Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa
File:                     57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa (raw, json)
Hash identifier:          sr3bxRydgvQpnuNvXv7QQyiSSxaqRO/EI/HW97VI4ak=
Subject key identifier:   C6:26:87:1A:40:13:61:B2:0D:98:DE:06:2F:7F:A4:4B:0F:44:AC:88
Certificate issuer:       /CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd
Certificate serial:       010D0C9F4328584561284E3525D5C7777443CF30
Authority key identifier: 1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     1030
IP address blocks:        2602:f9d5::/40 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:4e:35:25:d5:c7:77:74:43:cf:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=a299f662-efe5-4a4e-a7a1-7e3a18560b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f0:ea:2f:f7:b6:12:ad:f8:f8:7b:c6:f4:58:
                    81:fe:d3:70:45:04:ad:84:eb:fc:a3:7a:49:47:2b:
                    6b:12:b6:ec:53:00:0b:bc:5c:c2:47:b3:eb:78:74:
                    c8:7f:27:d4:72:7b:ba:66:88:c4:c4:7e:36:65:e1:
                    27:68:ea:34:0b:a7:73:97:7c:6d:b2:9b:fa:aa:66:
                    e4:ad:d1:99:ab:4a:dc:ac:3a:50:fb:73:36:1b:81:
                    8b:d7:83:b3:8f:b9:8b:96:15:47:e3:d9:21:65:c8:
                    07:a7:96:bd:50:78:8f:24:8d:17:23:23:22:2f:d8:
                    b3:44:51:61:03:d8:90:1e:b7:91:f8:59:bd:d0:37:
                    af:31:6d:c0:47:e0:f4:a9:54:b1:c0:d0:5d:ba:6b:
                    2e:96:ce:26:f4:41:e3:e9:68:bf:e1:20:73:c1:3f:
                    b0:ab:b2:a8:11:8c:44:a3:e5:59:d1:23:5a:99:5d:
                    68:d9:fb:3a:18:5f:26:2e:20:04:11:73:a9:00:94:
                    34:39:35:0b:a4:23:fc:e3:9e:d2:cc:f9:bd:ce:84:
                    f6:48:e1:bf:30:ad:22:01:ad:a7:80:81:c5:ad:c4:
                    b5:2f:5b:53:3c:ca:58:cf:df:f7:2b:04:94:34:06:
                    39:c8:38:13:6e:7c:b5:fc:30:06:ee:6e:30:dd:e2:
                    10:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:26:87:1A:40:13:61:B2:0D:98:DE:06:2F:7F:A4:4B:0F:44:AC:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:b8:7e:f5:62:89:40:55:32:6b:51:55:47:2f:31:fb:e2:fb:
         b5:6e:57:36:3a:2b:e1:c2:ae:39:01:f7:8d:d5:bb:58:5f:48:
         a2:76:dc:76:43:4d:7f:1a:71:f8:ec:9d:ea:69:17:39:5e:b5:
         94:c0:a7:75:56:61:d6:69:8e:61:c7:00:27:eb:bb:14:9b:3e:
         13:ac:0a:08:7e:18:b5:e2:0a:ee:8e:66:52:17:7f:44:b7:c1:
         e4:0e:44:87:25:4e:dd:33:af:ec:90:f2:ee:d7:41:a9:5b:6b:
         c2:aa:db:b1:23:e6:fd:0c:02:09:81:94:cd:02:25:8e:c3:ee:
         08:c3:fc:0c:f2:7a:ba:3a:61:48:66:99:31:07:f6:c2:01:f3:
         6e:66:15:88:3e:91:50:7b:94:29:4e:88:5d:0e:10:ef:74:f3:
         98:04:9d:d3:b2:19:d0:63:2b:e4:e6:21:c0:a9:9e:43:05:c1:
         1e:7d:6b:fa:ea:25:53:91:ba:57:40:20:42:d3:7a:95:2d:34:
         e9:70:eb:95:a8:f6:5b:18:84:e0:1b:0c:cc:84:4d:5a:d2:3a:
         1b:d1:e5:34:77:0f:ec:38:19:9b:67:a6:60:4b:a0:a0:f4:66:
         80:d4:b1:01:f9:d7:57:83:bc:8e:f6:6f:dd:7a:70:82:76:e1:
         84:79:6d:97
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVhKE41JdXHd3RDzzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmIyMjNmN2YtZjI4Yi00ZGY0LWI2ZGEtY2FiNDg1NThj
MmNkMB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk
YTI5OWY2NjItZWZlNS00YTRlLWE3YTEtN2UzYTE4NTYwYjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/DqL/e2Eq34+HvG9FiB/tNwRQSthOv8o3pJ
RytrErbsUwALvFzCR7PreHTIfyfUcnu6ZojExH42ZeEnaOo0C6dzl3xtspv6qmbk
rdGZq0rcrDpQ+3M2G4GL14Ozj7mLlhVH49khZcgHp5a9UHiPJI0XIyMiL9izRFFh
A9iQHreR+Fm90DevMW3AR+D0qVSxwNBdumsuls4m9EHj6Wi/4SBzwT+wq7KoEYxE
o+VZ0SNamV1o2fs6GF8mLiAEEXOpAJQ0OTULpCP8457SzPm9zoT2SOG/MK0iAa2n
gIHFrcS1L1tTPMpYz9/3KwSUNAY5yDgTbny1/DAG7m4w3eIQRwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMYmhxpAE2GyDZjeBi9/pEsPRKyIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjIy
M2Y3Zi1mMjhiLTRkZjQtYjZkYS1jYWI0ODU1OGMyY2QvNTdjNWY0ZjUtYzcyOC0z
YTNlLWFkMzYtYjc3Yjg4YWIzNGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmIyMjNmN2YtZjI4Yi00ZGY0LWI2
ZGEtY2FiNDg1NThjMmNkL2JiMjIzZjdmLWYyOGItNGRmNC1iNmRhLWNhYjQ4NTU4
YzJjZC5jcmwwHwYDVR0jBBgwFoAUHLQAnkcraCaH/sJecmJGH10i5HQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjIyM2Y3Zi1mMjhiLTRkZjQtYjZkYS1jYWI0
ODU1OGMyY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL51QAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAq7h+9WKJQFUya1FVRy8x++L7tW5XNjor4cKuOQH3jdW7WF9Ionbc
dkNNfxpx+Oyd6mkXOV61lMCndVZh1mmOYccAJ+u7FJs+E6wKCH4YteIK7o5mUhd/
RLfB5A5EhyVO3TOv7JDy7tdBqVtrwqrbsSPm/QwCCYGUzQIljsPuCMP8DPJ6ujph
SGaZMQf2wgHzbmYViD6RUHuUKU6IXQ4Q73TzmASd07IZ0GMr5OYhwKmeQwXBHn1r
+uolU5G6V0AgQtN6lS006XDrlaj2WxiE4BsMzIRNWtI6G9HlNHcP7DgZm2emYEug
oPRmgNSxAfnXV4O8jvZv3XpwgnbhhHltlw==
-----END CERTIFICATE-----
Generated at Sun Jun 2 19:33:00 2024 by rpki-client on console-ams.rpki-client.org