:1a:25:2c:99:ea:b8:02:b5:
                    f9:9b:3c:87:a2:df:68:f0:07:6d:a5:aa:7c:99:c4:
                    67:12:31:ed:7f:93:f5:85:02:3b:5e:02:a8:70:5d:
                    e1:ea:1a:11:00:7d:ed:55:dc:8e:d0:a0:35:52:ba:
                    8c:68:7d:b2:85:ff:09:37:6a:8d:f5:7c:23:d0:cf:
                    73:20:70:38:1d:d3:9b:0e:4e:89:32:e2:d8:97:9b:
                    82:a6:24:fc:cf:f5:58:d3:33:ad:3f:f1:d9:38:8c:
                    44:f7:84:b2:f4:99:95:4b:7e:07:59:a8:a0:a7:86:
                    08:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CD:F6:BC:E9:8C:AE:BE:59:29:C8:C0:B4:2B:0C:2F:11:1D:AE:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/98e886f1-cc44-3839-b7f0-048f0f3f04af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc09:f80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:65:68:fa:45:bf:e2:ce:76:56:7f:f4:85:ee:4c:3f:cd:ca:
         6c:4e:f3:cf:4a:89:15:a0:90:db:b8:ac:13:26:65:f3:70:aa:
         7c:34:57:87:cc:ff:bb:fe:e7:d2:46:18:c0:98:ef:04:c5:41:
         89:95:08:8e:cd:02:1e:23:30:29:05:cd:e3:9f:54:2f:8b:e0:
         5d:c2:11:e2:b1:f4:3d:11:4b:f8:7c:f0:12:3a:7e:58:7a:29:
         51:0e:9b:2a:63:bd:f8:0f:27:78:0e:15:61:e2:4f:83:12:dc:
         fa:82:0b:46:76:97:82:0c:c0:1e:06:5b:d7:c2:63:e0:96:11:
         b0:98:b7:2c:f6:da:3e:e2:9a:e6:67:1c:81:74:39:d1:97:63:
         e4:4e:56:f5:be:c7:1e:37:ac:18:b7:a5:f6:e6:c1:d2:59:9c:
         ad:dc:e9:c8:08:65:68:40:2c:a9:eb:28:ba:df:db:dc:79:79:
         9e:85:f9:d9:90:d9:50:bf:3d:86:fa:69:76:36:c7:bd:a9:32:
         13:62:37:01:99:b5:b3:9d:65:ea:b7:54:aa:df:85:33:48:36:
         b6:de:87:ac:20:7c:81:76:ea:80:86:83:ee:84:b6:52:95:f0:
         f4:d0:2d:32:a7:8f:db:6c:82:e8:4c:17:39:c4:68:e2:b3:8e:
         61:96:ed:23
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEW06NHU9g/lgxBhAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3
ZWVlMB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk
N2NmNmU3OGMtYmFkNy00ZTFiLWE2OTctNDQxNmI5NDAzODBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HtuEZFnvaennd/OCVqceZunjWdLGr+2pwoO
2tQ0Jy7HycX1u2iibObqyR7nsxL6P+SrjoAUgJMMzGhVaZM2BZ3SC4ISdlRIJDe2
nltioK7q68zNq4Z7MvN4Op7bw+X1ZdpggEhL5hCNecuQTIgFRpkqwrteCD3uN28l
tdrQw8uNJJLix6PRgnVRSahxGiUsmeq4ArX5mzyHot9o8Adtpap8mcRnEjHtf5P1
hQI7XgKocF3h6hoRAH3tVdyO0KA1UrqMaH2yhf8JN2qN9Xwj0M9zIHA4HdObDk6J
MuLYl5uCpiT8z/VY0zOtP/HZOIxE94Sy9JmVS34HWaigp4YI2QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLvN9rzpjK6+WSnIwLQrDC8RHa47MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3
Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvOThlODg2ZjEtY2M0NC0z
ODM5LWI3ZjAtMDQ4ZjBmM2YwNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy
ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw
N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk
N2MyMDdlZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL8CQ+A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAhlaPpFv+LOdlZ/9IXuTD/NymxO889KiRWgkNu4rBMmZfNwqnw0
V4fM/7v+59JGGMCY7wTFQYmVCI7NAh4jMCkFzeOfVC+L4F3CEeKx9D0RS/h88BI6
flh6KVEOmypjvfgPJ3gOFWHiT4MS3PqCC0Z2l4IMwB4GW9fCY+CWEbCYtyz22j7i
muZnHIF0OdGXY+ROVvW+xx43rBi3pfbmwdJZnK3c6cgIZWhALKnrKLrf29x5eZ6F
+dmQ2VC/PYb6aXY2x72pMhNiNwGZtbOdZeq3VKrfhTNINrbeh6wgfIF26oCGg+6E
tlKV8PTQLTKnj9tsguhMFznEaOKzjmGW7SM=
-----END CERTIFICATE-----
Generated at Sat May 18 15:35:25 2024 by rpki-client on console-fra.rpki-client.org