Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa
File:                     f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa (raw, json)
Hash identifier:          J+5DRChbKOZ8jE769gMQu52QDofX8Xz8AaT1BDwbrts=
Subject key identifier:   EF:32:67:46:E8:6B:8C:B0:53:B7:09:FB:1D:F1:F1:7E:F5:E9:D5:04
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F43285845C0042C4C527157F36304CB00
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa
Signing time:             Fri 03 May 2024 12:29:41 +0000
ROA not before:           Fri 03 May 2024 12:29:41 +0000
ROA not after:            Thu 01 Aug 2024 12:29:41 +0000
asID:                     0
IP address blocks:        2602:fb78::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:04:2c:4c:52:71:57:f3:63:04:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: May  3 12:29:41 2024 GMT
            Not After : Aug  1 12:29:41 2024 GMT
        Subject: CN=65997437-1a65-401c-bc57-3161ec42a828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:06:31:eb:b2:cb:1b:95:42:92:85:3d:bb:
                    6b:af:bd:c6:2f:5c:51:28:d4:b2:8e:64:ae:27:78:
                    6e:95:99:8c:7b:af:59:ca:3b:e2:2e:c4:d7:38:da:
                    d5:72:16:93:6e:da:44:ae:f8:7c:27:13:c2:ca:bc:
                    97:0e:3e:67:8e:93:b0:e1:e5:05:b8:77:19:35:a1:
                    32:af:34:a3:06:b9:5a:85:59:19:93:21:ff:77:5f:
                    9d:29:64:a8:37:8f:b4:bc:75:67:88:fb:c7:a3:6c:
                    02:b8:bc:2a:2d:64:cc:35:3d:d4:30:3c:a0:e6:13:
                    9c:88:79:e3:f0:2e:15:2a:14:22:63:3f:13:e4:9a:
                    8f:11:d5:c6:c2:fd:bf:c2:10:f1:c9:ff:3a:9f:73:
                    0b:10:49:0f:60:94:dd:a9:ef:80:28:bf:35:7d:52:
                    b8:06:e9:01:4f:b1:06:0f:4a:91:c1:42:a2:d1:a4:
                    70:f7:8d:47:fb:58:63:29:10:9b:71:c0:92:ba:55:
                    65:14:ea:fd:d5:8d:32:1b:b5:2c:0c:bc:db:26:f5:
                    d9:0a:15:41:32:3f:db:51:18:49:10:7d:dd:8c:0c:
                    e4:dd:46:b1:9c:8b:43:42:4c:9a:5e:0c:a0:9c:15:
                    90:76:70:38:bb:65:83:fa:3a:a0:27:52:42:61:66:
                    cb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:32:67:46:E8:6B:8C:B0:53:B7:09:FB:1D:F1:F1:7E:F5:E9:D5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1b:cc:f3:51:df:d6:70:97:ab:2d:36:28:1c:85:d3:cb:e5:
         ac:ea:c4:26:65:9b:4a:1a:2f:d5:60:f5:b8:78:ec:a2:fc:6e:
         33:6a:c6:20:ad:e0:28:31:a5:da:7f:3b:1c:1f:c2:27:84:7a:
         d6:e8:1b:90:e1:92:f8:6e:81:ca:ca:73:5d:97:4d:51:8b:a4:
         6d:4a:09:ba:7d:6a:85:6a:26:20:bc:b3:bb:84:c6:b2:8d:9b:
         a2:1b:11:60:3b:b0:f8:ee:f7:94:82:48:20:89:cc:5c:a6:6c:
         8f:1b:c9:48:57:84:ae:f5:c3:b4:d4:9a:f9:c1:59:0d:62:4d:
         ff:5e:ae:81:c6:64:fd:ce:a5:80:15:1b:3f:78:db:1a:40:92:
         10:fb:8a:a2:eb:c2:3c:29:23:ee:6c:db:09:58:66:d6:79:a3:
         b4:b8:74:3f:0d:fa:3a:b6:a3:54:7d:6b:0b:24:d4:ab:99:2a:
         67:34:bb:e2:28:ae:48:15:a2:4c:6f:1c:64:da:43:10:e2:56:
         0e:a9:a9:88:c2:db:18:30:fa:05:13:e1:cd:d5:02:05:ee:07:
         6b:63:57:57:44:f0:f2:3d:35:80:c2:9d:dd:5b:a6:ff:4e:5b:
         6d:dd:90:02:45:4b:8c:2e:72:c4:b3:70:c9:19:91:92:b0:e5:
         76:84:c8:0d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXABCxMUnFX82MEywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3
YTEzMB4XDTI0MDUwMzEyMjk0MVoXDTI0MDgwMTEyMjk0MVowLzEtMCsGA1UEAxMk
NjU5OTc0MzctMWE2NS00MDFjLWJjNTctMzE2MWVjNDJhODI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXkGMeuyyxuVQpKFPbtrr73GL1xRKNSyjmSu
J3hulZmMe69ZyjviLsTXONrVchaTbtpErvh8JxPCyryXDj5njpOw4eUFuHcZNaEy
rzSjBrlahVkZkyH/d1+dKWSoN4+0vHVniPvHo2wCuLwqLWTMNT3UMDyg5hOciHnj
8C4VKhQiYz8T5JqPEdXGwv2/whDxyf86n3MLEEkPYJTdqe+AKL81fVK4BukBT7EG
D0qRwUKi0aRw941H+1hjKRCbccCSulVlFOr91Y0yG7UsDLzbJvXZChVBMj/bURhJ
EH3djAzk3UaxnItDQkyaXgygnBWQdnA4u2WD+jqgJ1JCYWbLDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO8yZ0boa4ywU7cJ+x3x8X716dUEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3
MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvZjlmN2VhMmItNjE0ZC0z
YmM5LThmYTMtOTg0M2FlYmVlZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll
NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi
N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw
MWY1YjdhMTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7eAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADQbzPNR39Zwl6stNigchdPL5azqxCZlm0oaL9Vg9bh47KL8bjNq
xiCt4Cgxpdp/OxwfwieEetboG5DhkvhugcrKc12XTVGLpG1KCbp9aoVqJiC8s7uE
xrKNm6IbEWA7sPju95SCSCCJzFymbI8byUhXhK71w7TUmvnBWQ1iTf9eroHGZP3O
pYAVGz942xpAkhD7iqLrwjwpI+5s2wlYZtZ5o7S4dD8N+jq2o1R9awsk1KuZKmc0
u+IorkgVokxvHGTaQxDiVg6pqYjC2xgw+gUT4c3VAgXuB2tjV1dE8PI9NYDCnd1b
pv9OW23dkAJFS4wucsSzcMkZkZKw5XaEyA0=
-----END CERTIFICATE-----
Generated at Sun May 26 19:50:19 2024 by rpki-client on console-ams.rpki-client.org