Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3df4d6b3-5f92-3f8b-8db3-17ca0e24eddb.roa
File:                     3df4d6b3-5f92-3f8b-8db3-17ca0e24eddb.roa (raw, json)
Hash identifier:          WoAJOkbDl/p/c9Lv7RX79MU/B4tsPHpp22PM5VuEAn0=
Subject key identifier:   21:4C:8A:EF:1D:2F:A7:E3:40:68:11:A9:07:D0:38:7E:AE:C7:70:DF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858456CBBF0C2CF48AA51F99F4960
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3df4d6b3-5f92-3f8b-8db3-17ca0e24eddb.roa
Signing time:             Wed 03 Apr 2024 16:32:03 +0000
ROA not before:           Wed 03 Apr 2024 16:32:03 +0000
ROA not after:            Tue 02 Jul 2024 16:32:03 +0000
asID:                     0
IP address blocks:        2602:107:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:bb:f0:c2:cf:48:aa:51:f9:9f:49:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Apr  3 16:32:03 2024 GMT
            Not After : Jul  2 16:32:03 2024 GMT
        Subject: CN=bef0b3b3-6aba-4b55-afe0-ef584ceea747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a3:10:90:40:d7:33:36:16:1e:c0:91:96:18:
                    86:7d:3b:b8:35:f4:bb:cf:27:be:cd:80:a1:7d:5b:
                    43:4b:17:06:38:34:67:39:79:a9:4a:0a:cb:f5:9b:
                    b3:eb:09:93:63:03:01:ec:02:cd:f9:db:a7:75:3f:
                    cd:e9:33:e8:1b:47:41:a6:22:60:3b:40:cd:37:60:
                    27:3f:27:8f:08:15:c9:0d:9a:fc:e7:4e:ac:ce:14:
                    49:f2:de:c1:31:ea:41:e6:ff:75:f7:61:ec:a1:25:
                    b0:4e:82:c2:3c:fd:d4:95:56:76:e1:eb:67:93:5d:
                    e9:19:f5:34:4e:91:e5:56:dd:26:df:8a:6e:da:74:
                    a8:1f:7a:fb:34:5d:40:ae:b7:81:2c:65:1e:be:80:
                    5a:93:94:ff:c9:e3:d1:72:b3:f7:a4:41:90:a3:f3:
                    67:e5:2e:39:c0:2c:6d:b1:0c:5e:5a:07:b0:04:ec:
                    60:ad:22:70:3b:fc:b0:2c:91:c1:1e:2c:87:2a:e8:
                    f9:49:55:78:86:52:be:24:6f:77:18:87:08:71:44:
                    17:9c:42:ba:05:02:8b:92:eb:06:90:33:93:1f:e9:
                    79:3f:67:2d:8a:d9:71:89:01:61:5d:5f:45:c2:cc:
                    f3:9f:c5:b7:0f:ed:ec:6b:2d:7f:3c:14:e7:e7:e1:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4C:8A:EF:1D:2F:A7:E3:40:68:11:A9:07:D0:38:7E:AE:C7:70:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3df4d6b3-5f92-3f8b-8db3-17ca0e24eddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a8:ed:69:4a:c7:2c:36:2e:b2:97:53:f0:43:b2:b7:61:e3:
         72:56:0b:72:78:f1:c5:27:d0:fd:05:9c:eb:2f:86:b0:9e:2f:
         e5:03:85:81:cc:41:76:1c:78:3a:29:9a:78:c4:55:2e:0e:c9:
         c5:0c:c0:69:e4:d2:14:8f:82:b9:1f:44:93:e4:7f:c2:d7:7c:
         cb:c2:3c:4c:9d:4d:3e:90:c0:27:e9:bf:55:f7:12:2e:c1:30:
         0a:11:e1:0d:ed:6f:a5:97:60:13:ff:e5:13:b3:73:91:ed:a2:
         84:a4:45:57:1d:f7:b9:69:16:a9:8a:8f:c4:34:b5:a0:57:2b:
         5c:91:f5:14:b9:ef:0e:d1:99:7d:ab:44:ea:b0:cc:e0:a4:b7:
         a8:66:10:f9:23:83:51:00:17:f2:3e:27:46:46:df:26:e9:3b:
         1a:2b:18:81:0d:17:33:a9:a5:96:93:f3:c6:53:00:f7:e1:0d:
         06:c0:d5:ae:0f:f2:34:27:cf:43:8c:73:2b:14:9e:c0:d1:4f:
         71:61:4d:ac:60:a6:17:6b:4d:8a:aa:ed:9c:bb:ad:b7:89:d0:
         89:67:33:25:33:c8:62:b1:cb:8b:7e:a3:61:23:b3:d1:05:d5:
         1b:ac:b5:7c:27:f0:f6:f5:62:59:92:0d:10:b5:d4:0d:28:17:
         56:44:13:64
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVsu/DCz0iqUfmfSWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDQwMzE2MzIwM1oXDTI0MDcwMjE2MzIwM1owLzEtMCsGA1UEAxMk
YmVmMGIzYjMtNmFiYS00YjU1LWFmZTAtZWY1ODRjZWVhNzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KMQkEDXMzYWHsCRlhiGfTu4NfS7zye+zYCh
fVtDSxcGODRnOXmpSgrL9Zuz6wmTYwMB7ALN+dundT/N6TPoG0dBpiJgO0DNN2An
PyePCBXJDZr8506szhRJ8t7BMepB5v9192HsoSWwToLCPP3UlVZ24etnk13pGfU0
TpHlVt0m34pu2nSoH3r7NF1ArreBLGUevoBak5T/yePRcrP3pEGQo/Nn5S45wCxt
sQxeWgewBOxgrSJwO/ywLJHBHiyHKuj5SVV4hlK+JG93GIcIcUQXnEK6BQKLkusG
kDOTH+l5P2ctitlxiQFhXV9Fwszzn8W3D+3say1/PBTn5+GURwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCFMiu8dL6fjQGgRqQfQOH6ux3DfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2RmNGQ2YjMtNWY5Mi0z
ZjhiLThkYjMtMTdjYTBlMjRlZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIBBwMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQqjtaUrHLDYuspdT8EOyt2HjclYLcnjxxSfQ/QWc6y+GsJ4v5QOF
gcxBdhx4OimaeMRVLg7JxQzAaeTSFI+CuR9Ek+R/wtd8y8I8TJ1NPpDAJ+m/VfcS
LsEwChHhDe1vpZdgE//lE7Nzke2ihKRFVx33uWkWqYqPxDS1oFcrXJH1FLnvDtGZ
fatE6rDM4KS3qGYQ+SODUQAX8j4nRkbfJuk7GisYgQ0XM6mllpPzxlMA9+ENBsDV
rg/yNCfPQ4xzKxSewNFPcWFNrGCmF2tNiqrtnLutt4nQiWczJTPIYrHLi36jYSOz
0QXVG6y1fCfw9vViWZINELXUDSgXVkQTZA==
-----END CERTIFICATE-----
Generated at Sat May 4 13:43:29 2024 by rpki-client on console-ams.rpki-client.org