Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/829d2753-deec-33aa-8527-38223ee68443.roa
File:                     829d2753-deec-33aa-8527-38223ee68443.roa (raw, json)
Hash identifier:          VFJ4yOYfh6zyASf11VzfCpTZttC21g6enF8C6Dx57lw=
Subject key identifier:   EB:B9:EB:81:6B:26:04:BE:E8:21:A2:97:E9:28:1D:58:50:35:42:F9
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F43285846B5BFBE41FD41CFEDB55A2A98
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/829d2753-deec-33aa-8527-38223ee68443.roa
Signing time:             Tue 30 Jul 2024 13:00:39 +0000
ROA not before:           Tue 30 Jul 2024 13:00:39 +0000
ROA not after:            Mon 28 Oct 2024 13:00:39 +0000
asID:                     26042
IP address blocks:        2602:f919:102::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b5:bf:be:41:fd:41:cf:ed:b5:5a:2a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Jul 30 13:00:39 2024 GMT
            Not After : Oct 28 13:00:39 2024 GMT
        Subject: CN=a81b6819-701b-4735-a309-2f0861fbb29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:90:74:ce:68:2a:68:09:80:ff:9b:0f:e0:c2:
                    04:2d:af:8c:27:66:53:18:c4:50:4c:f2:6c:a2:aa:
                    69:ca:bf:5c:c3:9f:8e:09:b0:ee:2e:9f:5f:8f:34:
                    f2:94:d6:b9:9b:a6:6a:f6:7d:06:6b:c6:b5:f2:a5:
                    d5:5e:19:8d:37:43:c7:cf:cd:b7:1e:c8:b2:61:b0:
                    3b:27:51:47:6f:93:2c:5f:04:94:d4:ed:d7:a0:c2:
                    55:d7:a7:75:01:84:24:fc:be:36:67:bb:43:2e:85:
                    94:80:43:6a:86:18:ef:07:0a:c5:37:66:3d:6f:fc:
                    e5:e4:c5:a3:70:c9:4d:2e:2c:41:4c:c0:ad:84:48:
                    66:51:3b:12:0f:9b:23:29:f8:c4:93:7d:9f:6a:2c:
                    25:27:72:88:30:70:a5:93:a6:31:b9:23:cf:f7:55:
                    5a:6f:fe:21:22:9d:20:22:5f:95:8a:6d:43:3d:90:
                    7e:b9:82:87:56:2d:9e:e6:0d:db:aa:31:50:9f:4e:
                    38:f8:9b:6d:68:ad:6a:a1:b8:29:c8:d8:a3:94:93:
                    3b:0c:dd:96:bf:a7:42:0c:21:79:51:75:1e:9d:30:
                    c8:de:f0:e0:0d:44:de:fd:93:b4:2f:fc:3f:0c:40:
                    24:6b:1f:ba:da:f2:89:76:da:67:8d:0e:2f:f1:33:
                    c9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B9:EB:81:6B:26:04:BE:E8:21:A2:97:E9:28:1D:58:50:35:42:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/829d2753-deec-33aa-8527-38223ee68443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ab:d2:17:d0:56:e9:52:13:33:93:e7:a6:15:ae:9b:8a:4a:
         f5:26:db:93:ac:4f:5a:df:52:dc:ac:72:23:da:f9:df:3a:04:
         d0:bb:e3:ff:10:de:9f:ff:35:64:ce:0f:41:42:c1:6c:09:f4:
         83:a0:ef:a6:47:86:68:60:9a:e2:e4:ca:67:e1:1b:c6:79:94:
         65:16:30:6b:4e:0c:b2:36:77:83:e6:6e:2b:80:56:df:79:c4:
         17:2a:6e:07:70:56:f7:6a:0f:c3:3f:0e:26:10:25:2e:41:f7:
         77:d9:2c:b9:a0:30:9e:9b:ec:8b:1e:6a:09:3b:73:a2:a7:a9:
         80:fd:8e:60:1d:83:ce:ba:ee:8a:d2:a2:4e:80:2e:e7:18:62:
         54:6f:4c:82:46:c2:73:6c:80:e8:2f:29:9a:71:45:7b:b9:f0:
         4f:d2:95:05:f1:d7:46:22:ec:ad:07:f3:b8:66:1d:b6:8a:62:
         c1:47:0a:5a:c0:66:5b:cc:14:19:ec:e6:63:fe:a0:df:0e:36:
         eb:2a:cf:d2:00:e1:df:12:9c:8b:1d:37:49:bb:1d:cf:4e:da:
         99:e5:e3:6d:9a:54:a8:b7:49:91:b2:ba:d5:96:a7:3f:e1:3a:
         93:11:69:21:d3:98:d2:ee:0a:8e:46:cd:a9:6c:8a:0d:87:9a:
         6d:4e:07:c2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEa1v75B/UHP7bVaKpgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDg0OGNjOWItZTQ2Zi00ODVlLWIzZjItNGYzOTNiNWQ5
MmQ2MB4XDTI0MDczMDEzMDAzOVoXDTI0MTAyODEzMDAzOVowLzEtMCsGA1UEAxMk
YTgxYjY4MTktNzAxYi00NzM1LWEzMDktMmYwODYxZmJiMjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopB0zmgqaAmA/5sP4MIELa+MJ2ZTGMRQTPJs
oqppyr9cw5+OCbDuLp9fjzTylNa5m6Zq9n0Ga8a18qXVXhmNN0PHz823HsiyYbA7
J1FHb5MsXwSU1O3XoMJV16d1AYQk/L42Z7tDLoWUgENqhhjvBwrFN2Y9b/zl5MWj
cMlNLixBTMCthEhmUTsSD5sjKfjEk32faiwlJ3KIMHClk6YxuSPP91Vab/4hIp0g
Il+Vim1DPZB+uYKHVi2e5g3bqjFQn044+JttaK1qobgpyNijlJM7DN2Wv6dCDCF5
UXUenTDI3vDgDUTe/ZO0L/w/DEAkax+62vKJdtpnjQ4v8TPJoQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOu564FrJgS+6CGil+koHVhQNUL5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ODQ4
Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5M2I1ZDkyZDYvODI5ZDI3NTMtZGVlYy0z
M2FhLTg1MjctMzgyMjNlZTY4NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDg0OGNjOWItZTQ2Zi00ODVlLWIz
ZjItNGYzOTNiNWQ5MmQ2LzQ4NDhjYzliLWU0NmYtNDg1ZS1iM2YyLTRmMzkzYjVk
OTJkNi5jcmwwHwYDVR0jBBgwFoAUtipAlYdVr48BpEATPSLyFSu2jeswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80ODQ4Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5
M2I1ZDkyZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5GQEC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD+r0hfQVulSEzOT56YVrpuKSvUm25OsT1rfUtysciPa+d86BNC7
4/8Q3p//NWTOD0FCwWwJ9IOg76ZHhmhgmuLkymfhG8Z5lGUWMGtODLI2d4PmbiuA
Vt95xBcqbgdwVvdqD8M/DiYQJS5B93fZLLmgMJ6b7Iseagk7c6KnqYD9jmAdg866
7orSok6ALucYYlRvTIJGwnNsgOgvKZpxRXu58E/SlQXx10Yi7K0H87hmHbaKYsFH
ClrAZlvMFBns5mP+oN8ONusqz9IA4d8SnIsdN0m7Hc9O2pnl422aVKi3SZGyutWW
pz/hOpMRaSHTmNLuCo5Gzalsig2Hmm1OB8I=
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:18:21 2024 by rpki-client on console-ams.rpki-client.org