Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a872dc60-b0fd-32cc-a999-53e91767b69c.roa
File:                     a872dc60-b0fd-32cc-a999-53e91767b69c.roa (raw, json)
Hash identifier:          pWa5Diolcte1zKvvINh8vG2barn1vMbhr/i8RuInu0E=
Subject key identifier:   9F:75:74:C9:C8:BA:9B:EB:0D:4D:A3:22:1A:A9:C6:6C:C1:0F:66:56
Certificate issuer:       /CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d
Certificate serial:       010D0C9F432858460F3F0CF7F89A21FD94D348C0
Authority key identifier: 6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a872dc60-b0fd-32cc-a999-53e91767b69c.roa
Signing time:             Fri 31 May 2024 21:37:11 +0000
ROA not before:           Fri 31 May 2024 21:37:11 +0000
ROA not after:            Thu 29 Aug 2024 21:37:11 +0000
asID:                     16509
IP address blocks:        2602:f8d4::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0f:3f:0c:f7:f8:9a:21:fd:94:d3:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d
        Validity
            Not Before: May 31 21:37:11 2024 GMT
            Not After : Aug 29 21:37:11 2024 GMT
        Subject: CN=1f9366d0-cf08-42eb-b4ff-d296dc893ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:37:df:a9:80:6b:b0:f9:93:82:f2:0b:7d:a6:
                    2b:78:00:76:4a:90:c8:18:39:38:7a:7c:aa:82:71:
                    6a:05:dc:94:8a:7b:2b:aa:e1:19:ff:0a:1f:18:c2:
                    19:f4:0c:f3:84:69:11:2c:80:0b:1a:b2:6a:53:9d:
                    a1:06:a4:2b:b8:59:20:84:8a:cb:2a:6c:bf:a4:9a:
                    5c:2b:6f:8a:56:51:07:2d:93:f5:4d:c6:92:27:e6:
                    f5:54:25:28:6f:0a:07:94:43:b0:e8:69:31:0d:b0:
                    a0:02:42:56:77:bb:1f:0e:69:43:55:42:a5:76:2b:
                    1e:88:04:a2:23:1f:b0:18:d5:45:45:4e:19:87:00:
                    f8:73:37:b5:20:00:96:6d:e6:40:40:ba:a1:31:53:
                    56:7a:74:c9:84:b4:1d:bd:cb:3a:51:d4:ad:7d:a6:
                    64:ff:15:ee:37:b2:82:d2:73:4c:9e:4e:75:89:ae:
                    68:64:ca:1e:2f:f1:32:64:2c:90:51:4a:ee:ac:73:
                    56:2e:27:f1:c2:a4:5d:16:1c:ce:f6:48:20:a4:13:
                    6f:4d:6e:ed:41:e9:ba:5c:83:db:ad:7c:e1:5b:f4:
                    bd:a8:d6:22:b9:31:d7:59:b7:d3:d0:92:4c:05:3c:
                    ed:0a:6e:12:cd:ab:10:36:f5:c1:3e:07:1a:08:a7:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:75:74:C9:C8:BA:9B:EB:0D:4D:A3:22:1A:A9:C6:6C:C1:0F:66:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a872dc60-b0fd-32cc-a999-53e91767b69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8d4::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:97:b1:93:23:4b:60:c2:4e:ca:7a:68:15:8c:19:fd:25:fc:
         f4:d1:8c:fa:50:82:37:f0:2d:32:8f:53:69:6e:d8:d1:3a:57:
         a4:43:17:95:c2:48:90:08:2d:2f:bd:40:c9:a4:8a:38:57:a7:
         e3:c1:cd:b5:ea:ae:4f:76:04:e6:eb:46:bd:ca:1a:75:47:12:
         c2:e4:cf:e4:6f:04:f9:f0:2e:94:bd:12:e0:3a:52:54:7b:a9:
         19:6a:e0:4a:e1:b0:4d:fc:af:40:75:af:00:7e:5c:50:2b:c4:
         c2:fa:1a:7b:e6:3e:5f:87:66:d7:ee:6b:f1:2e:fb:77:d5:6b:
         09:10:23:57:bd:5a:1e:60:59:20:03:ac:a1:4e:8f:c1:79:e7:
         ea:2a:5c:fb:84:06:6b:fd:7e:e5:0d:b2:8a:da:7a:67:e3:57:
         71:37:5b:a5:f9:84:cd:70:4b:85:c3:f6:b4:28:fe:04:eb:de:
         5e:b4:58:70:19:e6:dc:4b:c7:6e:a7:04:db:70:c7:0b:4a:b5:
         4a:28:20:87:b3:16:ce:d8:d7:16:17:0a:f6:1c:cc:dd:e8:59:
         89:43:30:d8:24:c7:bd:37:9f:49:5c:ea:a9:52:32:14:1b:99:
         8c:6f:ff:60:70:b0:31:b1:aa:50:42:96:e8:30:aa:1c:95:2a:
         13:8e:af:46
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYPPwz3+Joh/ZTTSMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTJiMmNjZWYtN2MzMC00YTQwLTkwY2EtY2UxNzAzYTIy
YTFkMB4XDTI0MDUzMTIxMzcxMVoXDTI0MDgyOTIxMzcxMVowLzEtMCsGA1UEAxMk
MWY5MzY2ZDAtY2YwOC00MmViLWI0ZmYtZDI5NmRjODkzZWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDffqYBrsPmTgvILfaYreAB2SpDIGDk4enyq
gnFqBdyUinsrquEZ/wofGMIZ9AzzhGkRLIALGrJqU52hBqQruFkghIrLKmy/pJpc
K2+KVlEHLZP1TcaSJ+b1VCUobwoHlEOw6GkxDbCgAkJWd7sfDmlDVUKldiseiASi
Ix+wGNVFRU4ZhwD4cze1IACWbeZAQLqhMVNWenTJhLQdvcs6UdStfaZk/xXuN7KC
0nNMnk51ia5oZMoeL/EyZCyQUUrurHNWLifxwqRdFhzO9kggpBNvTW7tQem6XIPb
rXzhW/S9qNYiuTHXWbfT0JJMBTztCm4SzasQNvXBPgcaCKcbdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ91dMnIupvrDU2jIhqpxmzBD2ZWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMmIy
Y2NlZi03YzMwLTRhNDAtOTBjYS1jZTE3MDNhMjJhMWQvYTg3MmRjNjAtYjBmZC0z
MmNjLWE5OTktNTNlOTE3NjdiNjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTJiMmNjZWYtN2MzMC00YTQwLTkw
Y2EtY2UxNzAzYTIyYTFkL2EyYjJjY2VmLTdjMzAtNGE0MC05MGNhLWNlMTcwM2Ey
MmExZC5jcmwwHwYDVR0jBBgwFoAUb/OlDaNR+7VH64u4PGhPsFxkHBUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hMmIyY2NlZi03YzMwLTRhNDAtOTBjYS1jZTE3
MDNhMjJhMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL41AAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGSXsZMjS2DCTsp6aBWMGf0l/PTRjPpQgjfwLTKPU2lu2NE6V6RD
F5XCSJAILS+9QMmkijhXp+PBzbXqrk92BObrRr3KGnVHEsLkz+RvBPnwLpS9EuA6
UlR7qRlq4ErhsE38r0B1rwB+XFArxML6GnvmPl+HZtfua/Eu+3fVawkQI1e9Wh5g
WSADrKFOj8F55+oqXPuEBmv9fuUNsoraemfjV3E3W6X5hM1wS4XD9rQo/gTr3l60
WHAZ5txLx26nBNtwxwtKtUooIIezFs7Y1xYXCvYczN3oWYlDMNgkx703n0lc6qlS
MhQbmYxv/2BwsDGxqlBClugwqhyVKhOOr0Y=
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:43 2024 by rpki-client on console-ams.rpki-client.org