Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/510edbfe-a47f-3d4f-8304-c51cb445dfeb.roa
File:                     510edbfe-a47f-3d4f-8304-c51cb445dfeb.roa (raw, json)
Hash identifier:          N4QdB6nwIu/9BzQzGEbeeJZpWliqCMmqVoLa2CyOrlI=
Subject key identifier:   16:A3:23:3E:15:15:70:33:EA:F2:BE:8A:D7:F2:D0:CE:C0:B1:18:E6
Certificate issuer:       /CN=07516521-ca1d-4a06-bb11-289a5545b790
Certificate serial:       010D0C9F43285845254040B42AAF76C4D2847D40
Authority key identifier: 11:D6:05:C3:5D:E0:5F:3A:30:EB:26:2C:A7:6A:62:75:4E:4C:CD:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/510edbfe-a47f-3d4f-8304-c51cb445dfeb.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     64647
IP address blocks:        2602:fabc::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:40:b4:2a:af:76:c4:d2:84:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07516521-ca1d-4a06-bb11-289a5545b790
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=bc3b7896-327e-4693-adc2-f77b69e8135e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d2:49:1b:64:c3:b4:8f:a6:34:fb:fc:ad:b8:
                    4a:fa:24:c3:24:96:37:c3:99:c8:23:d2:81:6b:d6:
                    b4:28:3c:2b:03:94:d9:0b:a9:0e:14:fd:03:00:dd:
                    4a:0b:18:e2:ed:1c:2b:47:59:22:da:2d:af:19:29:
                    d4:3d:20:d6:ee:f4:45:60:ab:40:32:43:d9:c1:54:
                    a1:26:b6:49:79:6a:ab:fb:16:6d:04:31:67:fc:4b:
                    2b:3e:83:41:bb:e0:cc:b5:4d:8f:27:15:3e:b1:9c:
                    a9:5f:f8:15:8c:c0:c0:68:9e:55:4a:74:16:a6:5f:
                    3d:52:f5:81:50:53:ce:22:ad:f7:15:86:a1:5f:0f:
                    aa:ed:ee:02:07:5a:59:92:9a:64:34:04:5d:21:de:
                    1b:0e:e6:c8:30:43:de:a7:57:25:bb:30:76:1a:28:
                    6c:0b:f9:a0:91:39:8c:9b:18:18:bf:19:b8:af:06:
                    af:ea:11:54:24:d7:dc:2f:05:b9:a7:d4:ab:50:fb:
                    d8:7c:eb:25:d8:e1:de:61:cd:59:6f:f1:0b:0c:0d:
                    01:68:69:47:54:e8:14:60:95:68:bb:6d:8d:68:64:
                    7c:1a:d8:cb:0d:c5:d2:b9:35:f4:87:52:a3:f3:a8:
                    9f:01:89:7b:ea:c9:20:fb:6a:a0:3d:b8:e4:f6:95:
                    44:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A3:23:3E:15:15:70:33:EA:F2:BE:8A:D7:F2:D0:CE:C0:B1:18:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/510edbfe-a47f-3d4f-8304-c51cb445dfeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.crl

            X509v3 Authority Key Identifier:
                keyid:11:D6:05:C3:5D:E0:5F:3A:30:EB:26:2C:A7:6A:62:75:4E:4C:CD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fabc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:10:4d:c1:a1:19:a2:61:5a:db:0a:94:7d:d9:7d:1e:53:90:
         a9:ab:db:04:1f:7a:fe:40:3c:04:5c:ad:ef:2b:e7:96:04:f8:
         0b:86:b5:9b:88:28:98:59:e1:15:9f:37:5c:40:76:5a:05:4d:
         81:cf:e7:95:d8:80:06:a4:ba:5b:93:fa:b4:d6:de:9e:df:e2:
         0c:9e:a5:c0:a6:1b:39:cd:81:5c:8a:8f:28:af:8b:1e:dc:b9:
         b4:a4:18:fe:fb:a6:ef:1c:26:2f:9a:12:08:64:69:31:b3:0d:
         13:5c:46:d6:60:6a:34:01:1a:e0:ea:15:d6:b9:3a:c7:06:14:
         06:e8:1f:71:5b:38:df:3a:b1:08:5e:ff:45:0a:38:a3:85:f6:
         cf:48:2a:ce:76:54:8d:2b:cf:b0:30:92:5b:8b:de:3f:a2:3d:
         26:8c:32:f9:5a:67:2e:ba:ff:47:9f:ee:3a:23:8f:b4:27:17:
         26:a6:a4:fd:4f:b8:d4:ef:06:54:95:b8:1e:90:c7:68:a9:13:
         47:c9:ac:68:08:ea:cf:93:11:d4:b9:b8:b3:ee:c9:67:82:5b:
         51:47:85:2f:61:19:2e:3b:cf:a7:8c:89:80:1e:e7:52:6a:65:
         3f:49:c7:53:0d:2c:69:0e:15:9c:55:17:78:e2:71:8a:df:62:
         12:97:4e:66
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEUlQEC0Kq92xNKEfUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDc1MTY1MjEtY2ExZC00YTA2LWJiMTEtMjg5YTU1NDVi
NzkwMB4XDTI0MDMwOTAyMDAyNVoXDTI0MDYwNzAxMDAyNVowLzEtMCsGA1UEAxMk
YmMzYjc4OTYtMzI3ZS00NjkzLWFkYzItZjc3YjY5ZTgxMzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9JJG2TDtI+mNPv8rbhK+iTDJJY3w5nII9KB
a9a0KDwrA5TZC6kOFP0DAN1KCxji7RwrR1ki2i2vGSnUPSDW7vRFYKtAMkPZwVSh
JrZJeWqr+xZtBDFn/EsrPoNBu+DMtU2PJxU+sZypX/gVjMDAaJ5VSnQWpl89UvWB
UFPOIq33FYahXw+q7e4CB1pZkppkNARdId4bDubIMEPep1cluzB2GihsC/mgkTmM
mxgYvxm4rwav6hFUJNfcLwW5p9SrUPvYfOsl2OHeYc1Zb/ELDA0BaGlHVOgUYJVo
u22NaGR8GtjLDcXSuTX0h1Kj86ifAYl76skg+2qgPbjk9pVELQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBajIz4VFXAz6vK+itfy0M7AsRjmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNzUx
NjUyMS1jYTFkLTRhMDYtYmIxMS0yODlhNTU0NWI3OTAvNTEwZWRiZmUtYTQ3Zi0z
ZDRmLTgzMDQtYzUxY2I0NDVkZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDc1MTY1MjEtY2ExZC00YTA2LWJi
MTEtMjg5YTU1NDViNzkwLzA3NTE2NTIxLWNhMWQtNGEwNi1iYjExLTI4OWE1NTQ1
Yjc5MC5jcmwwHwYDVR0jBBgwFoAUEdYFw13gXzow6yYsp2pidU5MzTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wNzUxNjUyMS1jYTFkLTRhMDYtYmIxMS0yODlh
NTU0NWI3OTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6vAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAshBNwaEZomFa2wqUfdl9HlOQqavbBB96/kA8BFyt7yvnlgT4C4a1
m4gomFnhFZ83XEB2WgVNgc/nldiABqS6W5P6tNbent/iDJ6lwKYbOc2BXIqPKK+L
Hty5tKQY/vum7xwmL5oSCGRpMbMNE1xG1mBqNAEa4OoV1rk6xwYUBugfcVs43zqx
CF7/RQo4o4X2z0gqznZUjSvPsDCSW4veP6I9Jowy+VpnLrr/R5/uOiOPtCcXJqak
/U+41O8GVJW4HpDHaKkTR8msaAjqz5MR1Lm4s+7JZ4JbUUeFL2EZLjvPp4yJgB7n
UmplP0nHUw0saQ4VnFUXeOJxit9iEpdOZg==
-----END CERTIFICATE-----
Generated at Wed May 15 16:06:05 2024 by rpki-client on console-ams.rpki-client.org