Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/75f0abaf-7026-3d77-a50d-c5bcdf55e547.roa
File:                     75f0abaf-7026-3d77-a50d-c5bcdf55e547.roa (raw, json)
Hash identifier:          wXcSZrlMpujl00PfG5LYyIs3uQHhl6Rcu7rw6gPhT6Y=
Subject key identifier:   0A:67:90:4D:38:44:4D:C3:E1:5E:AB:8B:CF:35:0E:8B:8A:01:F7:BB
Certificate issuer:       /CN=c739b1fc-db89-423c-9437-5e3b11048882
Certificate serial:       010D0C9F4328584793B116E7D0CAA68E4FEA5D80
Authority key identifier: DC:21:25:D0:49:8C:CA:F7:CC:E2:D0:4E:72:30:23:2E:C8:03:AF:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/75f0abaf-7026-3d77-a50d-c5bcdf55e547.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     40080
IP address blocks:        2602:fb31::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:16:e7:d0:ca:a6:8e:4f:ea:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c739b1fc-db89-423c-9437-5e3b11048882
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=779bbac7-ad56-4da9-915d-d33909c3553f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:1e:d3:c2:96:4e:80:2a:23:67:5f:a1:4f:
                    d8:50:88:3f:9f:56:7d:96:ad:db:cc:49:b8:93:c4:
                    a9:61:c0:9b:9b:0a:ac:6b:6c:dd:70:f4:db:26:d9:
                    67:07:76:39:d9:7c:50:1b:d5:15:e2:48:7e:97:6a:
                    e9:a8:62:3d:9e:bb:81:32:41:51:a7:85:6c:ee:11:
                    a5:cb:7f:2a:5a:50:e3:bb:17:71:4e:17:76:79:c8:
                    25:f1:9b:53:2b:d7:2e:ac:ee:9a:2c:47:24:01:89:
                    a8:6e:2d:b9:a0:7b:ea:98:79:6c:db:b5:6b:c5:f4:
                    d5:34:85:57:15:e7:fa:ab:e4:9b:fb:01:ea:29:a4:
                    59:98:80:fd:a0:1f:67:4a:8d:ca:d8:42:57:c9:6b:
                    a3:b1:42:5c:d0:7e:08:d6:80:0b:94:38:45:69:cc:
                    5d:ec:ad:0c:b9:8c:b3:cc:93:96:59:c5:9e:3b:17:
                    68:f5:45:b8:f1:47:86:4d:e6:50:7f:85:35:85:fa:
                    9e:00:bc:1b:0b:6b:64:ba:bf:52:f0:42:92:c1:b8:
                    c5:a3:73:5f:5b:e4:20:f1:f6:07:fb:44:6f:a3:1d:
                    45:de:4e:0d:5b:ab:08:87:95:6e:01:9a:27:ce:ee:
                    4a:65:06:fc:59:19:30:1e:bc:fe:e5:d7:6b:3e:c7:
                    67:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:67:90:4D:38:44:4D:C3:E1:5E:AB:8B:CF:35:0E:8B:8A:01:F7:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/75f0abaf-7026-3d77-a50d-c5bcdf55e547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.crl

            X509v3 Authority Key Identifier:
                keyid:DC:21:25:D0:49:8C:CA:F7:CC:E2:D0:4E:72:30:23:2E:C8:03:AF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb31::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:6b:2f:91:12:d2:8e:f1:e0:07:38:02:00:04:b0:ba:bb:32:
         5c:c8:9e:6d:a3:6d:3a:a4:af:22:9a:28:55:7f:87:cf:e1:12:
         70:18:17:57:d8:1d:05:57:4e:19:24:88:23:11:87:33:4f:34:
         55:e0:d4:84:d6:75:9a:fa:39:78:bd:19:04:67:0e:c0:04:65:
         2d:0a:ab:6a:b2:0f:8d:1f:9a:68:d1:b8:e2:f7:d5:64:c5:bd:
         39:36:3c:f1:f6:96:7a:0b:da:01:d9:c5:53:db:07:e0:7e:d5:
         2b:36:16:80:92:44:07:38:2f:5a:97:83:01:af:77:99:3f:bf:
         a7:2b:2c:3d:f6:a5:75:1f:d9:db:4f:cc:c0:8c:47:e8:ac:dd:
         4d:cb:1f:9e:b3:46:6b:40:a9:3f:a4:38:12:ff:b3:0e:99:f0:
         d8:2b:3c:54:66:29:b3:87:01:ec:60:34:27:1a:7d:42:cb:35:
         ba:9e:54:3e:1d:ef:32:2f:b4:f4:00:80:c8:7b:dc:1c:02:80:
         91:f6:a0:ab:00:aa:24:18:26:50:92:a5:5f:6f:e5:e8:75:e2:
         b1:20:2b:2f:84:51:d3:c1:84:16:78:a0:4d:4d:fe:89:e2:f7:
         fe:f1:01:fd:62:d8:f1:2b:98:e4:56:32:12:e9:4a:2b:cd:51:
         aa:c4:53:f7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEeTsRbn0Mqmjk/qXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzczOWIxZmMtZGI4OS00MjNjLTk0MzctNWUzYjExMDQ4
ODgyMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk
Nzc5YmJhYzctYWQ1Ni00ZGE5LTkxNWQtZDMzOTA5YzM1NTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPUe08KWToAqI2dfoU/YUIg/n1Z9lq3bzEm4
k8SpYcCbmwqsa2zdcPTbJtlnB3Y52XxQG9UV4kh+l2rpqGI9nruBMkFRp4Vs7hGl
y38qWlDjuxdxThd2ecgl8ZtTK9curO6aLEckAYmobi25oHvqmHls27VrxfTVNIVX
Fef6q+Sb+wHqKaRZmID9oB9nSo3K2EJXyWujsUJc0H4I1oALlDhFacxd7K0MuYyz
zJOWWcWeOxdo9UW48UeGTeZQf4U1hfqeALwbC2tkur9S8EKSwbjFo3NfW+Qg8fYH
+0Rvox1F3k4NW6sIh5VuAZonzu5KZQb8WRkwHrz+5ddrPsdnoQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFApnkE04RE3D4V6ri881DouKAfe7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNzM5
YjFmYy1kYjg5LTQyM2MtOTQzNy01ZTNiMTEwNDg4ODIvNzVmMGFiYWYtNzAyNi0z
ZDc3LWE1MGQtYzViY2RmNTVlNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzczOWIxZmMtZGI4OS00MjNjLTk0
MzctNWUzYjExMDQ4ODgyL2M3MzliMWZjLWRiODktNDIzYy05NDM3LTVlM2IxMTA0
ODg4Mi5jcmwwHwYDVR0jBBgwFoAU3CEl0EmMyvfM4tBOcjAjLsgDr04wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNzM5YjFmYy1kYjg5LTQyM2MtOTQzNy01ZTNi
MTEwNDg4ODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7MQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWmsvkRLSjvHgBzgCAASwursyXMiebaNtOqSvIpooVX+Hz+EScBgX
V9gdBVdOGSSIIxGHM080VeDUhNZ1mvo5eL0ZBGcOwARlLQqrarIPjR+aaNG44vfV
ZMW9OTY88faWegvaAdnFU9sH4H7VKzYWgJJEBzgvWpeDAa93mT+/pyssPfaldR/Z
20/MwIxH6KzdTcsfnrNGa0CpP6Q4Ev+zDpnw2Cs8VGYps4cB7GA0Jxp9Qss1up5U
Ph3vMi+09ACAyHvcHAKAkfagqwCqJBgmUJKlX2/l6HXisSArL4RR08GEFnigTU3+
ieL3/vEB/WLY8SuY5FYyEulKK81RqsRT9w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org