Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/74570eb9-624e-32c9-8053-b956305443bb.roa
File:                     74570eb9-624e-32c9-8053-b956305443bb.roa (raw, json)
Hash identifier:          XTsjIeVXThu1BH6wLjRXQPDFMf25+IxVp08LHG5BdkQ=
Subject key identifier:   E7:AF:31:24:29:B8:51:B7:F3:AF:5A:A7:40:17:1C:C1:04:FF:DD:46
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F43285845ADEE11B19A913C5301ECD200
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/74570eb9-624e-32c9-8053-b956305443bb.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     39618
IP address blocks:        2602:fd92:e00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:11:b1:9a:91:3c:53:01:ec:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=78ef7ec4-b4cd-4e04-b43b-3ac9b3150cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:87:2f:aa:43:9b:e8:f8:7c:cb:70:d4:89:cd:
                    2c:5c:20:6c:39:3f:4e:12:95:b9:cd:57:f0:a0:b8:
                    cb:76:fc:24:92:8c:68:b9:6c:d5:3c:24:76:34:76:
                    a9:7e:4f:e1:2e:39:eb:10:d2:8c:8b:ef:fc:57:70:
                    81:f1:e9:62:7e:92:a2:4f:70:02:10:b4:63:fd:7d:
                    8c:80:ce:f3:6e:ce:ef:db:3d:15:da:ec:28:1c:50:
                    b7:c1:83:78:35:9f:a7:64:0f:d5:0c:7f:22:21:ce:
                    13:29:76:74:d3:b2:4d:5f:1e:c2:67:fc:dd:d0:16:
                    0a:d4:b4:eb:83:4c:9e:1f:d6:31:03:8a:44:3f:b1:
                    bc:6e:c9:cc:57:bd:68:24:7f:02:0e:64:86:b2:18:
                    87:2a:31:53:ca:1a:7a:a2:13:55:fb:69:03:42:1b:
                    5d:7b:38:e4:c4:92:96:7b:85:cb:53:3a:05:c6:bb:
                    76:6f:92:75:b4:23:e6:71:47:87:26:3b:17:06:ea:
                    69:d8:e6:c5:6d:88:4c:c5:89:63:a0:71:bd:a9:0f:
                    99:71:3a:8a:50:d3:f5:1a:b3:0a:eb:36:06:e0:d8:
                    a8:ae:a7:29:e1:18:f7:a3:df:20:a4:23:7b:0a:09:
                    bb:72:71:16:67:05:f0:60:e7:9a:41:a9:9d:d0:a3:
                    f1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AF:31:24:29:B8:51:B7:F3:AF:5A:A7:40:17:1C:C1:04:FF:DD:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/74570eb9-624e-32c9-8053-b956305443bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5f:40:92:cd:2c:a1:35:db:59:c0:5b:e3:d7:54:01:90:68:
         9a:1f:c2:01:43:95:88:03:ea:91:5c:38:45:40:48:8d:c0:43:
         d6:67:a3:67:f1:a9:ca:4d:f0:bd:2b:73:3a:e7:e3:f1:a3:87:
         0f:b5:bd:f3:51:4b:db:1a:60:6c:5f:01:52:44:a3:4d:81:17:
         77:b2:1d:d4:0c:9f:c1:16:e8:c4:73:5c:cc:b1:79:9c:3d:da:
         ad:34:02:70:42:3f:3f:91:59:89:9d:ba:a9:4e:a4:a6:fb:01:
         8a:7a:b7:0e:9a:f8:4a:dc:50:cb:a2:ca:11:45:81:a7:f7:f2:
         61:19:56:b4:78:d5:f5:d5:23:d8:5d:30:7b:86:e7:dd:b1:ad:
         20:fe:ca:09:8b:32:f4:0a:7a:ef:1d:26:0d:de:07:47:3a:7d:
         43:c4:b7:bc:85:fb:53:1e:c1:1e:41:21:4c:f4:64:bc:b5:99:
         29:53:92:fd:47:6d:af:43:c6:62:5e:9a:3f:66:cf:17:1f:d0:
         47:ea:bc:24:04:76:5e:97:ac:3d:e0:47:d9:84:3c:e2:5e:45:
         d3:e0:bf:44:9a:76:69:42:68:ec:d9:f8:c2:d5:4e:06:b8:07:
         9c:85:5a:a6:20:b5:d2:ac:24:46:b5:8d:08:7f:78:a7:7a:48:
         64:db:4e:63
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEWt7hGxmpE8UwHs0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MmE3MzMtMGUxMy00MDEyLTgyOTQtZmNlNjU1ZTRh
NDFhMB4XDTI0MDQyNzAxMDAyNloXDTI0MDcyNjAxMDAyNlowLzEtMCsGA1UEAxMk
NzhlZjdlYzQtYjRjZC00ZTA0LWI0M2ItM2FjOWIzMTUwY2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIcvqkOb6Ph8y3DUic0sXCBsOT9OEpW5zVfw
oLjLdvwkkoxouWzVPCR2NHapfk/hLjnrENKMi+/8V3CB8elifpKiT3ACELRj/X2M
gM7zbs7v2z0V2uwoHFC3wYN4NZ+nZA/VDH8iIc4TKXZ007JNXx7CZ/zd0BYK1LTr
g0yeH9YxA4pEP7G8bsnMV71oJH8CDmSGshiHKjFTyhp6ohNV+2kDQhtdezjkxJKW
e4XLUzoFxrt2b5J1tCPmcUeHJjsXBupp2ObFbYhMxYljoHG9qQ+ZcTqKUNP1GrMK
6zYG4Niorqcp4Rj3o98gpCN7Cgm7cnEWZwXwYOeaQamd0KPxQwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOevMSQpuFG3869ap0AXHMEE/91GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYy
YTczMy0wZTEzLTQwMTItODI5NC1mY2U2NTVlNGE0MWEvNzQ1NzBlYjktNjI0ZS0z
MmM5LTgwNTMtYjk1NjMwNTQ0M2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2MmE3MzMtMGUxMy00MDEyLTgy
OTQtZmNlNjU1ZTRhNDFhL2RkNjJhNzMzLTBlMTMtNDAxMi04Mjk0LWZjZTY1NWU0
YTQxYS5jcmwwHwYDVR0jBBgwFoAUkRNYtHaun6GwfpONvDcsq5c9dt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYyYTczMy0wZTEzLTQwMTItODI5NC1mY2U2
NTVlNGE0MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9kg4w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAjF9Aks0soTXbWcBb49dUAZBomh/CAUOViAPqkVw4RUBIjcBD1mej
Z/Gpyk3wvStzOufj8aOHD7W981FL2xpgbF8BUkSjTYEXd7Id1AyfwRboxHNczLF5
nD3arTQCcEI/P5FZiZ26qU6kpvsBinq3Dpr4StxQy6LKEUWBp/fyYRlWtHjV9dUj
2F0we4bn3bGtIP7KCYsy9Ap67x0mDd4HRzp9Q8S3vIX7Ux7BHkEhTPRkvLWZKVOS
/Udtr0PGYl6aP2bPFx/QR+q8JAR2XpesPeBH2YQ84l5F0+C/RJp2aUJo7Nn4wtVO
BrgHnIVapiC10qwkRrWNCH94p3pIZNtOYw==
-----END CERTIFICATE-----
Generated at Sat May 18 01:57:36 2024 by rpki-client on console-ams.rpki-client.org