Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa
File:                     3ad9037d-cc4e-3a46-981a-715e438d4f71.roa (raw, json)
Hash identifier:          Fm2liVa0JTs5YJ5e3D6tCKPSc2E2nWagJuy87d3Mqxw=
Subject key identifier:   3C:D2:DD:77:2A:6E:15:A4:05:8B:37:A2:92:7E:4E:22:74:20:A6:58
Certificate issuer:       /CN=cd7304e1-3bc1-43c1-b035-93ee027063db
Certificate serial:       010D0C9F43285845A2C34BD1A976786C5881D100
Authority key identifier: EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     48231
IP address blocks:        2602:fa93::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:4b:d1:a9:76:78:6c:58:81:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7304e1-3bc1-43c1-b035-93ee027063db
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=b4510c5d-c3a0-4ac4-8a39-79181ab78e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ca:6b:c3:00:47:17:28:b6:10:e5:09:da:fc:
                    9a:5a:dd:31:ed:6f:54:1f:a3:02:7d:06:d7:cb:d0:
                    41:16:02:ba:58:6b:57:5f:d8:8a:f4:f0:1e:a6:51:
                    49:46:6e:00:32:eb:ea:65:b9:57:85:7e:41:bd:f2:
                    d7:1b:41:b6:53:8f:72:40:cd:ae:c9:a2:ff:20:b0:
                    b5:f6:7e:fe:7d:c7:30:42:a7:59:ad:af:45:57:19:
                    3f:d4:81:80:98:ec:74:b2:f2:3f:ab:9b:b2:1a:01:
                    79:7b:18:90:0b:45:ab:c4:5b:06:2b:d2:82:29:f6:
                    34:f1:5d:9f:59:14:dd:4b:ed:ba:97:27:0f:5e:10:
                    44:04:00:96:02:35:19:fb:54:f7:92:78:58:39:6e:
                    fe:47:4f:ed:2c:12:ac:6d:8a:d8:64:80:15:81:2e:
                    af:b1:45:3e:34:d2:3f:bf:f3:a5:e2:cf:a7:7d:6e:
                    04:a8:72:c3:a1:ee:0c:86:3b:72:f5:04:b2:ec:57:
                    44:65:47:64:93:38:c9:3f:53:09:20:26:ea:8b:60:
                    86:5c:e1:70:fd:57:e5:13:5d:7a:29:27:05:16:fa:
                    9b:77:c9:a6:85:38:04:6f:a6:e3:7c:9e:6e:c2:b9:
                    b3:a1:52:d7:06:3d:47:93:99:ee:f3:c8:cd:e0:77:
                    25:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D2:DD:77:2A:6E:15:A4:05:8B:37:A2:92:7E:4E:22:74:20:A6:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl

            X509v3 Authority Key Identifier:
                keyid:EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa93::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:0d:8f:24:7c:7a:0c:2b:56:90:16:4b:3e:37:ae:7a:2b:63:
         39:97:55:60:87:67:67:c6:38:9f:e7:67:b7:9b:3e:1d:62:a5:
         59:f2:b0:67:f2:be:c9:f6:90:fb:95:a9:1b:b1:01:fc:a9:fd:
         ef:13:a9:31:22:9f:46:31:3a:e5:75:ce:3f:85:91:85:0e:e3:
         84:52:b5:4a:a5:91:03:97:a4:0e:d9:85:ff:fe:c4:15:22:43:
         92:90:70:44:07:8e:bd:b4:02:10:1a:58:0e:d5:2b:71:da:6c:
         40:47:5b:ab:b2:01:83:30:3e:32:19:e5:06:57:0e:e2:d3:a7:
         6e:b3:64:f5:6b:27:fd:40:a7:fd:38:3e:4c:98:ad:d2:fe:64:
         64:3b:3f:d0:72:53:f7:af:48:d2:84:62:2a:03:72:9f:95:52:
         36:b3:07:62:f7:99:aa:55:6e:dc:91:ce:61:0a:8e:46:fd:35:
         4e:71:47:2e:75:9f:59:30:37:e9:e4:c8:be:d6:b8:8e:26:dd:
         b1:1c:74:39:a2:8d:08:65:55:ee:27:4b:83:f0:97:ff:95:11:
         5c:e9:b8:d9:77:76:4d:7d:92:51:c4:ef:53:10:69:ee:f5:05:
         f3:96:a6:82:a3:04:e7:d1:0b:82:b4:d6:08:c5:05:1f:23:1b:
         95:0b:41:63
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEWiw0vRqXZ4bFiB0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2Q3MzA0ZTEtM2JjMS00M2MxLWIwMzUtOTNlZTAyNzA2
M2RiMB4XDTI0MDQyMzAxMDAyNVoXDTI0MDcyMjAxMDAyNVowLzEtMCsGA1UEAxMk
YjQ1MTBjNWQtYzNhMC00YWM0LThhMzktNzkxODFhYjc4ZTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MprwwBHFyi2EOUJ2vyaWt0x7W9UH6MCfQbX
y9BBFgK6WGtXX9iK9PAeplFJRm4AMuvqZblXhX5BvfLXG0G2U49yQM2uyaL/ILC1
9n7+fccwQqdZra9FVxk/1IGAmOx0svI/q5uyGgF5exiQC0WrxFsGK9KCKfY08V2f
WRTdS+26lycPXhBEBACWAjUZ+1T3knhYOW7+R0/tLBKsbYrYZIAVgS6vsUU+NNI/
v/Ol4s+nfW4EqHLDoe4Mhjty9QSy7FdEZUdkkzjJP1MJICbqi2CGXOFw/VflE116
KScFFvqbd8mmhTgEb6bjfJ5uwrmzoVLXBj1Hk5nu88jN4HclIwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDzS3XcqbhWkBYs3opJ+TiJ0IKZYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZDcz
MDRlMS0zYmMxLTQzYzEtYjAzNS05M2VlMDI3MDYzZGIvM2FkOTAzN2QtY2M0ZS0z
YTQ2LTk4MWEtNzE1ZTQzOGQ0ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2Q3MzA0ZTEtM2JjMS00M2MxLWIw
MzUtOTNlZTAyNzA2M2RiL2NkNzMwNGUxLTNiYzEtNDNjMS1iMDM1LTkzZWUwMjcw
NjNkYi5jcmwwHwYDVR0jBBgwFoAU7rmdZNXt9QBRjGNxx50ffKrFHZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jZDczMDRlMS0zYmMxLTQzYzEtYjAzNS05M2Vl
MDI3MDYzZGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6kwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaA2PJHx6DCtWkBZLPjeueitjOZdVYIdnZ8Y4n+dnt5s+HWKlWfKw
Z/K+yfaQ+5WpG7EB/Kn97xOpMSKfRjE65XXOP4WRhQ7jhFK1SqWRA5ekDtmF//7E
FSJDkpBwRAeOvbQCEBpYDtUrcdpsQEdbq7IBgzA+MhnlBlcO4tOnbrNk9Wsn/UCn
/Tg+TJit0v5kZDs/0HJT969I0oRiKgNyn5VSNrMHYveZqlVu3JHOYQqORv01TnFH
LnWfWTA36eTIvta4jibdsRx0OaKNCGVV7idLg/CX/5URXOm42Xd2TX2SUcTvUxBp
7vUF85amgqME59ELgrTWCMUFHyMblQtBYw==
-----END CERTIFICATE-----
Generated at Thu May 16 06:48:48 2024 by rpki-client on console-ams.rpki-client.org