Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/c4ef6b4e-0248-300e-b558-df116a2728a6.roa
File:                     c4ef6b4e-0248-300e-b558-df116a2728a6.roa (raw, json)
Hash identifier:          oYbu0GYPmlmdQbEjnNBOQIUgUYALgz3nPWCQRzE7eYg=
Subject key identifier:   1B:82:4F:1F:25:D5:5E:70:D1:8B:58:5D:F0:B6:E7:CD:FD:78:27:94
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F43285845C1514C1109FBD525397ADD00
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/c4ef6b4e-0248-300e-b558-df116a2728a6.roa
Signing time:             Fri 03 May 2024 23:40:53 +0000
ROA not before:           Fri 03 May 2024 23:40:53 +0000
ROA not after:            Thu 01 Aug 2024 23:40:53 +0000
asID:                     396416
IP address blocks:        2602:fb78:4::/48 maxlen: 48
                          2602:fb78:1::/48 maxlen: 48
                          2602:fb78:2::/48 maxlen: 48
                          2602:fb78:3::/48 maxlen: 48
                          2602:fb78:5::/48 maxlen: 48
                          2602:fb78:6::/48 maxlen: 48
                          2602:fb78:7::/48 maxlen: 48
                          2602:fb78:8::/48 maxlen: 48
                          2602:fb78:9::/48 maxlen: 48
                          2602:fb78:a::/48 maxlen: 48
                          2602:fb78:b::/48 maxlen: 48
                          2602:fb78:c::/48 maxlen: 48
                          2602:fb78:d::/48 maxlen: 48
                          2602:fb78:e::/48 maxlen: 48
                          2602:fb78:f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:51:4c:11:09:fb:d5:25:39:7a:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: May  3 23:40:53 2024 GMT
            Not After : Aug  1 23:40:53 2024 GMT
        Subject: CN=89e7cae9-0268-4be6-9429-549c7e1e697d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d7:3c:9f:04:03:0d:bc:37:7c:d6:43:1a:89:
                    29:28:21:e3:c8:5c:c6:fd:fa:0f:76:89:aa:5b:02:
                    ef:6a:8d:98:9b:78:ec:00:45:45:b0:f4:a8:53:31:
                    55:45:df:99:4c:d9:77:7b:b7:26:b6:27:bb:88:14:
                    73:37:dd:dc:f5:40:50:f1:eb:5a:8e:19:f2:29:46:
                    09:2c:d0:cd:2d:57:af:87:9f:ca:68:8c:47:d8:e5:
                    a8:34:fe:3d:d9:41:da:4c:71:78:5d:6c:85:12:dd:
                    92:19:ec:9c:55:30:46:c2:ef:9b:c3:f5:e9:97:c4:
                    47:e3:4a:03:43:7c:3e:9a:20:59:af:14:4a:bc:9d:
                    be:73:a8:79:71:29:f3:ea:87:b4:fd:68:00:41:6d:
                    67:59:e9:78:34:80:c0:de:57:36:9c:db:44:a2:05:
                    1c:fd:fc:8b:e3:f3:89:59:a0:76:c6:ed:76:3b:21:
                    55:c4:84:d5:af:f6:d4:d0:78:ae:54:83:61:bf:df:
                    60:b9:df:03:0f:2a:9b:74:f5:c6:ff:33:21:06:ec:
                    ca:b2:0b:94:5d:7f:2d:85:92:72:ca:78:02:b0:01:
                    46:21:c4:9d:b7:13:cf:a9:6b:b3:72:5b:19:10:f8:
                    47:b3:88:25:11:2c:5b:7d:e9:f9:62:15:0b:03:6c:
                    90:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:82:4F:1F:25:D5:5E:70:D1:8B:58:5D:F0:B6:E7:CD:FD:78:27:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/c4ef6b4e-0248-300e-b558-df116a2728a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:1::-2602:fb78:f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:51:08:b8:2b:f0:91:9d:c9:0b:6e:66:87:b9:03:d1:01:08:
         93:35:01:e3:69:fb:25:1f:19:b4:db:53:43:76:8d:b9:c9:b6:
         f9:a6:76:a6:59:5c:36:be:7b:28:37:ab:49:c0:37:34:78:f5:
         f2:6e:34:db:8a:bc:e7:d2:82:ad:21:72:78:cd:8d:e7:43:79:
         c7:e0:85:17:ee:30:50:47:38:46:8a:bd:f9:ef:3d:79:04:b0:
         0b:50:55:85:18:63:82:af:ce:23:f7:a7:5f:2f:fa:e3:c9:98:
         be:c9:66:e1:19:d4:8e:fa:df:e6:8e:2d:59:b2:d3:7a:d0:91:
         a7:3f:28:49:fa:97:ec:38:d2:c9:19:0f:a2:97:33:f5:1a:ce:
         85:a2:7f:1a:37:d5:4c:c9:55:5d:81:3f:b9:dd:ed:2b:cc:f0:
         fd:d3:0f:a4:b6:04:dc:d8:94:a2:da:95:ed:e6:b2:70:83:1e:
         83:be:34:7f:68:f3:02:62:23:fc:0e:5b:12:02:f7:90:41:a8:
         98:b9:de:3e:0b:87:f1:3d:47:f8:8e:f9:c2:88:4d:e8:3a:e5:
         a3:9a:e6:d8:5c:15:69:a1:79:97:d5:c7:de:e1:6f:7d:f0:8d:
         54:8a:3c:e1:84:d0:53:84:f2:ef:2d:1e:51:21:b9:50:82:b8:
         a5:4d:3f:b1
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEXBUUwRCfvVJTl63QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3
YTEzMB4XDTI0MDUwMzIzNDA1M1oXDTI0MDgwMTIzNDA1M1owLzEtMCsGA1UEAxMk
ODllN2NhZTktMDI2OC00YmU2LTk0MjktNTQ5YzdlMWU2OTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdc8nwQDDbw3fNZDGokpKCHjyFzG/foPdomq
WwLvao2Ym3jsAEVFsPSoUzFVRd+ZTNl3e7cmtie7iBRzN93c9UBQ8etajhnyKUYJ
LNDNLVevh5/KaIxH2OWoNP492UHaTHF4XWyFEt2SGeycVTBGwu+bw/Xpl8RH40oD
Q3w+miBZrxRKvJ2+c6h5cSnz6oe0/WgAQW1nWel4NIDA3lc2nNtEogUc/fyL4/OJ
WaB2xu12OyFVxITVr/bU0HiuVINhv99gud8DDyqbdPXG/zMhBuzKsguUXX8thZJy
yngCsAFGIcSdtxPPqWuzclsZEPhHs4glESxbfen5YhULA2yQzQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFBuCTx8l1V5w0YtYXfC25839eCeUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3
MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvYzRlZjZiNGUtMDI0OC0z
MDBlLWI1NTgtZGYxMTZhMjcyOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll
NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi
N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw
MWY1YjdhMTMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmAvt4
AAEDBwQmAvt4AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEATFEIuCvwkZ3JC25mh7kD0QEIkzUB42n7JR8Z
tNtTQ3aNucm2+aZ2pllcNr57KDerScA3NHj18m4024q859KCrSFyeM2N50N5x+CF
F+4wUEc4Roq9+e89eQSwC1BVhRhjgq/OI/enXy/648mYvslm4RnUjvrf5o4tWbLT
etCRpz8oSfqX7DjSyRkPopcz9RrOhaJ/GjfVTMlVXYE/ud3tK8zw/dMPpLYE3NiU
otqV7eaycIMeg740f2jzAmIj/A5bEgL3kEGomLnePguH8T1H+I75wohN6Drlo5rm
2FwVaaF5l9XH3uFvffCNVIo84YTQU4Ty7y0eUSG5UIK4pU0/sQ==
-----END CERTIFICATE-----
Generated at Sun May 19 01:57:50 2024 by rpki-client on console-ams.rpki-client.org