Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/326ef0cf-885e-3bfa-8ec6-1b3cde2b6a03.roa
File:                     326ef0cf-885e-3bfa-8ec6-1b3cde2b6a03.roa (raw, json)
Hash identifier:          mWN84XectbaG3P+zKANsP0wB/zWZS1rk7O2Ag3jWng0=
Subject key identifier:   7E:D6:E7:F8:59:F5:CF:82:77:BF:19:53:3E:64:6B:C6:8E:00:72:6F
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F432858450D3EB03E22A2E62D01E8FA00
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/326ef0cf-885e-3bfa-8ec6-1b3cde2b6a03.roa
Signing time:             Thu 29 Feb 2024 11:37:54 +0000
ROA not before:           Thu 29 Feb 2024 11:37:54 +0000
ROA not after:            Wed 29 May 2024 10:37:54 +0000
asID:                     61120
IP address blocks:        2602:fcf6:f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:3e:b0:3e:22:a2:e6:2d:01:e8:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Feb 29 11:37:54 2024 GMT
            Not After : May 29 10:37:54 2024 GMT
        Subject: CN=117128a4-ff29-4bdb-9b00-122a17adf779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fe:1d:f3:a3:8a:16:00:fa:8a:c8:d8:7b:6c:
                    21:61:b4:5e:ce:d5:aa:a4:03:68:98:8a:a0:4b:48:
                    91:45:43:b2:e7:65:c4:41:5c:a4:6f:d6:25:53:e6:
                    3a:94:6b:6a:65:eb:c7:80:0c:3d:7f:43:12:83:aa:
                    12:87:c6:ad:f3:b8:e5:b7:a0:8f:35:6a:d9:df:fb:
                    9d:0e:c2:49:7f:11:8e:f9:99:f5:fc:d1:91:a5:84:
                    3a:ef:4d:ad:53:eb:a9:01:77:16:e0:38:3d:22:b5:
                    a9:2a:9b:fe:9a:72:82:1e:7c:07:05:91:61:50:96:
                    d6:67:5a:c7:eb:f6:05:c2:7f:5f:98:fe:e7:e9:48:
                    a0:09:1e:cb:e0:a2:36:7b:1b:ca:13:1b:f5:43:ba:
                    b0:6f:b3:79:96:09:d0:e9:e6:d4:71:7c:4b:0f:7e:
                    2c:14:e6:b1:a8:3a:a8:03:fb:9d:44:57:3c:7c:28:
                    d8:e8:17:9e:9b:a9:c4:40:c8:ef:ef:ef:55:0c:4f:
                    0a:ad:33:f8:d2:5d:52:8f:ba:6f:c4:04:ff:cd:15:
                    10:5e:79:0a:b2:18:3e:b8:89:73:93:24:69:d1:7b:
                    f1:f9:38:57:07:c6:5b:65:e9:b2:58:e2:db:7e:84:
                    87:ca:21:40:e0:00:ae:04:b0:e2:d5:b9:21:09:4f:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D6:E7:F8:59:F5:CF:82:77:BF:19:53:3E:64:6B:C6:8E:00:72:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/326ef0cf-885e-3bfa-8ec6-1b3cde2b6a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcf6:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:77:77:57:f8:a8:3a:02:1e:32:23:cc:2c:94:c4:f7:c4:51:
         ae:6f:f9:74:d9:18:11:d6:f6:59:a2:b8:4f:95:39:35:5d:19:
         d1:8d:ab:49:13:af:04:99:c8:1b:00:c2:23:73:0b:c2:c7:41:
         39:36:cf:27:f9:92:15:25:64:f9:8f:39:48:ec:16:0e:dc:13:
         09:30:5d:f7:10:7d:12:c9:68:0e:8d:f9:75:1a:9a:40:bb:81:
         33:67:f2:1a:56:ea:27:ac:d0:23:67:d2:55:d4:37:53:2d:b2:
         88:9f:b9:02:00:f4:c1:af:39:95:0a:a4:e9:d0:56:e3:9a:5a:
         d8:9b:04:d6:46:d5:6f:16:5b:8a:c0:44:6e:53:f4:1e:28:af:
         2a:94:3e:d6:07:1d:1b:66:eb:18:0a:49:8d:27:61:d8:fb:4f:
         49:af:5c:6c:95:66:e8:31:51:d7:5b:27:1f:fd:5e:a2:15:7a:
         8d:19:44:90:01:a3:0d:69:cb:a6:51:15:b5:d2:da:82:4b:62:
         0a:9b:ee:80:7f:96:db:ef:92:c0:0a:6a:6c:3c:f2:44:59:73:
         87:2a:5d:50:b4:52:41:7c:4a:4f:a1:af:50:c0:6f:2a:e0:d1:
         c1:85:a2:0c:d8:6c:20:a0:86:83:31:2b:e2:20:50:b1:e9:87:
         df:35:47:e5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUNPrA+IqLmLQHo+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUyZGI3NDMtYjQ0Mi00MDY2LThlMDItMGRjZDQ3NDcx
ZGNlMB4XDTI0MDIyOTExMzc1NFoXDTI0MDUyOTEwMzc1NFowLzEtMCsGA1UEAxMk
MTE3MTI4YTQtZmYyOS00YmRiLTliMDAtMTIyYTE3YWRmNzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f4d86OKFgD6isjYe2whYbReztWqpANomIqg
S0iRRUOy52XEQVykb9YlU+Y6lGtqZevHgAw9f0MSg6oSh8at87jlt6CPNWrZ3/ud
DsJJfxGO+Zn1/NGRpYQ6702tU+upAXcW4Dg9IrWpKpv+mnKCHnwHBZFhUJbWZ1rH
6/YFwn9fmP7n6UigCR7L4KI2exvKExv1Q7qwb7N5lgnQ6ebUcXxLD34sFOaxqDqo
A/udRFc8fCjY6Beem6nEQMjv7+9VDE8KrTP40l1Sj7pvxAT/zRUQXnkKshg+uIlz
kyRp0Xvx+ThXB8ZbZemyWOLbfoSHyiFA4ACuBLDi1bkhCU9e6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH7W5/hZ9c+Cd78ZUz5ka8aOAHJvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NTJk
Yjc0My1iNDQyLTQwNjYtOGUwMi0wZGNkNDc0NzFkY2UvMzI2ZWYwY2YtODg1ZS0z
YmZhLThlYzYtMWIzY2RlMmI2YTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTUyZGI3NDMtYjQ0Mi00MDY2LThl
MDItMGRjZDQ3NDcxZGNlLzU1MmRiNzQzLWI0NDItNDA2Ni04ZTAyLTBkY2Q0NzQ3
MWRjZS5jcmwwHwYDVR0jBBgwFoAU6m0i4+Sxndvay/Dik7AYgek/mbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NTJkYjc0My1iNDQyLTQwNjYtOGUwMi0wZGNk
NDc0NzFkY2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL89gAP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG13d1f4qDoCHjIjzCyUxPfEUa5v+XTZGBHW9lmiuE+VOTVdGdGN
q0kTrwSZyBsAwiNzC8LHQTk2zyf5khUlZPmPOUjsFg7cEwkwXfcQfRLJaA6N+XUa
mkC7gTNn8hpW6ies0CNn0lXUN1MtsoifuQIA9MGvOZUKpOnQVuOaWtibBNZG1W8W
W4rARG5T9B4oryqUPtYHHRtm6xgKSY0nYdj7T0mvXGyVZugxUddbJx/9XqIVeo0Z
RJABow1py6ZRFbXS2oJLYgqb7oB/ltvvksAKamw88kRZc4cqXVC0UkF8Sk+hr1DA
byrg0cGFogzYbCCghoMxK+IgULHph981R+U=
-----END CERTIFICATE-----
Generated at Sun May 19 01:55:08 2024 by rpki-client on console-fra.rpki-client.org