Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa
File:                     a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa (raw, json)
Hash identifier:          91xzSf6aDXy2jgGKusrADRITVu3NSVezstVeagkUeV0=
Subject key identifier:   3A:4A:72:F0:EE:FD:56:A9:00:2E:FF:3B:D5:98:09:3B:2B:63:53:BD
Certificate issuer:       /CN=97e6dc25-3cc3-4f4e-ad93-6bcf11c844da
Certificate serial:       010D0C9F43285845068AC8CB04FA15D99833A8F2
Authority key identifier: 74:F3:80:33:A5:3E:5F:68:0E:7F:C5:24:F2:B4:7B:2A:8B:76:52:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     395915
IP address blocks:        2602:811:4000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c8:cb:04:fa:15:d9:98:33:a8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e6dc25-3cc3-4f4e-ad93-6bcf11c844da
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=46f3b779-d6eb-41f8-9ce9-a2d62fb5b1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:60:29:e8:1a:79:59:43:19:6f:f4:62:84:
                    9d:fe:d4:79:05:e3:1c:53:8e:93:82:96:6d:5b:c7:
                    c1:4b:04:66:24:52:ad:87:3f:65:e8:86:ee:e7:c2:
                    70:dd:b3:4b:d0:69:87:d0:09:0a:01:3f:26:81:f9:
                    0e:42:f7:ba:04:5d:e4:c6:14:89:98:ae:69:b6:c1:
                    43:ed:87:54:65:21:31:30:e5:a5:27:e3:7b:6b:96:
                    95:82:5b:c9:07:f1:c0:b9:32:32:80:72:5b:41:51:
                    e8:04:a2:48:7a:95:37:11:3e:e9:9c:b9:05:2d:95:
                    d4:df:21:34:8b:c5:f9:b5:17:c3:92:a7:a1:e1:f9:
                    b9:9a:6b:ca:7c:e3:31:bd:ae:97:9b:c6:f6:6e:a6:
                    4d:bc:bb:82:34:ac:d0:fa:c0:25:59:23:d9:43:a5:
                    2d:b4:a4:26:48:85:74:b8:05:da:59:cb:54:81:f0:
                    b6:a9:94:25:ac:08:72:33:fa:3f:6b:9e:99:cf:df:
                    e1:a6:3d:53:cd:29:ea:a7:04:33:61:d5:9b:c6:91:
                    be:c0:19:cf:d0:9a:6b:3c:28:74:75:a9:36:4f:bf:
                    e7:76:20:cb:be:14:79:3f:a8:ee:41:49:f2:1f:14:
                    bc:82:08:34:d0:96:5f:5b:17:73:74:6d:ca:b6:34:
                    37:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4A:72:F0:EE:FD:56:A9:00:2E:FF:3B:D5:98:09:3B:2B:63:53:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.crl

            X509v3 Authority Key Identifier:
                keyid:74:F3:80:33:A5:3E:5F:68:0E:7F:C5:24:F2:B4:7B:2A:8B:76:52:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:811:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f1:f8:b0:5a:8b:fa:a3:5e:30:89:f7:79:0a:de:93:8b:b8:
         31:64:d0:aa:c6:b4:ad:84:f8:ef:fd:b6:a1:02:df:2b:6c:00:
         de:29:ab:dc:ef:d4:55:6a:07:c6:aa:09:d1:0b:1c:cf:52:68:
         4e:c4:d6:6a:ff:0f:d4:27:56:47:9f:63:7a:7b:5e:72:4f:f3:
         7d:f9:6d:fd:e2:61:e4:de:ef:06:c3:c1:e2:3d:43:1f:e4:ac:
         ff:c4:bf:a9:14:f8:c2:47:71:16:96:b1:05:1a:d2:10:88:ac:
         65:34:c8:8b:7f:08:ee:31:0d:21:3c:c4:d2:66:9d:71:38:fd:
         54:17:f7:73:a1:5c:58:5a:fa:83:62:62:43:51:a1:b7:ba:c3:
         11:da:f2:11:7c:8f:d4:41:5d:8e:30:c7:b9:7c:18:e1:40:ef:
         83:c3:01:d2:af:f1:24:1f:32:df:7c:62:b2:e4:1e:fc:0d:91:
         be:f9:16:75:bf:49:dc:79:50:e7:d0:05:56:b0:9b:7d:4c:bd:
         a3:95:67:40:48:ff:19:82:3b:15:46:0c:6c:de:18:83:13:83:
         a6:33:d7:e9:db:2c:e4:e2:eb:93:85:64:56:ee:49:df:ff:6d:
         9c:d8:de:8b:57:df:aa:53:77:db:89:6a:04:77:b2:f2:11:dd:
         2f:2c:66:17
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUGisjLBPoV2ZgzqPIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTdlNmRjMjUtM2NjMy00ZjRlLWFkOTMtNmJjZjExYzg0
NGRhMB4XDTI0MDIyNzAyMDAyNloXDTI0MDUyNzAxMDAyNlowLzEtMCsGA1UEAxMk
NDZmM2I3NzktZDZlYi00MWY4LTljZTktYTJkNjJmYjViMWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgJgKegaeVlDGW/0YoSd/tR5BeMcU46TgpZt
W8fBSwRmJFKthz9l6Ibu58Jw3bNL0GmH0AkKAT8mgfkOQve6BF3kxhSJmK5ptsFD
7YdUZSExMOWlJ+N7a5aVglvJB/HAuTIygHJbQVHoBKJIepU3ET7pnLkFLZXU3yE0
i8X5tRfDkqeh4fm5mmvKfOMxva6Xm8b2bqZNvLuCNKzQ+sAlWSPZQ6UttKQmSIV0
uAXaWctUgfC2qZQlrAhyM/o/a56Zz9/hpj1TzSnqpwQzYdWbxpG+wBnP0JprPCh0
dak2T7/ndiDLvhR5P6juQUnyHxS8ggg00JZfWxdzdG3KtjQ3TQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDpKcvDu/VapAC7/O9WYCTsrY1O9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85N2U2
ZGMyNS0zY2MzLTRmNGUtYWQ5My02YmNmMTFjODQ0ZGEvYTMwOThlMDItZGM2ZC0z
MzYwLWE0YTYtNjkxNDNkYmI0Yjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTdlNmRjMjUtM2NjMy00ZjRlLWFk
OTMtNmJjZjExYzg0NGRhLzk3ZTZkYzI1LTNjYzMtNGY0ZS1hZDkzLTZiY2YxMWM4
NDRkYS5jcmwwHwYDVR0jBBgwFoAUdPOAM6U+X2gOf8Uk8rR7Kot2UrwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85N2U2ZGMyNS0zY2MzLTRmNGUtYWQ5My02YmNm
MTFjODQ0ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIEUAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAELx+LBai/qjXjCJ93kK3pOLuDFk0KrGtK2E+O/9tqEC3ytsAN4p
q9zv1FVqB8aqCdELHM9SaE7E1mr/D9QnVkefY3p7XnJP8335bf3iYeTe7wbDweI9
Qx/krP/Ev6kU+MJHcRaWsQUa0hCIrGU0yIt/CO4xDSE8xNJmnXE4/VQX93OhXFha
+oNiYkNRobe6wxHa8hF8j9RBXY4wx7l8GOFA74PDAdKv8SQfMt98YrLkHvwNkb75
FnW/Sdx5UOfQBVawm31MvaOVZ0BI/xmCOxVGDGzeGIMTg6Yz1+nbLOTi65OFZFbu
Sd//bZzY3otX36pTd9uJagR3svIR3S8sZhc=
-----END CERTIFICATE-----
Generated at Thu May 9 15:21:52 2024 by rpki-client on console-fra.rpki-client.org