Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/748d8a92-4d18-3952-bf42-80d4622f7222.roa
File:                     748d8a92-4d18-3952-bf42-80d4622f7222.roa (raw, json)
Hash identifier:          l4D5eHT+ijoDnAvc6IcrRX58dyaaDDkR2ZgQmkSNGmE=
Subject key identifier:   2A:F5:3D:91:2D:D4:7F:3A:8D:E0:36:79:96:8B:90:E3:4B:5D:42:9E
Certificate issuer:       /CN=61a98034-fe16-431f-9842-402073e93fa8
Certificate serial:       010D0C9F43285845BD48D95DE456332EB34FC340
Authority key identifier: 2D:FA:CC:02:3E:41:92:1C:1A:F1:C5:F6:89:2F:2F:FA:7B:65:5A:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/748d8a92-4d18-3952-bf42-80d4622f7222.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     62628
IP address blocks:        2602:80c:4000::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/61a98034-fe16-431f-9842-402073e93fa8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/61a98034-fe16-431f-9842-402073e93fa8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:d9:5d:e4:56:33:2e:b3:4f:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61a98034-fe16-431f-9842-402073e93fa8
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=c5e8b389-973e-4584-93e1-b7e9ea6d6523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:71:6b:e2:03:79:1b:c4:3b:9a:8e:cb:b1:80:
                    67:b6:03:35:de:66:b5:ad:69:5b:50:e4:e5:7a:a6:
                    94:98:ce:2b:54:e1:4b:1b:87:fa:08:82:3c:3c:37:
                    cc:c3:78:fd:c3:85:e8:9b:1f:8d:80:47:fa:74:99:
                    93:34:66:ea:9f:df:23:c3:b4:d0:90:59:04:37:f2:
                    31:6f:8a:f8:fe:13:cc:a4:67:f7:42:3f:47:86:1a:
                    5e:58:90:2d:54:f2:5b:d4:9e:2d:be:8d:df:ea:9e:
                    f7:f5:37:7f:51:15:f0:08:5a:a9:4c:da:30:d5:a7:
                    a8:02:a7:bf:0d:8c:77:47:f4:9f:b7:11:ad:88:20:
                    bd:ba:4f:64:65:ad:8e:da:69:e2:dc:27:fa:df:40:
                    5d:70:61:26:09:6c:08:38:93:d3:d1:b4:8e:ea:ac:
                    d6:a2:7d:6f:c3:18:87:84:fe:61:a5:77:c3:92:7f:
                    a8:35:13:79:8d:84:56:0a:e7:32:bb:0c:01:c1:d6:
                    06:cd:5c:94:1b:7b:6e:46:73:ea:25:21:91:1a:f6:
                    e2:5e:ea:d5:b3:30:b0:c1:28:43:53:f8:5d:69:1c:
                    dc:5b:b1:ad:ee:fa:1b:f9:46:a4:45:b5:b2:1e:cc:
                    08:72:54:b5:84:43:29:a3:df:3c:30:24:81:17:b7:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F5:3D:91:2D:D4:7F:3A:8D:E0:36:79:96:8B:90:E3:4B:5D:42:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/748d8a92-4d18-3952-bf42-80d4622f7222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/61a98034-fe16-431f-9842-402073e93fa8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:FA:CC:02:3E:41:92:1C:1A:F1:C5:F6:89:2F:2F:FA:7B:65:5A:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:42:17:ea:a2:90:44:8a:3f:e3:b2:42:4c:10:ba:27:61:cb:
         16:5f:29:37:7b:7f:74:ac:e7:ee:9b:48:dd:f6:bc:4e:63:f1:
         b0:4b:5b:06:45:0b:2b:e2:cc:16:68:2c:54:f2:54:22:9d:2c:
         c2:03:e1:62:37:35:c2:80:39:0c:6b:bf:0c:ef:21:c8:47:bb:
         9a:86:fd:73:54:8f:2f:f5:34:c0:2c:68:42:13:5d:0e:6b:ec:
         3d:5c:e7:ea:44:be:b5:cc:97:aa:93:b8:a7:55:6e:39:a4:dc:
         1a:da:ea:d2:1c:b4:10:86:ab:9a:55:4a:e8:91:e5:31:9b:4a:
         11:b2:37:d4:53:3e:1d:48:f0:d9:60:8e:8e:f0:e7:0b:e6:48:
         ca:78:29:a7:29:d8:ff:d9:5b:c4:1d:d9:11:e7:49:34:97:b7:
         24:12:76:8c:17:4d:17:3c:53:09:a8:39:8d:40:f0:24:06:cf:
         60:79:25:37:60:12:cd:2b:b7:8e:4e:55:77:ba:06:18:5b:78:
         d3:fe:cb:03:51:e6:40:57:6f:24:97:0c:58:d3:7e:0b:c8:03:
         1a:24:dc:b7:a5:46:91:f4:e8:03:7c:b4:3d:e0:d8:b7:0e:6f:
         be:dd:18:b7:3b:33:89:e1:ae:77:01:fe:77:f2:af:e3:a8:d2:
         07:02:49:27
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEW9SNld5FYzLrNPw0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFhOTgwMzQtZmUxNi00MzFmLTk4NDItNDAyMDczZTkz
ZmE4MB4XDTI0MDUwMjEzMDAzNFoXDTI0MDczMTEzMDAzNFowLzEtMCsGA1UEAxMk
YzVlOGIzODktOTczZS00NTg0LTkzZTEtYjdlOWVhNmQ2NTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonFr4gN5G8Q7mo7LsYBntgM13ma1rWlbUOTl
eqaUmM4rVOFLG4f6CII8PDfMw3j9w4Xomx+NgEf6dJmTNGbqn98jw7TQkFkEN/Ix
b4r4/hPMpGf3Qj9HhhpeWJAtVPJb1J4tvo3f6p739Td/URXwCFqpTNow1aeoAqe/
DYx3R/SftxGtiCC9uk9kZa2O2mni3Cf630BdcGEmCWwIOJPT0bSO6qzWon1vwxiH
hP5hpXfDkn+oNRN5jYRWCucyuwwBwdYGzVyUG3tuRnPqJSGRGvbiXurVszCwwShD
U/hdaRzcW7Gt7vob+UakRbWyHswIclS1hEMpo988MCSBF7d0zQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCr1PZEt1H86jeA2eZaLkONLXUKeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWE5
ODAzNC1mZTE2LTQzMWYtOTg0Mi00MDIwNzNlOTNmYTgvNzQ4ZDhhOTItNGQxOC0z
OTUyLWJmNDItODBkNDYyMmY3MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFhOTgwMzQtZmUxNi00MzFmLTk4
NDItNDAyMDczZTkzZmE4LzYxYTk4MDM0LWZlMTYtNDMxZi05ODQyLTQwMjA3M2U5
M2ZhOC5jcmwwHwYDVR0jBBgwFoAULfrMAj5Bkhwa8cX2iS8v+ntlWoYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82MWE5ODAzNC1mZTE2LTQzMWYtOTg0Mi00MDIw
NzNlOTNmYTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIIDEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbkIX6qKQRIo/47JCTBC6J2HLFl8pN3t/dKzn7ptI3fa8TmPxsEtb
BkULK+LMFmgsVPJUIp0swgPhYjc1woA5DGu/DO8hyEe7mob9c1SPL/U0wCxoQhNd
DmvsPVzn6kS+tcyXqpO4p1VuOaTcGtrq0hy0EIarmlVK6JHlMZtKEbI31FM+HUjw
2WCOjvDnC+ZIyngppynY/9lbxB3ZEedJNJe3JBJ2jBdNFzxTCag5jUDwJAbPYHkl
N2ASzSu3jk5Vd7oGGFt40/7LA1HmQFdvJJcMWNN+C8gDGiTct6VGkfToA3y0PeDY
tw5vvt0YtzszieGudwH+d/Kv46jSBwJJJw==
-----END CERTIFICATE-----
Generated at Mon Jul 1 02:53:57 2024 by rpki-client on console-ams.rpki-client.org