Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be/9a6f09d9-aad3-3011-b496-da60a0922a0d.roa
File:                     9a6f09d9-aad3-3011-b496-da60a0922a0d.roa (raw, json)
Hash identifier:          o0O5n37S80qIlEkzhUG+sToj+1xyfu3Y5Ty0Xksz6oc=
Subject key identifier:   94:C1:57:0A:5F:77:6D:7D:C8:48:D7:3A:3E:7B:EF:A7:0E:12:1E:AE
Certificate issuer:       /CN=b3e178bb-51b0-4deb-a471-908735d448be
Certificate serial:       010D0C9F432858471775BF647F470A1248782D00
Authority key identifier: 27:4C:CE:82:B6:C5:0C:A7:C0:6B:E4:24:75:1E:22:7F:C2:38:8B:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be/9a6f09d9-aad3-3011-b496-da60a0922a0d.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     16622
IP address blocks:        2602:fd54::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be/b3e178bb-51b0-4deb-a471-908735d448be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be/b3e178bb-51b0-4deb-a471-908735d448be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:bf:64:7f:47:0a:12:48:78:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e178bb-51b0-4deb-a471-908735d448be
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=05e948db-8aa4-4ba5-994e-186a2e6778c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:82:7e:6e:8e:f3:b2:9a:57:61:02:d7:9d:0a:
                    4f:25:dc:bf:97:17:4f:bf:6a:c5:d3:f9:de:b4:2c:
                    e1:48:8b:23:b6:1f:c3:3d:08:cd:5a:a5:a1:42:2d:
                    58:3b:f0:50:0b:1e:db:da:4b:60:0b:ff:f6:34:d1:
                    fd:d3:24:fa:b8:0f:76:26:4c:c2:3e:9a:a5:7b:d8:
                    a8:35:bb:8c:47:30:18:91:e1:a7:2f:36:8f:94:74:
                    43:53:b3:3a:44:ef:e4:2e:85:fd:e9:e2:45:11:f1:
                    06:2a:f7:21:55:03:2f:f1:e6:95:22:84:2f:2a:45:
                    f5:66:00:0b:00:57:74:ef:33:26:8a:8f:f9:95:3e:
                    5e:9a:9c:55:09:c9:06:51:4b:fb:9a:bc:37:46:5d:
                    cb:fc:fb:30:ba:49:69:e4:2a:01:f9:63:ba:d7:d4:
                    77:1f:2a:18:e3:14:54:25:f4:53:fb:e9:53:32:75:
                    33:e0:11:23:03:3a:07:41:9f:1b:b1:7a:70:0e:72:
                    7f:fb:48:98:59:01:f2:a4:31:44:fa:37:81:9a:5e:
                    44:1b:00:21:9e:22:ab:5b:d5:76:ee:2e:28:96:0a:
                    d8:b7:48:02:c1:4d:7f:b6:0e:06:98:bc:87:2f:40:
                    ee:26:f3:2f:34:45:90:bd:78:c7:93:10:53:dd:3c:
                    80:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C1:57:0A:5F:77:6D:7D:C8:48:D7:3A:3E:7B:EF:A7:0E:12:1E:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be/9a6f09d9-aad3-3011-b496-da60a0922a0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be/b3e178bb-51b0-4deb-a471-908735d448be.crl

            X509v3 Authority Key Identifier:
                keyid:27:4C:CE:82:B6:C5:0C:A7:C0:6B:E4:24:75:1E:22:7F:C2:38:8B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:92:ab:0a:39:ce:c0:cd:44:51:a8:8d:de:8d:d6:69:32:d8:
         2c:d4:79:05:1b:3c:54:3d:a0:12:db:cf:b4:1e:86:3d:c7:8b:
         87:c9:6d:f6:d8:64:46:59:24:74:a1:93:23:e0:fc:2f:88:31:
         2f:99:20:b2:b0:75:b3:e0:e4:1c:c6:3d:72:d2:87:55:7c:39:
         aa:b4:8e:dd:e4:bb:bf:5a:0d:9e:70:bb:9d:a9:07:3f:8e:e1:
         71:51:05:a8:db:39:14:60:04:64:97:c3:e8:10:7c:99:0e:3c:
         74:ac:01:9f:b7:bf:52:7c:96:4a:4b:5e:a8:cb:13:bf:86:a5:
         6e:06:67:2d:89:d3:7f:37:46:80:6b:98:ab:00:11:94:b6:ae:
         98:a6:60:cb:e1:86:f8:6c:ae:47:88:75:d5:b6:91:24:44:ce:
         08:34:00:82:cf:82:dd:2a:3b:f9:93:8f:b2:5f:b0:77:01:c4:
         f3:ce:b2:18:53:e7:ce:e2:da:04:3a:5c:d0:ca:3b:ea:5b:99:
         52:5a:53:b5:0c:f2:52:a6:f3:6f:68:68:6c:79:f7:b2:2e:db:
         5d:8c:13:41:c6:cb:a8:64:e2:94:ea:84:d9:4a:d1:00:f8:4d:
         8a:13:8c:0a:53:82:4a:77:c9:05:e1:cc:1a:8a:81:36:0a:ab:
         d5:c1:3b:36
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcXdb9kf0cKEkh4LQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjNlMTc4YmItNTFiMC00ZGViLWE0NzEtOTA4NzM1ZDQ0
OGJlMB4XDTI0MDkwMzEzMDA0MloXDTI0MTIwMjE0MDA0MlowLzEtMCsGA1UEAxMk
MDVlOTQ4ZGItOGFhNC00YmE1LTk5NGUtMTg2YTJlNjc3OGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYJ+bo7zsppXYQLXnQpPJdy/lxdPv2rF0/ne
tCzhSIsjth/DPQjNWqWhQi1YO/BQCx7b2ktgC//2NNH90yT6uA92JkzCPpqle9io
NbuMRzAYkeGnLzaPlHRDU7M6RO/kLoX96eJFEfEGKvchVQMv8eaVIoQvKkX1ZgAL
AFd07zMmio/5lT5empxVCckGUUv7mrw3Rl3L/Pswuklp5CoB+WO619R3HyoY4xRU
JfRT++lTMnUz4BEjAzoHQZ8bsXpwDnJ/+0iYWQHypDFE+jeBml5EGwAhniKrW9V2
7i4olgrYt0gCwU1/tg4GmLyHL0DuJvMvNEWQvXjHkxBT3TyAYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJTBVwpfd219yEjXOj5776cOEh6uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iM2Ux
NzhiYi01MWIwLTRkZWItYTQ3MS05MDg3MzVkNDQ4YmUvOWE2ZjA5ZDktYWFkMy0z
MDExLWI0OTYtZGE2MGEwOTIyYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjNlMTc4YmItNTFiMC00ZGViLWE0
NzEtOTA4NzM1ZDQ0OGJlL2IzZTE3OGJiLTUxYjAtNGRlYi1hNDcxLTkwODczNWQ0
NDhiZS5jcmwwHwYDVR0jBBgwFoAUJ0zOgrbFDKfAa+QkdR4if8I4iykwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iM2UxNzhiYi01MWIwLTRkZWItYTQ3MS05MDg3
MzVkNDQ4YmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9VAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGeSqwo5zsDNRFGojd6N1mky2CzUeQUbPFQ9oBLbz7Qehj3Hi4fJ
bfbYZEZZJHShkyPg/C+IMS+ZILKwdbPg5BzGPXLSh1V8Oaq0jt3ku79aDZ5wu52p
Bz+O4XFRBajbORRgBGSXw+gQfJkOPHSsAZ+3v1J8lkpLXqjLE7+GpW4GZy2J0383
RoBrmKsAEZS2rpimYMvhhvhsrkeIddW2kSREzgg0AILPgt0qO/mTj7JfsHcBxPPO
shhT587i2gQ6XNDKO+pbmVJaU7UM8lKm829oaGx597Iu212ME0HGy6hk4pTqhNlK
0QD4TYoTjApTgkp3yQXhzBqKgTYKq9XBOzY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:43 2024 by rpki-client on console-fra.rpki-client.org