Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/58bc2fb3-f0ea-331a-92b0-9c9554f2ad2a.roa
File:                     58bc2fb3-f0ea-331a-92b0-9c9554f2ad2a.roa (raw, json)
Hash identifier:          jjQMJlcIjA6+2WFkcP0jsHXSXWVJQdaQMG+p7Njnzpk=
Subject key identifier:   53:89:D2:D6:AA:5E:1E:13:2F:9C:59:26:FF:38:89:02:99:CF:36:7D
Certificate issuer:       /CN=9330b8fe-8cb9-471b-a186-5ab83c9e451d
Certificate serial:       010D0C9F432858459D2DEA95CFE490AA12D7D080
Authority key identifier: EE:AA:21:D4:C0:E7:3B:BA:82:BF:E0:45:1E:2B:CA:94:3E:1A:F5:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/58bc2fb3-f0ea-331a-92b0-9c9554f2ad2a.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     198057
IP address blocks:        2602:291:bb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/9330b8fe-8cb9-471b-a186-5ab83c9e451d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/9330b8fe-8cb9-471b-a186-5ab83c9e451d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:ea:95:cf:e4:90:aa:12:d7:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9330b8fe-8cb9-471b-a186-5ab83c9e451d
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=58f77d47-fc37-4605-b75b-fd3f60421493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:c1:e4:06:f0:6c:e0:d8:31:bf:26:19:3b:
                    1f:b9:6c:b7:5a:7b:b5:07:85:2f:9a:9f:58:39:ae:
                    59:16:ca:0b:a6:98:59:cc:e1:e6:f3:6e:be:bd:c2:
                    5a:18:eb:c6:2b:66:fd:36:93:e7:86:ed:1b:ee:36:
                    c6:68:57:20:62:1a:ae:8c:d9:11:4a:78:66:39:c9:
                    61:4f:27:56:a6:7d:cd:13:52:82:22:47:47:81:26:
                    63:25:5f:eb:55:2f:03:68:63:85:4f:8b:b2:a0:d1:
                    81:49:f0:6d:0a:55:90:56:77:07:f1:8e:06:df:ee:
                    e0:68:94:4b:35:e9:85:8b:fd:69:b7:f6:da:9b:54:
                    36:29:28:55:50:24:8f:10:07:29:e4:37:40:f9:70:
                    80:4d:af:86:9b:11:b9:f7:52:e3:24:07:a1:0f:1d:
                    32:2f:be:7e:36:be:67:f6:6f:2f:bb:17:2d:df:e9:
                    31:23:e9:27:17:9b:97:56:13:8d:bd:19:9f:0e:20:
                    d9:a8:57:c4:08:4f:36:39:6b:49:54:31:28:e0:64:
                    1f:2a:8f:ac:12:41:f4:6d:b2:d8:53:c5:f1:4d:74:
                    59:49:c9:6b:b9:f8:43:5c:a5:4a:b6:db:4d:64:24:
                    7c:16:8e:5f:da:fb:d4:72:f7:2f:4a:62:73:39:a1:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:89:D2:D6:AA:5E:1E:13:2F:9C:59:26:FF:38:89:02:99:CF:36:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/58bc2fb3-f0ea-331a-92b0-9c9554f2ad2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/9330b8fe-8cb9-471b-a186-5ab83c9e451d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:AA:21:D4:C0:E7:3B:BA:82:BF:E0:45:1E:2B:CA:94:3E:1A:F5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:291:bb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:6e:53:49:69:70:52:80:2c:bd:93:fb:ae:c7:d1:8c:6f:19:
         6f:10:1b:80:3a:ff:c1:d5:9e:1e:e6:c9:fd:c6:bc:a8:9f:94:
         89:bd:80:82:d3:48:c4:7e:0a:24:c1:e5:c1:dd:45:74:83:eb:
         6c:75:55:80:d6:02:aa:c2:80:cd:8e:ce:85:97:fe:b7:7f:a7:
         04:42:3b:a2:a1:3d:33:81:be:94:08:aa:be:63:7c:03:49:be:
         0a:e4:d5:b5:c9:45:f3:15:30:2b:65:99:37:a9:72:03:d8:9b:
         ff:7d:96:fc:f2:e5:2d:05:17:12:0b:95:d8:2b:ce:f1:a7:7c:
         2b:01:19:b2:aa:49:51:46:8c:f8:f9:22:f7:ef:48:5c:41:bd:
         85:c8:e5:7d:94:56:a9:1c:0a:9a:b4:de:d0:2e:6c:68:e3:88:
         18:36:5f:ce:76:75:c9:eb:97:6d:66:b0:7a:a7:cd:4d:2c:c3:
         66:17:e6:56:ee:f3:13:8b:64:ab:bd:07:c3:83:2a:12:07:41:
         32:19:cf:40:6d:ce:d7:25:63:77:2a:5f:c9:77:d0:04:c6:ff:
         ad:5b:e1:94:83:e1:2c:1b:9a:70:41:dc:e0:e8:d5:52:d6:eb:
         bb:fa:32:2a:8d:bb:ac:f9:a2:36:d3:dd:d7:74:28:ce:b6:ee:
         97:53:fb:bc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWdLeqVz+SQqhLX0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTMzMGI4ZmUtOGNiOS00NzFiLWExODYtNWFiODNjOWU0
NTFkMB4XDTI0MDQyMTAxMDAyNVoXDTI0MDcyMDAxMDAyNVowLzEtMCsGA1UEAxMk
NThmNzdkNDctZmMzNy00NjA1LWI3NWItZmQzZjYwNDIxNDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpnB5AbwbODYMb8mGTsfuWy3Wnu1B4Uvmp9Y
Oa5ZFsoLpphZzOHm826+vcJaGOvGK2b9NpPnhu0b7jbGaFcgYhqujNkRSnhmOclh
TydWpn3NE1KCIkdHgSZjJV/rVS8DaGOFT4uyoNGBSfBtClWQVncH8Y4G3+7gaJRL
NemFi/1pt/bam1Q2KShVUCSPEAcp5DdA+XCATa+GmxG591LjJAehDx0yL75+Nr5n
9m8vuxct3+kxI+knF5uXVhONvRmfDiDZqFfECE82OWtJVDEo4GQfKo+sEkH0bbLY
U8XxTXRZSclrufhDXKVKtttNZCR8Fo5f2vvUcvcvSmJzOaH8awIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFOJ0taqXh4TL5xZJv84iQKZzzZ9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MzMw
YjhmZS04Y2I5LTQ3MWItYTE4Ni01YWI4M2M5ZTQ1MWQvNThiYzJmYjMtZjBlYS0z
MzFhLTkyYjAtOWM5NTU0ZjJhZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTMzMGI4ZmUtOGNiOS00NzFiLWEx
ODYtNWFiODNjOWU0NTFkLzkzMzBiOGZlLThjYjktNDcxYi1hMTg2LTVhYjgzYzll
NDUxZC5jcmwwHwYDVR0jBBgwFoAU7qoh1MDnO7qCv+BFHivKlD4a9V4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzMwYjhmZS04Y2I5LTQ3MWItYTE4Ni01YWI4
M2M5ZTQ1MWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICkQC7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALZuU0lpcFKALL2T+67H0YxvGW8QG4A6/8HVnh7myf3GvKiflIm9
gILTSMR+CiTB5cHdRXSD62x1VYDWAqrCgM2OzoWX/rd/pwRCO6KhPTOBvpQIqr5j
fANJvgrk1bXJRfMVMCtlmTepcgPYm/99lvzy5S0FFxILldgrzvGnfCsBGbKqSVFG
jPj5IvfvSFxBvYXI5X2UVqkcCpq03tAubGjjiBg2X852dcnrl21msHqnzU0sw2YX
5lbu8xOLZKu9B8ODKhIHQTIZz0BtztclY3cqX8l30ATG/61b4ZSD4SwbmnBB3ODo
1VLW67v6MiqNu6z5ojbT3dd0KM627pdT+7w=
-----END CERTIFICATE-----
Generated at Sun May 19 17:07:25 2024 by rpki-client on console-ams.rpki-client.org