Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/f34d56c8-b61f-3143-a86c-8508af8fc6b1.roa
File:                     f34d56c8-b61f-3143-a86c-8508af8fc6b1.roa (raw, json)
Hash identifier:          FKRuORN17mHvYuI9+TEVreOQa86ROIMIcWvggGw1PlI=
Subject key identifier:   50:F3:98:33:C8:16:D0:E8:22:2E:41:C5:B6:8F:69:F6:EB:EE:91:1A
Certificate issuer:       /CN=4980f97d-060c-4860-8029-ca0d97082203
Certificate serial:       010D0C9F432858455333486181EC21862037E500
Authority key identifier: 1C:00:84:12:A2:2E:8A:18:2A:12:7A:B8:BE:2E:86:BD:2A:EC:BF:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/f34d56c8-b61f-3143-a86c-8508af8fc6b1.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     204844
IP address blocks:        2602:faad::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/4980f97d-060c-4860-8029-ca0d97082203.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/4980f97d-060c-4860-8029-ca0d97082203.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:48:61:81:ec:21:86:20:37:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4980f97d-060c-4860-8029-ca0d97082203
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=4598cb04-53a0-4754-abb6-bae18be6c6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f9:ba:6f:5e:b2:21:a4:64:1b:36:d4:06:d0:
                    19:15:25:23:1c:29:d7:34:44:6e:db:cf:10:7a:6b:
                    bd:bb:db:e8:75:2d:c7:03:29:69:a8:56:d2:d7:7e:
                    7a:f6:14:71:31:b5:2e:0c:63:dd:95:57:70:a5:d2:
                    da:09:d6:23:4e:b2:9f:6a:2d:92:4c:51:66:fe:16:
                    76:a7:9a:60:74:9e:50:90:b6:87:da:54:4f:b8:05:
                    0a:93:ed:f6:10:4c:9d:7c:b1:c1:0b:27:d5:0f:48:
                    6c:f4:28:db:41:9e:a2:31:48:cb:53:b6:25:7a:6b:
                    56:95:4b:66:dd:c3:41:10:55:c9:e6:57:d1:69:42:
                    42:8a:bf:b1:ce:68:cf:52:05:d7:8d:f3:f7:aa:77:
                    33:f8:22:11:c7:70:0a:b8:12:5d:65:a7:60:43:85:
                    2a:2f:59:fa:8f:aa:66:f9:26:ad:81:ac:aa:be:82:
                    74:6b:50:0b:61:61:f6:a1:14:4e:66:f9:7d:c9:ca:
                    66:58:ad:d7:5d:db:b4:0c:11:9b:70:f9:f0:55:fb:
                    e1:92:8e:e8:ae:64:f3:fa:f3:21:14:09:ba:72:ba:
                    62:c8:14:ef:b7:65:8d:49:cd:f2:94:1e:a0:e1:8b:
                    f2:e5:b8:fe:b4:9d:e3:86:53:b0:d9:f5:4e:ff:a0:
                    de:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F3:98:33:C8:16:D0:E8:22:2E:41:C5:B6:8F:69:F6:EB:EE:91:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/f34d56c8-b61f-3143-a86c-8508af8fc6b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/4980f97d-060c-4860-8029-ca0d97082203.crl

            X509v3 Authority Key Identifier:
                keyid:1C:00:84:12:A2:2E:8A:18:2A:12:7A:B8:BE:2E:86:BD:2A:EC:BF:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faad::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9c:7e:4b:c5:a7:65:a4:ac:15:13:25:91:c7:60:d7:33:92:
         de:2b:03:52:3c:80:32:40:f4:38:f6:59:21:5d:bf:37:fc:b6:
         bc:a8:8c:90:70:5b:79:82:c0:2f:65:98:e9:e0:9a:52:06:02:
         6b:00:e4:b7:8d:3e:91:45:e6:36:80:72:8a:38:10:4b:6d:23:
         f5:9a:4a:ac:02:cd:3b:c1:71:fb:22:0b:32:63:fe:ad:64:e9:
         78:11:fa:9f:e4:64:97:46:ba:42:65:1c:24:25:04:59:4c:68:
         f9:1e:05:12:bc:97:ba:df:f1:d8:29:35:39:d6:bb:dc:2e:9e:
         16:6f:27:da:3a:31:50:c3:47:6f:1d:09:c9:be:c2:15:3c:bf:
         69:08:96:35:d1:03:87:89:5f:33:28:bf:07:96:98:ba:e6:14:
         93:97:0b:89:96:34:56:92:06:ff:e3:d4:bc:8f:9a:8b:47:00:
         e4:f7:47:c4:08:06:f0:64:cf:13:4e:04:d0:ff:5f:a6:af:5a:
         95:a3:99:94:85:bb:8e:1f:56:be:d4:e2:5d:d0:1e:9d:3d:0f:
         89:81:b1:d0:57:2f:de:5c:88:7f:c9:1c:74:06:45:2f:e5:89:
         5f:b5:4b:fc:d6:91:b0:2a:8a:62:c6:43:d0:b4:bb:06:c9:4b:
         6c:90:d6:3e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVTM0hhgewhhiA35QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDk4MGY5N2QtMDYwYy00ODYwLTgwMjktY2EwZDk3MDgy
MjAzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk
NDU5OGNiMDQtNTNhMC00NzU0LWFiYjYtYmFlMThiZTZjNmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/m6b16yIaRkGzbUBtAZFSUjHCnXNERu288Q
emu9u9vodS3HAylpqFbS13569hRxMbUuDGPdlVdwpdLaCdYjTrKfai2STFFm/hZ2
p5pgdJ5QkLaH2lRPuAUKk+32EEydfLHBCyfVD0hs9CjbQZ6iMUjLU7YlemtWlUtm
3cNBEFXJ5lfRaUJCir+xzmjPUgXXjfP3qncz+CIRx3AKuBJdZadgQ4UqL1n6j6pm
+SatgayqvoJ0a1ALYWH2oRROZvl9ycpmWK3XXdu0DBGbcPnwVfvhko7ormTz+vMh
FAm6crpiyBTvt2WNSc3ylB6g4Yvy5bj+tJ3jhlOw2fVO/6DeFQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFDzmDPIFtDoIi5BxbaPafbr7pEaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80OTgw
Zjk3ZC0wNjBjLTQ4NjAtODAyOS1jYTBkOTcwODIyMDMvZjM0ZDU2YzgtYjYxZi0z
MTQzLWE4NmMtODUwOGFmOGZjNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDk4MGY5N2QtMDYwYy00ODYwLTgw
MjktY2EwZDk3MDgyMjAzLzQ5ODBmOTdkLTA2MGMtNDg2MC04MDI5LWNhMGQ5NzA4
MjIwMy5jcmwwHwYDVR0jBBgwFoAUHACEEqIuihgqEnq4vi6GvSrsv1swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80OTgwZjk3ZC0wNjBjLTQ4NjAtODAyOS1jYTBk
OTcwODIyMDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6rQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKZx+S8WnZaSsFRMlkcdg1zOS3isDUjyAMkD0OPZZIV2/N/y2vKiM
kHBbeYLAL2WY6eCaUgYCawDkt40+kUXmNoByijgQS20j9ZpKrALNO8Fx+yILMmP+
rWTpeBH6n+Rkl0a6QmUcJCUEWUxo+R4FEryXut/x2Ck1Oda73C6eFm8n2joxUMNH
bx0Jyb7CFTy/aQiWNdEDh4lfMyi/B5aYuuYUk5cLiZY0VpIG/+PUvI+ai0cA5PdH
xAgG8GTPE04E0P9fpq9alaOZlIW7jh9WvtTiXdAenT0PiYGx0Fcv3lyIf8kcdAZF
L+WJX7VL/NaRsCqKYsZD0LS7BslLbJDWPg==
-----END CERTIFICATE-----
Generated at Sat May 18 19:56:37 2024 by rpki-client on console-fra.rpki-client.org