Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/36bb3a37-43e7-3dec-9cb4-ed0aaea8cd71.roa
File:                     36bb3a37-43e7-3dec-9cb4-ed0aaea8cd71.roa (raw, json)
Hash identifier:          UFWOTEjYCvNCdheDkNzO4g3Ffu4HDTS8i3vG63kbaiU=
Subject key identifier:   5B:4D:73:EF:6E:AD:DA:BE:62:1F:27:1E:55:5C:B9:6B:CA:08:20:25
Certificate issuer:       /CN=8fe40320-74dc-4444-a6ef-bd88d604a876
Certificate serial:       010D0C9F43285845CF6E3FB7B097EBA70D2DA640
Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/36bb3a37-43e7-3dec-9cb4-ed0aaea8cd71.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     26411
IP address blocks:        2602:2dd::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:3f:b7:b0:97:eb:a7:0d:2d:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=770a7c84-a1fc-4537-aa54-c87e3cad7089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8a:48:14:0d:3f:08:57:55:e6:df:0d:c1:2f:
                    e6:a9:d4:72:79:be:b9:b1:fb:27:95:15:6d:2c:d1:
                    da:da:73:4b:77:34:00:97:9c:8b:7f:f2:d1:8a:48:
                    9c:f6:7c:c0:6e:c8:58:47:52:d8:25:d2:21:0b:f0:
                    6a:65:d3:7f:37:3f:d8:0d:3a:b7:81:17:ac:6f:61:
                    7c:8f:43:e3:e8:76:46:e4:cb:dc:84:86:08:be:28:
                    bd:5e:05:22:c5:d2:6e:9b:09:2b:5e:d9:52:98:45:
                    7e:07:09:c8:57:e4:8e:0e:92:41:c7:cf:33:10:96:
                    36:05:31:ae:77:17:fd:5c:ef:e7:90:84:20:61:04:
                    e2:3d:d0:cc:f2:f2:4f:2f:81:f5:e9:df:92:e7:61:
                    bc:fc:a7:53:71:8a:e7:6a:44:73:a8:b3:55:e0:a3:
                    f9:98:83:24:f1:75:ca:7c:5c:79:53:50:53:99:ed:
                    15:0c:15:21:a3:e8:e5:6b:49:21:03:e1:b4:60:f8:
                    6b:91:59:98:71:6e:ca:f2:da:24:3f:e7:eb:df:60:
                    6a:f0:68:45:b1:c8:16:fc:6e:b1:f2:55:a4:98:87:
                    52:8d:ba:16:cf:e4:c0:62:56:3d:58:7f:7a:08:48:
                    20:ea:7b:28:ac:e1:bf:92:b1:78:69:1d:3c:9b:ce:
                    03:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4D:73:EF:6E:AD:DA:BE:62:1F:27:1E:55:5C:B9:6B:CA:08:20:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/36bb3a37-43e7-3dec-9cb4-ed0aaea8cd71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl

            X509v3 Authority Key Identifier:
                keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2dd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:de:17:96:19:8e:29:8c:1b:cf:65:3b:bc:9c:05:e0:92:c3:
         27:bc:43:8c:38:81:ae:e5:32:93:71:e2:ab:b3:58:15:e8:e8:
         6d:7a:ea:18:c1:35:3f:e6:f1:54:93:ee:d2:98:39:dc:94:cf:
         f9:3f:ed:24:e0:38:f6:95:10:f6:47:b8:c5:69:76:18:7b:ea:
         84:93:18:e7:c5:e8:e4:a7:3d:71:e2:fc:f6:90:8b:44:49:eb:
         6e:7a:01:c8:20:17:17:53:1b:9a:75:09:d7:fd:45:3a:7b:fd:
         27:b1:52:60:74:cb:fb:6d:4a:76:b2:4e:e0:3a:5b:b6:5d:f0:
         ed:ae:31:7c:e0:c0:ac:ed:6e:9c:c2:94:1c:da:9e:2a:52:a4:
         96:bc:a7:9c:88:c1:e9:92:9a:3e:96:6c:50:24:a3:60:ab:4e:
         79:6a:c5:eb:fb:3e:3d:0e:59:7a:92:ea:e2:d7:e5:6f:46:cf:
         01:12:30:25:bb:fc:c5:cf:b5:4e:3f:88:f5:df:04:2d:e3:c0:
         df:92:e3:60:df:47:d4:02:03:8e:0c:11:1e:96:f1:cb:c4:a3:
         21:5f:0a:e1:cb:d1:96:6a:01:7b:86:2e:ca:c9:11:47:aa:9f:
         5e:c3:b4:49:fb:f2:ca:c3:cf:7f:94:88:2b:49:6d:a4:21:40:
         67:2f:73:aa
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEXPbj+3sJfrpw0tpkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGZlNDAzMjAtNzRkYy00NDQ0LWE2ZWYtYmQ4OGQ2MDRh
ODc2MB4XDTI0MDUwOTAxMDAyNloXDTI0MDgwNzAxMDAyNlowLzEtMCsGA1UEAxMk
NzcwYTdjODQtYTFmYy00NTM3LWFhNTQtYzg3ZTNjYWQ3MDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIpIFA0/CFdV5t8NwS/mqdRyeb65sfsnlRVt
LNHa2nNLdzQAl5yLf/LRikic9nzAbshYR1LYJdIhC/BqZdN/Nz/YDTq3gResb2F8
j0Pj6HZG5MvchIYIvii9XgUixdJumwkrXtlSmEV+BwnIV+SODpJBx88zEJY2BTGu
dxf9XO/nkIQgYQTiPdDM8vJPL4H16d+S52G8/KdTcYrnakRzqLNV4KP5mIMk8XXK
fFx5U1BTme0VDBUho+jla0khA+G0YPhrkVmYcW7K8tokP+fr32Bq8GhFscgW/G6x
8lWkmIdSjboWz+TAYlY9WH96CEgg6nsorOG/krF4aR08m84DnwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFtNc+9urdq+Yh8nHlVcuWvKCCAlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZmU0
MDMyMC03NGRjLTQ0NDQtYTZlZi1iZDg4ZDYwNGE4NzYvMzZiYjNhMzctNDNlNy0z
ZGVjLTljYjQtZWQwYWFlYThjZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGZlNDAzMjAtNzRkYy00NDQ0LWE2
ZWYtYmQ4OGQ2MDRhODc2LzhmZTQwMzIwLTc0ZGMtNDQ0NC1hNmVmLWJkODhkNjA0
YTg3Ni5jcmwwHwYDVR0jBBgwFoAUBpspmYh8dDlJyy1jHEtRwUvXMnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZmU0MDMyMC03NGRjLTQ0NDQtYTZlZi1iZDg4
ZDYwNGE4NzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIC3QAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALN4XlhmOKYwbz2U7vJwF4JLDJ7xDjDiBruUyk3Hiq7NYFejobXrq
GME1P+bxVJPu0pg53JTP+T/tJOA49pUQ9ke4xWl2GHvqhJMY58Xo5Kc9ceL89pCL
REnrbnoByCAXF1MbmnUJ1/1FOnv9J7FSYHTL+21KdrJO4Dpbtl3w7a4xfODArO1u
nMKUHNqeKlKklrynnIjB6ZKaPpZsUCSjYKtOeWrF6/s+PQ5ZepLq4tflb0bPARIw
Jbv8xc+1Tj+I9d8ELePA35LjYN9H1AIDjgwRHpbxy8SjIV8K4cvRlmoBe4YuyskR
R6qfXsO0SfvyysPPf5SIK0ltpCFAZy9zqg==
-----END CERTIFICATE-----
Generated at Sun May 19 15:56:28 2024 by rpki-client on console-fra.rpki-client.org