Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/edd15e8b-810b-340a-88e6-4a9e429c96b4.roa
File:                     edd15e8b-810b-340a-88e6-4a9e429c96b4.roa (raw, json)
Hash identifier:          y3uw8PMKXZyoXAHHtGK5QP4oU5MA6GMa8llUzf+UGAc=
Subject key identifier:   74:E5:9A:55:2A:D4:E1:02:3E:75:D8:5D:4F:39:30:7E:3F:CF:B1:1A
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584718DAF7202FA0B30C5A105B80
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/edd15e8b-810b-340a-88e6-4a9e429c96b4.roa
Signing time:             Wed 04 Sep 2024 01:00:32 +0000
ROA not before:           Wed 04 Sep 2024 01:00:32 +0000
ROA not after:            Tue 03 Dec 2024 02:00:32 +0000
asID:                     401009
IP address blocks:        2602:f919:900::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:18:da:f7:20:2f:a0:b3:0c:5a:10:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Sep  4 01:00:32 2024 GMT
            Not After : Dec  3 02:00:32 2024 GMT
        Subject: CN=88dff070-55db-4a52-af2c-0b28a5f7d279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:af:77:62:a0:32:ed:ad:a1:5c:ed:a1:83:
                    dc:fd:aa:a1:0f:3f:42:b2:7b:d1:cb:81:dc:bf:7a:
                    0b:05:78:f5:80:81:28:a8:b8:d1:1a:04:13:50:ac:
                    69:38:b2:2c:31:5b:8a:d4:f3:f4:f3:3e:21:a0:36:
                    26:86:b9:01:26:01:09:60:32:2b:2a:e0:32:30:5a:
                    f8:71:03:94:34:3b:aa:46:7c:24:ae:69:dd:8d:d7:
                    a8:3b:86:55:8c:f8:aa:ea:37:98:6c:51:ce:ea:a2:
                    88:52:8e:aa:6f:f7:61:e3:81:0d:49:f9:8d:b7:4f:
                    65:bf:3e:07:bb:6e:58:ec:e6:ed:cb:10:5a:66:b8:
                    46:f6:20:13:1b:c5:d0:e7:c5:20:fe:c3:8d:9a:cc:
                    c3:d5:76:d2:22:c8:e9:e0:66:7a:ef:ee:15:9a:dc:
                    ff:70:11:15:ab:09:b3:19:26:78:a9:fd:e9:f4:0e:
                    b3:43:99:dd:6a:a7:b8:89:04:ea:49:8f:21:5f:ad:
                    18:47:71:5f:9d:85:29:9f:40:83:df:41:78:c4:1d:
                    e9:87:ad:54:6c:66:4b:0a:8d:65:2e:82:4c:0b:6b:
                    31:17:a4:03:b0:68:70:6d:df:f6:a1:00:75:5c:f5:
                    2d:a8:e3:3c:54:c3:b5:d8:dd:08:95:0a:28:9a:dc:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E5:9A:55:2A:D4:E1:02:3E:75:D8:5D:4F:39:30:7E:3F:CF:B1:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/edd15e8b-810b-340a-88e6-4a9e429c96b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:4c:47:37:ae:e9:09:bb:c6:75:e3:8d:12:cd:38:06:c3:c6:
         1e:56:79:68:0b:28:1a:c6:43:27:03:e2:86:e1:48:8e:39:27:
         41:71:28:40:ac:c1:62:29:4d:21:20:ed:bf:13:1e:1f:09:90:
         5a:9b:dd:3b:83:b4:06:fa:8e:ad:a9:7a:80:63:b9:de:4e:6d:
         05:03:aa:b6:a6:6d:37:da:21:1b:b6:46:5e:01:5d:e9:da:f7:
         17:a0:8f:97:36:41:d3:bf:13:43:ae:4b:21:0b:31:a4:49:e0:
         b0:1e:86:1e:fc:05:93:62:0b:1b:c2:be:18:c7:17:d4:bf:4a:
         0b:d6:ae:b8:ba:57:0a:66:8e:ed:dc:78:a6:9e:2b:75:ca:2e:
         22:97:b9:fe:c4:54:49:01:fa:0c:86:86:9a:95:d1:ab:49:15:
         bb:1c:5b:23:80:e6:ee:9b:2b:a2:fa:7e:18:9c:64:44:59:c2:
         0b:c3:1c:7a:cf:01:c6:46:7d:b9:3d:65:a8:00:f1:21:01:8b:
         15:60:6e:d5:ee:d0:8c:9f:f3:13:01:f5:38:e4:38:c5:16:2e:
         50:c3:54:6e:99:bb:7d:c5:5e:1f:86:d0:d9:e2:e9:b3:3f:5c:
         78:ea:82:f0:61:b5:25:96:a7:ce:20:6d:fe:82:65:45:19:4f:
         29:33:23:c8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEcY2vcgL6CzDFoQW4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDg0OGNjOWItZTQ2Zi00ODVlLWIzZjItNGYzOTNiNWQ5
MmQ2MB4XDTI0MDkwNDAxMDAzMloXDTI0MTIwMzAyMDAzMlowLzEtMCsGA1UEAxMk
ODhkZmYwNzAtNTVkYi00YTUyLWFmMmMtMGIyOGE1ZjdkMjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRuvd2KgMu2toVztoYPc/aqhDz9CsnvRy4Hc
v3oLBXj1gIEoqLjRGgQTUKxpOLIsMVuK1PP08z4hoDYmhrkBJgEJYDIrKuAyMFr4
cQOUNDuqRnwkrmndjdeoO4ZVjPiq6jeYbFHO6qKIUo6qb/dh44ENSfmNt09lvz4H
u25Y7ObtyxBaZrhG9iATG8XQ58Ug/sONmszD1XbSIsjp4GZ67+4Vmtz/cBEVqwmz
GSZ4qf3p9A6zQ5ndaqe4iQTqSY8hX60YR3FfnYUpn0CD30F4xB3ph61UbGZLCo1l
LoJMC2sxF6QDsGhwbd/2oQB1XPUtqOM8VMO12N0IlQoomtwZDwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHTlmlUq1OECPnXYXU85MH4/z7EaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ODQ4
Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5M2I1ZDkyZDYvZWRkMTVlOGItODEwYi0z
NDBhLTg4ZTYtNGE5ZTQyOWM5NmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDg0OGNjOWItZTQ2Zi00ODVlLWIz
ZjItNGYzOTNiNWQ5MmQ2LzQ4NDhjYzliLWU0NmYtNDg1ZS1iM2YyLTRmMzkzYjVk
OTJkNi5jcmwwHwYDVR0jBBgwFoAUtipAlYdVr48BpEATPSLyFSu2jeswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80ODQ4Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5
M2I1ZDkyZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5GQkw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbkxHN67pCbvGdeONEs04BsPGHlZ5aAsoGsZDJwPihuFIjjknQXEo
QKzBYilNISDtvxMeHwmQWpvdO4O0BvqOral6gGO53k5tBQOqtqZtN9ohG7ZGXgFd
6dr3F6CPlzZB078TQ65LIQsxpEngsB6GHvwFk2ILG8K+GMcX1L9KC9auuLpXCmaO
7dx4pp4rdcouIpe5/sRUSQH6DIaGmpXRq0kVuxxbI4Dm7psrovp+GJxkRFnCC8Mc
es8BxkZ9uT1lqADxIQGLFWBu1e7QjJ/zEwH1OOQ4xRYuUMNUbpm7fcVeH4bQ2eLp
sz9ceOqC8GG1JZanziBt/oJlRRlPKTMjyA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:31:03 2024 by rpki-client on console-fra.rpki-client.org