Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/c0f85f1e-222e-3708-8d2c-72da38ec41aa.roa
File:                     c0f85f1e-222e-3708-8d2c-72da38ec41aa.roa (raw, json)
Hash identifier:          BDxvCmKSqYYYiRhdS/lrSMl3U2JjghpvltmgoZEgsps=
Subject key identifier:   62:57:35:82:0F:9E:EB:71:28:43:3D:0C:A8:B2:73:FE:0C:02:41:47
Certificate issuer:       /CN=e618da9e-0816-460e-9515-1743f366bdc6
Certificate serial:       010D0C9F432858459368D02790008FFD2BA04A80
Authority key identifier: 25:1B:3B:D4:61:2C:93:3C:6B:18:D0:53:DA:75:11:03:2A:67:3C:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/c0f85f1e-222e-3708-8d2c-72da38ec41aa.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     210000
IP address blocks:        2602:faf4::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/e618da9e-0816-460e-9515-1743f366bdc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/e618da9e-0816-460e-9515-1743f366bdc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:d0:27:90:00:8f:fd:2b:a0:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e618da9e-0816-460e-9515-1743f366bdc6
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=36540109-1dab-47c8-a233-98f91cb94b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f0:61:b1:e5:cc:92:1d:42:82:b9:35:54:ab:
                    26:60:e9:43:4f:52:fb:35:45:02:f1:56:9c:9a:91:
                    bf:ab:5a:99:58:f0:43:ff:6f:16:93:35:2a:fb:f8:
                    49:17:53:bd:8b:ec:f5:1f:40:ca:60:cf:5b:f9:f4:
                    9e:1f:c5:bd:7d:0e:78:c1:50:4c:f4:be:b7:b5:e2:
                    35:c3:8b:85:c6:06:6d:89:42:f5:e8:c8:e5:cb:31:
                    6f:6d:2f:cc:5a:8a:56:9e:af:be:ef:a4:7a:ba:14:
                    1f:d0:94:7a:82:d8:d4:85:4c:2e:f4:41:3c:27:b9:
                    de:b4:43:b8:db:af:46:82:e5:02:77:e1:7f:39:55:
                    23:4f:84:41:f8:50:44:b0:5c:bd:fa:e6:fc:9b:e3:
                    49:a2:3e:11:a1:07:96:24:e4:2e:8a:dc:eb:8c:ba:
                    4b:b6:44:32:e6:6f:ac:b4:a4:66:cd:85:3a:25:e5:
                    93:29:3b:56:d5:92:16:7d:59:94:f1:00:2b:ed:2b:
                    a5:12:57:d0:b7:c2:89:a7:d2:98:9f:00:40:88:21:
                    7b:f3:0f:2f:84:9e:b6:bd:1e:66:4f:96:9e:47:5d:
                    69:93:29:8f:92:0e:9d:67:5b:80:2e:66:af:05:00:
                    02:97:4c:a8:69:1c:5a:5d:05:dd:2d:d8:3a:db:53:
                    ee:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:57:35:82:0F:9E:EB:71:28:43:3D:0C:A8:B2:73:FE:0C:02:41:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/c0f85f1e-222e-3708-8d2c-72da38ec41aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/e618da9e-0816-460e-9515-1743f366bdc6.crl

            X509v3 Authority Key Identifier:
                keyid:25:1B:3B:D4:61:2C:93:3C:6B:18:D0:53:DA:75:11:03:2A:67:3C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faf4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c3:81:89:6a:4b:29:a3:0e:db:52:f9:34:74:c9:cd:0b:6d:
         5d:62:fc:74:3f:c3:b8:91:a9:aa:71:b8:4e:d8:19:16:03:42:
         c1:65:f7:67:1b:ec:7c:2d:59:f0:a4:00:f7:fe:cd:36:50:0d:
         42:40:24:e1:dc:68:e1:e8:32:25:28:65:7d:e4:7c:31:da:e7:
         42:45:93:e8:3d:43:5c:cb:94:27:dd:c1:02:34:02:4e:87:f6:
         f3:07:8a:fc:bd:c3:6f:9b:46:ba:b6:d1:ee:35:04:52:d8:6a:
         bd:c2:d8:59:1f:1f:79:04:5b:d7:78:9f:84:41:4a:25:2f:de:
         ae:a5:ec:a2:4c:b0:31:2c:da:98:9e:e5:cd:96:8f:b6:78:6e:
         0e:cf:b5:c3:34:5d:28:29:8f:d2:55:d7:a0:e3:16:83:26:0e:
         0c:6f:c0:56:d9:1e:c1:b5:83:cd:b5:3c:94:06:60:f5:b1:e4:
         86:c0:69:27:72:19:d1:3e:80:0e:72:e2:9e:c0:ff:2e:f9:6f:
         8f:28:a7:24:7b:fe:4c:7c:45:ea:ec:a3:e0:d4:d8:7b:0f:c3:
         57:6c:cb:b3:a8:15:35:06:18:26:76:ce:10:be:90:60:99:da:
         54:59:49:54:00:68:f0:53:0d:b5:78:bd:f0:e2:10:cd:5b:31:
         4e:9f:38:f8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEWTaNAnkACP/SugSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYxOGRhOWUtMDgxNi00NjBlLTk1MTUtMTc0M2YzNjZi
ZGM2MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk
MzY1NDAxMDktMWRhYi00N2M4LWEyMzMtOThmOTFjYjk0YjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/BhseXMkh1Cgrk1VKsmYOlDT1L7NUUC8Vac
mpG/q1qZWPBD/28WkzUq+/hJF1O9i+z1H0DKYM9b+fSeH8W9fQ54wVBM9L63teI1
w4uFxgZtiUL16MjlyzFvbS/MWopWnq++76R6uhQf0JR6gtjUhUwu9EE8J7netEO4
269GguUCd+F/OVUjT4RB+FBEsFy9+ub8m+NJoj4RoQeWJOQuitzrjLpLtkQy5m+s
tKRmzYU6JeWTKTtW1ZIWfVmU8QAr7SulElfQt8KJp9KYnwBAiCF78w8vhJ62vR5m
T5aeR11pkymPkg6dZ1uALmavBQACl0yoaRxaXQXdLdg621PuGQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGJXNYIPnutxKEM9DKiyc/4MAkFHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjE4
ZGE5ZS0wODE2LTQ2MGUtOTUxNS0xNzQzZjM2NmJkYzYvYzBmODVmMWUtMjIyZS0z
NzA4LThkMmMtNzJkYTM4ZWM0MWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYxOGRhOWUtMDgxNi00NjBlLTk1
MTUtMTc0M2YzNjZiZGM2L2U2MThkYTllLTA4MTYtNDYwZS05NTE1LTE3NDNmMzY2
YmRjNi5jcmwwHwYDVR0jBBgwFoAUJRs71GEskzxrGNBT2nURAypnPHcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjE4ZGE5ZS0wODE2LTQ2MGUtOTUxNS0xNzQz
ZjM2NmJkYzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL69AAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPMOBiWpLKaMO21L5NHTJzQttXWL8dD/DuJGpqnG4TtgZFgNCwWX3
ZxvsfC1Z8KQA9/7NNlANQkAk4dxo4egyJShlfeR8MdrnQkWT6D1DXMuUJ93BAjQC
Tof28weK/L3Db5tGurbR7jUEUthqvcLYWR8feQRb13ifhEFKJS/erqXsokywMSza
mJ7lzZaPtnhuDs+1wzRdKCmP0lXXoOMWgyYODG/AVtkewbWDzbU8lAZg9bHkhsBp
J3IZ0T6ADnLinsD/LvlvjyinJHv+THxF6uyj4NTYew/DV2zLs6gVNQYYJnbOEL6Q
YJnaVFlJVABo8FMNtXi98OIQzVsxTp84+A==
-----END CERTIFICATE-----
Generated at Wed May 15 15:09:11 2024 by rpki-client on console-fra.rpki-client.org