Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/d6d07e8f-2d94-3390-a310-5c649e309887.roa
File:                     d6d07e8f-2d94-3390-a310-5c649e309887.roa (raw, json)
Hash identifier:          7Cok9chPCRzTHMtXApqSqqTxMw6mlMV6ZqenDhBF8gM=
Subject key identifier:   A5:DD:1F:E0:34:41:98:31:3C:E0:FA:C4:26:F1:F1:03:7F:CF:26:30
Certificate issuer:       /CN=3f67eb88-a5d4-466c-9bba-adafc57cf4e6
Certificate serial:       010D0C9F432858474C80BC21F4FF68FDEC58D880
Authority key identifier: BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/d6d07e8f-2d94-3390-a310-5c649e309887.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     399568
IP address blocks:        2602:fc6f::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:bc:21:f4:ff:68:fd:ec:58:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f67eb88-a5d4-466c-9bba-adafc57cf4e6
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=ca65b88d-72e2-48cb-803c-915c5a19dd02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:23:11:dc:aa:cf:6c:29:b1:b9:74:1a:bf:
                    55:87:c1:40:bf:d4:da:0e:58:ed:35:4e:c0:fa:d6:
                    69:68:13:4f:42:fa:c3:b3:42:97:7a:14:17:e6:21:
                    e5:2a:20:18:16:b5:df:26:7d:dc:26:4e:75:a0:cd:
                    f0:79:8d:06:91:20:7e:9c:d3:7b:93:18:eb:f0:fe:
                    b8:b1:0e:7f:7c:1f:1c:04:79:ab:ca:71:c4:9e:40:
                    9b:4e:7c:e5:11:52:5b:cd:bd:dc:48:6e:31:68:58:
                    0b:da:0b:cc:41:62:d6:ea:a6:66:6d:a0:94:3d:a3:
                    7f:a8:a3:10:9a:44:72:20:ff:e1:5c:97:27:1a:8b:
                    95:85:90:6c:45:ba:77:19:d5:c8:db:16:1c:a0:1e:
                    07:be:6c:5d:f3:b0:7d:08:f3:a5:0d:54:1e:82:32:
                    8f:34:5d:83:7a:5d:11:06:af:13:c3:10:f3:9c:93:
                    e9:69:ae:35:56:74:ef:d6:99:69:08:8f:bd:f5:67:
                    7f:04:91:be:2d:ec:62:19:50:bb:c4:ce:32:67:81:
                    b8:c1:dd:01:bb:2b:53:41:3e:3c:50:f7:67:02:e6:
                    72:21:98:41:f7:6c:2e:a9:72:48:32:ad:dc:e8:d1:
                    18:02:98:3a:33:bf:99:3d:81:70:42:6e:4f:2d:f6:
                    71:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DD:1F:E0:34:41:98:31:3C:E0:FA:C4:26:F1:F1:03:7F:CF:26:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/d6d07e8f-2d94-3390-a310-5c649e309887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.crl

            X509v3 Authority Key Identifier:
                keyid:BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc6f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:0b:86:47:e2:66:aa:48:5c:22:bb:99:c9:0d:ae:98:6b:54:
         aa:e5:74:06:bb:51:c3:d1:00:01:8f:9c:b9:56:ab:a9:eb:9a:
         1c:43:cd:42:6e:ff:18:be:99:c5:0c:b4:e1:3b:fd:2e:43:e2:
         b3:e8:80:48:43:1c:08:49:b8:71:5b:72:5a:cb:62:87:4e:dc:
         7b:b4:3b:e6:77:ff:80:a4:e5:93:15:f3:16:42:50:a2:f8:be:
         d5:50:0e:c9:6d:1f:e9:1d:89:44:e4:6c:94:ab:84:49:ab:e9:
         34:cf:f5:5e:9d:d3:e3:b4:4b:26:a1:8e:70:c5:2a:b3:02:d0:
         ad:c5:fd:d8:06:77:9b:e2:c7:2f:f0:49:01:95:a2:e0:f4:7d:
         e7:b4:78:87:fe:3d:0f:b3:3b:22:8b:46:57:e0:a5:54:2c:2c:
         84:b4:ed:44:96:6a:62:08:9b:95:f5:ac:b1:88:6d:b8:56:56:
         45:2c:f7:6b:9f:92:06:82:1d:9a:79:52:20:fc:eb:a1:52:76:
         50:0e:20:60:82:c3:35:5b:93:66:4d:1c:33:0d:c3:b5:e3:e2:
         12:6c:84:63:f8:97:14:7b:68:96:ea:1a:95:a7:4b:c7:83:9b:
         88:f6:82:e8:62:5d:55:dc:46:6d:2f:93:49:4c:8a:e2:e2:a2:
         f0:d4:6a:8c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEdMgLwh9P9o/exY2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2N2ViODgtYTVkNC00NjZjLTliYmEtYWRhZmM1N2Nm
NGU2MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk
Y2E2NWI4OGQtNzJlMi00OGNiLTgwM2MtOTE1YzVhMTlkZDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE8jEdyqz2wpsbl0Gr9Vh8FAv9TaDljtNU7A
+tZpaBNPQvrDs0KXehQX5iHlKiAYFrXfJn3cJk51oM3weY0GkSB+nNN7kxjr8P64
sQ5/fB8cBHmrynHEnkCbTnzlEVJbzb3cSG4xaFgL2gvMQWLW6qZmbaCUPaN/qKMQ
mkRyIP/hXJcnGouVhZBsRbp3GdXI2xYcoB4Hvmxd87B9CPOlDVQegjKPNF2Del0R
Bq8TwxDznJPpaa41VnTv1plpCI+99Wd/BJG+LexiGVC7xM4yZ4G4wd0BuytTQT48
UPdnAuZyIZhB92wuqXJIMq3c6NEYApg6M7+ZPYFwQm5PLfZxJQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKXdH+A0QZgxPOD6xCbx8QN/zyYwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZjY3
ZWI4OC1hNWQ0LTQ2NmMtOWJiYS1hZGFmYzU3Y2Y0ZTYvZDZkMDdlOGYtMmQ5NC0z
MzkwLWEzMTAtNWM2NDllMzA5ODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Y2N2ViODgtYTVkNC00NjZjLTli
YmEtYWRhZmM1N2NmNGU2LzNmNjdlYjg4LWE1ZDQtNDY2Yy05YmJhLWFkYWZjNTdj
ZjRlNi5jcmwwHwYDVR0jBBgwFoAUvQ3+qPK8oByiNeKKyKZXSsLFNlswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZjY3ZWI4OC1hNWQ0LTQ2NmMtOWJiYS1hZGFm
YzU3Y2Y0ZTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8bwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAeQuGR+JmqkhcIruZyQ2umGtUquV0BrtRw9EAAY+cuVarqeuaHEPN
Qm7/GL6ZxQy04Tv9LkPis+iASEMcCEm4cVtyWstih07ce7Q75nf/gKTlkxXzFkJQ
ovi+1VAOyW0f6R2JRORslKuESavpNM/1Xp3T47RLJqGOcMUqswLQrcX92AZ3m+LH
L/BJAZWi4PR957R4h/49D7M7IotGV+ClVCwshLTtRJZqYgiblfWssYhtuFZWRSz3
a5+SBoIdmnlSIPzroVJ2UA4gYILDNVuTZk0cMw3DtePiEmyEY/iXFHtoluoaladL
x4ObiPaC6GJdVdxGbS+TSUyK4uKi8NRqjA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:06:14 2024 by rpki-client on console-fra.rpki-client.org