Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2a220a55-1cb7-31df-a588-4923f4577b36.roa
File:                     2a220a55-1cb7-31df-a588-4923f4577b36.roa (raw, json)
Hash identifier:          quma7WXdDah3ulChAkgX7RVABBPFhcmqYRBNJjy8k1Y=
Subject key identifier:   E0:B0:48:4F:53:44:B0:C1:D1:BE:4D:00:E3:C2:F4:6A:97:00:FF:6C
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F43285847C8D9CF9927E7D64271D30880
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2a220a55-1cb7-31df-a588-4923f4577b36.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     31786
IP address blocks:        2602:fb54:146::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:cf:99:27:e7:d6:42:71:d3:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=d852b4fd-f368-48bd-a965-1132d75bff31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0c:3b:e6:60:c9:da:92:1a:d3:76:bb:dd:d0:
                    68:78:d6:65:46:2f:85:57:8d:a4:54:d9:e5:ec:c9:
                    22:6f:99:d5:92:21:ee:d2:58:d8:b3:0c:14:cf:1c:
                    5c:47:06:ce:de:52:39:38:f1:9a:62:dd:10:46:15:
                    9f:0e:25:1e:b5:dc:a1:c8:0c:54:96:86:ca:5f:d9:
                    ef:a3:b0:b7:8c:8d:61:99:67:fd:93:22:72:59:68:
                    e5:95:90:d4:13:6a:f2:b1:a7:6a:b7:ff:56:c4:19:
                    d4:41:74:c9:72:4c:b5:1b:1a:fe:80:e2:8e:32:d2:
                    ef:95:11:a3:c0:5c:42:4b:94:ed:c3:82:ea:a1:39:
                    d2:ac:e9:bc:1c:d3:07:4c:a0:bf:41:75:2b:65:86:
                    e0:8e:8b:61:71:fe:ab:54:ac:bf:68:fc:91:49:65:
                    8b:77:db:7d:89:8c:3b:89:9d:6d:7f:03:e3:a9:03:
                    04:17:3e:e7:05:32:90:a3:12:53:6d:45:48:1d:4e:
                    d7:19:d4:e2:65:17:53:07:ce:27:4f:a7:3a:eb:e4:
                    3d:2d:c8:7a:06:20:04:70:3c:65:bf:4b:de:74:4e:
                    0b:e0:d6:d1:8d:d5:29:3a:0f:9a:f4:4c:a5:70:16:
                    bc:04:6f:68:8e:4a:23:00:7b:74:9d:7c:7a:4c:a7:
                    06:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B0:48:4F:53:44:B0:C1:D1:BE:4D:00:E3:C2:F4:6A:97:00:FF:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2a220a55-1cb7-31df-a588-4923f4577b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:146::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:35:e4:c3:7e:e6:5d:57:56:fd:0f:ce:07:e1:ac:b2:2a:03:
         ec:32:86:cd:f6:bd:cc:c2:90:f8:7e:4f:33:d8:12:c3:4a:1f:
         bc:c2:6c:f8:fd:94:c6:ee:74:45:7e:06:3d:d8:b0:9f:f7:9e:
         84:e0:27:6f:f2:a9:5f:fb:ef:08:1d:6d:9d:52:fd:0c:78:26:
         13:bd:b1:c5:e6:60:83:1c:24:0f:95:e8:b1:62:2c:28:21:52:
         bf:ea:f5:9a:61:f8:0b:af:1b:02:8a:7e:f9:42:9f:5a:c5:5b:
         27:47:c0:d2:18:81:61:00:d9:4c:f0:6c:e8:f1:9f:49:df:30:
         7a:ed:70:20:ed:7e:8a:5a:57:3e:6c:a3:5a:a5:f0:84:9e:0b:
         31:48:83:93:13:e0:eb:8c:50:72:59:81:df:cb:5a:d2:5e:78:
         84:ab:05:f6:2f:84:23:45:cb:45:c1:b9:28:3a:a3:d4:c2:52:
         b3:a7:5f:b4:38:07:63:d9:98:da:84:12:7f:60:fc:99:81:37:
         55:70:af:ae:85:7b:9c:be:ac:3e:7f:11:3b:6f:16:dc:78:86:
         66:00:bf:9e:2b:e7:cf:36:8c:7d:d4:61:53:0e:e2:18:2d:38:
         95:16:00:4d:8d:e3:7b:90:b9:ba:b3:5f:06:40:14:d4:2f:f0:
         95:21:e6:54
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfI2c+ZJ+fWQnHTCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc3OThhYmItNzExZC00ZjEwLWJjNDYtYmNlZWQwNTVl
MWZhMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk
ZDg1MmI0ZmQtZjM2OC00OGJkLWE5NjUtMTEzMmQ3NWJmZjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQw75mDJ2pIa03a73dBoeNZlRi+FV42kVNnl
7Mkib5nVkiHu0ljYswwUzxxcRwbO3lI5OPGaYt0QRhWfDiUetdyhyAxUlobKX9nv
o7C3jI1hmWf9kyJyWWjllZDUE2rysadqt/9WxBnUQXTJcky1Gxr+gOKOMtLvlRGj
wFxCS5Ttw4LqoTnSrOm8HNMHTKC/QXUrZYbgjothcf6rVKy/aPyRSWWLd9t9iYw7
iZ1tfwPjqQMEFz7nBTKQoxJTbUVIHU7XGdTiZRdTB84nT6c66+Q9Lch6BiAEcDxl
v0vedE4L4NbRjdUpOg+a9EylcBa8BG9ojkojAHt0nXx6TKcGNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOCwSE9TRLDB0b5NAOPC9GqXAP9sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5
OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2VlZDA1NWUxZmEvMmEyMjBhNTUtMWNiNy0z
MWRmLWE1ODgtNDkyM2Y0NTc3YjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc3OThhYmItNzExZC00ZjEwLWJj
NDYtYmNlZWQwNTVlMWZhL2Y3Nzk4YWJiLTcxMWQtNGYxMC1iYzQ2LWJjZWVkMDU1
ZTFmYS5jcmwwHwYDVR0jBBgwFoAUzJA916o5BeznNQisy0X0bmW8HeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2Vl
ZDA1NWUxZmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7VAFG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFY15MN+5l1XVv0PzgfhrLIqA+wyhs32vczCkPh+TzPYEsNKH7zC
bPj9lMbudEV+Bj3YsJ/3noTgJ2/yqV/77wgdbZ1S/Qx4JhO9scXmYIMcJA+V6LFi
LCghUr/q9Zph+AuvGwKKfvlCn1rFWydHwNIYgWEA2UzwbOjxn0nfMHrtcCDtfopa
Vz5so1ql8ISeCzFIg5MT4OuMUHJZgd/LWtJeeISrBfYvhCNFy0XBuSg6o9TCUrOn
X7Q4B2PZmNqEEn9g/JmBN1Vwr66Fe5y+rD5/ETtvFtx4hmYAv54r5882jH3UYVMO
4hgtOJUWAE2N43uQubqzXwZAFNQv8JUh5lQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:22 2024 by rpki-client on console-ams.rpki-client.org