Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa
File:                     d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa (raw, json)
Hash identifier:          HqXglaxYJ2Rk2frdWtjyk9iA1g6x/dDBnZlHEFuESjA=
Subject key identifier:   AA:29:FB:09:1A:7C:ED:C6:D2:4F:F7:93:47:2D:80:8A:FF:5F:56:4B
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F43285847B10158D0B4E6B9E36089D8C0
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     397666
IP address blocks:        2602:fd9e:f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:58:d0:b4:e6:b9:e3:60:89:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=a666f628-c1b2-43c0-8865-46041e86b1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:56:bf:32:ad:63:b1:3c:bc:db:3d:29:a7:
                    63:29:62:fc:db:44:f8:d9:ca:ad:5e:b1:e8:ac:5d:
                    ed:52:62:b4:76:13:46:65:6e:aa:13:fc:e5:cd:81:
                    8b:ab:be:fc:f1:4c:53:88:7b:71:a5:f5:3c:ac:90:
                    fa:50:57:79:5c:dc:16:a6:4f:54:5e:7a:73:d5:59:
                    c3:26:81:51:4d:da:e6:94:82:79:ed:55:b5:6a:da:
                    d3:4e:ce:9c:f1:8b:62:ad:4f:c1:03:f4:68:cb:f7:
                    82:23:ec:67:68:73:cb:17:7d:92:da:e0:58:6a:b4:
                    af:06:b6:0e:91:ac:4c:1e:02:e9:85:ad:25:ea:ee:
                    e6:4d:24:1c:2e:be:61:99:ec:5a:eb:08:53:ec:fb:
                    22:db:4f:b2:3d:a0:ac:b4:5e:da:a1:0d:ec:8a:f0:
                    ff:56:ec:03:95:a3:83:23:10:ad:79:5c:ae:62:11:
                    75:5c:9e:dd:74:9b:df:12:35:7c:01:76:92:62:31:
                    9e:36:4b:90:8f:08:e2:1e:10:b2:0e:f8:4f:2a:00:
                    57:f8:17:05:e4:d8:56:a4:e6:38:9d:af:29:4c:fd:
                    d5:cc:83:47:24:5a:95:b4:79:37:bb:58:1b:98:fa:
                    22:76:da:21:49:51:b7:ae:8e:e4:34:52:97:1b:47:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:29:FB:09:1A:7C:ED:C6:D2:4F:F7:93:47:2D:80:8A:FF:5F:56:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9e:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ba:22:9d:2e:14:3d:e9:e8:69:67:a8:01:ae:4f:01:52:49:
         71:ac:29:fc:52:cc:0c:69:3c:33:bf:d3:d1:e6:2e:ae:5e:69:
         eb:fe:00:ce:23:6f:70:ad:a9:e5:ab:23:3a:96:68:f9:e8:c2:
         b6:7a:fe:c1:5d:ad:b7:39:22:3f:d5:8e:c3:ed:0d:fb:f1:7f:
         60:8a:40:7d:4c:fb:96:d8:c8:9c:0b:98:f1:e7:ab:aa:dd:43:
         c9:ce:62:3f:a8:2d:24:73:5e:1a:f0:26:54:e3:2c:1b:27:18:
         75:92:2c:a0:c1:16:ec:06:6a:83:03:7b:9e:db:a5:ba:dd:6f:
         f4:e4:44:c7:01:a3:2e:21:bf:39:6a:b9:34:90:0b:1e:f9:a1:
         ac:b9:5d:86:0f:49:bb:4b:35:cb:c5:f6:65:28:bb:13:d8:6a:
         9f:c8:ed:10:1b:78:73:3c:90:5e:12:2e:a7:b1:a5:fa:d5:c7:
         18:5b:e9:e4:f1:79:90:c8:22:f3:09:8a:e3:cc:06:dc:cd:7c:
         1b:da:fd:cb:d6:0f:2a:4e:57:09:c4:54:f5:fd:de:4e:06:6d:
         f1:dd:4f:0a:4a:f4:c0:df:bd:23:d1:6e:9d:8d:ef:16:10:d2:
         a8:20:57:5a:37:57:b2:60:64:6d:ae:13:b9:62:ba:0a:da:78:
         c6:d9:9d:d5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEexAVjQtOa542CJ2MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4
M2RmMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk
YTY2NmY2MjgtYzFiMi00M2MwLTg4NjUtNDYwNDFlODZiMWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDtWvzKtY7E8vNs9KadjKWL820T42cqtXrHo
rF3tUmK0dhNGZW6qE/zlzYGLq7788UxTiHtxpfU8rJD6UFd5XNwWpk9UXnpz1VnD
JoFRTdrmlIJ57VW1atrTTs6c8YtirU/BA/Roy/eCI+xnaHPLF32S2uBYarSvBrYO
kaxMHgLpha0l6u7mTSQcLr5hmexa6whT7Psi20+yPaCstF7aoQ3sivD/VuwDlaOD
IxCteVyuYhF1XJ7ddJvfEjV8AXaSYjGeNkuQjwjiHhCyDvhPKgBX+BcF5NhWpOY4
na8pTP3VzINHJFqVtHk3u1gbmPoidtohSVG3ro7kNFKXG0fD5QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKop+wkafO3G0k/3k0ctgIr/X1ZLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5
OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvZDQwNjg3YmMtOGIyMi0z
Y2I1LThiYjEtMTVkNzQ0NWI2OWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi
NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw
ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj
YTZhMDgzZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9ng8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWroinS4UPenoaWeoAa5PAVJJcawp/FLMDGk8M7/T0eYurl5p6/4A
ziNvcK2p5asjOpZo+ejCtnr+wV2ttzkiP9WOw+0N+/F/YIpAfUz7ltjInAuY8eer
qt1Dyc5iP6gtJHNeGvAmVOMsGycYdZIsoMEW7AZqgwN7ntulut1v9ORExwGjLiG/
OWq5NJALHvmhrLldhg9Ju0s1y8X2ZSi7E9hqn8jtEBt4czyQXhIup7Gl+tXHGFvp
5PF5kMgi8wmK48wG3M18G9r9y9YPKk5XCcRU9f3eTgZt8d1PCkr0wN+9I9FunY3v
FhDSqCBXWjdXsmBkba4TuWK6Ctp4xtmd1Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:58 2024 by rpki-client on console-ams.rpki-client.org