Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ffeb5454-02cb-3551-abd4-1b04063919ea.roa
File:                     ffeb5454-02cb-3551-abd4-1b04063919ea.roa (raw, json)
Hash identifier:          IGoB5zeQWvj8IGPb04oKGzbOk+JUqJQctv3s9hx3smE=
Subject key identifier:   ED:EE:1E:18:61:5B:ED:AE:43:DA:59:C4:4A:0E:92:32:6A:1E:29:8C
Certificate issuer:       /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
Certificate serial:       010D0C9F43285845E193D1BDCA96414659E32640
Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ffeb5454-02cb-3551-abd4-1b04063919ea.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     199632
IP address blocks:        2602:fab0:40::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:d1:bd:ca:96:41:46:59:e3:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=50f5a3cc-1f3e-4268-a6d6-639af6f8fadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:e4:4c:84:ea:f9:83:5f:1b:69:06:15:58:
                    ac:15:82:7d:ae:43:bf:88:07:78:68:c1:8c:7b:98:
                    db:9a:98:aa:48:6b:a7:1e:76:36:86:e7:48:6e:07:
                    4c:04:75:ea:8c:6c:be:7e:2d:a2:af:78:49:e1:a8:
                    32:b6:89:74:c2:a1:72:48:9b:e9:fa:0b:8c:dc:02:
                    14:31:1d:ea:a4:85:5d:f7:93:de:5a:93:1a:66:74:
                    5b:0e:18:f1:e2:f9:31:80:b9:c8:28:1e:fb:0e:01:
                    b4:ca:64:bc:7b:25:c0:5c:72:7a:8d:4d:58:58:ab:
                    11:19:b9:44:a6:0e:92:24:97:cd:a8:b1:70:10:5e:
                    1e:93:c7:31:a6:9e:5d:98:76:13:13:28:85:76:08:
                    c7:50:0f:88:19:8d:54:eb:98:f7:ee:68:f1:b8:7a:
                    13:62:c1:32:f3:c1:a2:a9:1e:c1:b0:f0:52:cf:e0:
                    4d:c1:8d:64:da:08:bb:5c:57:87:2e:8e:88:14:65:
                    5a:f6:be:d0:24:db:d9:ce:07:2a:7b:68:80:28:a5:
                    60:32:7d:84:27:7e:71:39:2a:a0:aa:cf:94:70:a3:
                    68:43:38:05:3e:c0:e3:06:6b:f4:83:e4:97:f1:80:
                    7a:53:b7:05:92:f7:d2:3e:c4:44:16:00:af:33:96:
                    60:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EE:1E:18:61:5B:ED:AE:43:DA:59:C4:4A:0E:92:32:6A:1E:29:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ffeb5454-02cb-3551-abd4-1b04063919ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fab0:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:4d:d5:fe:c5:3f:1e:bd:97:95:3e:0d:67:e8:01:51:af:83:
         3d:31:19:f5:b3:b0:07:5a:33:f2:82:13:6a:cf:02:c6:a0:dd:
         a3:94:41:5c:1a:38:6e:f2:01:f7:ae:d6:48:10:9f:83:de:3d:
         33:dd:cc:99:33:29:5d:9b:db:f9:3d:a0:15:61:c5:aa:ea:73:
         70:4a:ca:63:84:89:8f:b5:aa:3f:2b:d6:6a:15:41:4c:5c:39:
         3d:eb:51:59:a4:66:33:5c:66:8a:37:15:cf:30:d9:7b:a7:79:
         8e:08:0c:29:d3:2c:0a:e0:7b:1c:34:fe:ca:ae:41:99:a4:74:
         df:ce:59:88:34:d4:32:ae:9d:aa:0d:4f:73:34:c9:bc:5e:75:
         4b:a3:fc:96:a1:b9:35:4d:6a:0d:70:d3:38:35:58:b3:b2:f5:
         ad:eb:1e:31:5a:47:c7:5a:2d:af:a5:23:06:6d:a3:dd:ec:b1:
         76:d4:1f:dc:10:66:c9:1b:b0:78:a1:3a:c5:d9:0d:d3:9f:8d:
         04:8c:db:f5:16:5c:58:99:78:60:70:94:bb:98:93:88:f0:3f:
         90:b9:1f:a3:54:df:07:08:48:f0:80:2b:96:60:c0:e9:e0:35:
         ba:3e:96:e0:35:c0:18:96:48:ca:02:33:8a:a2:fd:60:91:f0:
         b7:2b:70:0e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXhk9G9ypZBRlnjJkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc0YmIyZjEtNTk2Ni00YzRhLWE1ZTQtYWNlNTllMWZh
MjdlMB4XDTI0MDUxNTEzMDAzNFoXDTI0MDgxMzEzMDAzNFowLzEtMCsGA1UEAxMk
NTBmNWEzY2MtMWYzZS00MjY4LWE2ZDYtNjM5YWY2ZjhmYWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq93kTITq+YNfG2kGFVisFYJ9rkO/iAd4aMGM
e5jbmpiqSGunHnY2hudIbgdMBHXqjGy+fi2ir3hJ4agytol0wqFySJvp+guM3AIU
MR3qpIVd95PeWpMaZnRbDhjx4vkxgLnIKB77DgG0ymS8eyXAXHJ6jU1YWKsRGblE
pg6SJJfNqLFwEF4ek8cxpp5dmHYTEyiFdgjHUA+IGY1U65j37mjxuHoTYsEy88Gi
qR7BsPBSz+BNwY1k2gi7XFeHLo6IFGVa9r7QJNvZzgcqe2iAKKVgMn2EJ35xOSqg
qs+UcKNoQzgFPsDjBmv0g+SX8YB6U7cFkvfSPsREFgCvM5Zg6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO3uHhhhW+2uQ9pZxEoOkjJqHimMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzRi
YjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1OWUxZmEyN2UvZmZlYjU0NTQtMDJjYi0z
NTUxLWFiZDQtMWIwNDA2MzkxOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTc0YmIyZjEtNTk2Ni00YzRhLWE1
ZTQtYWNlNTllMWZhMjdlL2E3NGJiMmYxLTU5NjYtNGM0YS1hNWU0LWFjZTU5ZTFm
YTI3ZS5jcmwwHwYDVR0jBBgwFoAUjywaXYc3fEchHhd6esViwQde3lgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hNzRiYjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1
OWUxZmEyN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6sABA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADNN1f7FPx69l5U+DWfoAVGvgz0xGfWzsAdaM/KCE2rPAsag3aOU
QVwaOG7yAfeu1kgQn4PePTPdzJkzKV2b2/k9oBVhxarqc3BKymOEiY+1qj8r1moV
QUxcOT3rUVmkZjNcZoo3Fc8w2XuneY4IDCnTLArgexw0/squQZmkdN/OWYg01DKu
naoNT3M0ybxedUuj/JahuTVNag1w0zg1WLOy9a3rHjFaR8daLa+lIwZto93ssXbU
H9wQZskbsHihOsXZDdOfjQSM2/UWXFiZeGBwlLuYk4jwP5C5H6NU3wcISPCAK5Zg
wOngNbo+luA1wBiWSMoCM4qi/WCR8LcrcA4=
-----END CERTIFICATE-----
Generated at Wed May 15 17:50:34 2024 by rpki-client on console-fra.rpki-client.org