Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/41832bf5-bf69-392b-a1d5-6d179dc4e0fa.roa
File:                     41832bf5-bf69-392b-a1d5-6d179dc4e0fa.roa (raw, json)
Hash identifier:          gnwgtvAKPoqby05MBXbhNF2YWY9hUvi3a3mz2w9k7FM=
Subject key identifier:   0D:24:06:29:65:96:F2:84:1B:8D:A7:76:FB:21:FF:66:49:ED:70:F4
Certificate issuer:       /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial:       010D0C9F43285845480813FA0CDFFDA7DEA2E600
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/41832bf5-bf69-392b-a1d5-6d179dc4e0fa.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     400597
IP address blocks:        2602:fb1b:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:13:fa:0c:df:fd:a7:de:a2:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=f7275a40-9120-42a0-9763-a6cc478fd0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ba:22:60:86:c9:5c:7a:93:ed:2c:f9:a2:af:
                    34:79:f9:4d:c3:50:56:6e:a8:69:2d:a5:5b:26:ca:
                    76:39:86:4a:03:9e:cd:74:b4:2b:ab:1d:1d:5e:14:
                    cc:8c:15:74:bb:9b:3f:5f:9f:ef:79:73:c3:89:ea:
                    77:4d:07:bc:b3:5a:4c:1f:db:b4:0d:c4:67:f1:57:
                    39:5c:7c:44:ff:3b:2d:43:e0:8c:8b:ca:b5:ef:5c:
                    8b:ca:70:e7:e6:a5:aa:a3:c6:9a:54:9a:85:63:4a:
                    76:5e:0b:4c:35:1d:f6:ad:b1:79:8a:51:d0:e2:b1:
                    82:db:28:8e:86:c4:3d:43:3f:8e:4e:26:45:0e:77:
                    5a:e4:62:7a:15:59:28:a1:d6:0e:06:45:eb:fd:08:
                    25:38:15:88:be:35:47:34:bb:43:08:cb:0f:47:ce:
                    96:98:02:30:04:65:59:29:3b:b3:b8:d4:8d:a6:7a:
                    09:06:18:16:92:d3:56:f7:87:60:cf:38:0a:eb:e4:
                    a6:08:71:5a:04:74:25:69:10:70:0b:54:e6:06:09:
                    8e:d2:b0:d2:99:4e:65:50:81:d7:b4:5f:50:d3:71:
                    86:92:fc:7e:3c:13:ad:a9:23:b6:2b:01:ed:4b:74:
                    f3:c0:0a:12:db:20:69:c6:3f:b9:18:80:25:24:bd:
                    6f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:24:06:29:65:96:F2:84:1B:8D:A7:76:FB:21:FF:66:49:ED:70:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/41832bf5-bf69-392b-a1d5-6d179dc4e0fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb1b:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:9a:4a:72:9b:bc:2c:6c:b4:c5:45:bf:3a:8e:a7:87:ea:21:
         c3:a5:02:75:37:c9:a0:f5:70:72:61:c8:a3:13:94:9b:77:68:
         93:ea:f3:5e:5a:4d:c9:46:78:4e:19:1d:fd:a9:3e:83:08:da:
         1b:08:6a:18:fa:d3:9f:43:cf:ab:fc:f0:63:84:e5:33:3c:0b:
         5a:a8:7c:15:0d:6e:17:1e:ed:04:6f:98:a7:4a:f5:d7:86:f4:
         d2:5f:8f:57:79:7d:59:de:8e:33:12:3a:1f:87:4c:57:20:cb:
         c4:a7:79:d2:ce:b4:62:b8:5f:41:58:02:0a:e7:85:00:9f:ea:
         41:b6:14:9f:67:b4:fe:86:05:e9:bc:83:03:df:21:70:85:e1:
         d2:5c:ba:21:5f:f9:5c:46:f9:bc:c6:f5:ae:c2:7a:99:ab:d0:
         41:56:61:43:ac:51:f2:d0:fc:39:7c:c5:56:d1:85:e7:62:de:
         cb:8b:25:b0:0b:01:b6:41:f2:fd:51:5d:ab:1f:42:15:80:80:
         8f:2b:7f:52:75:67:b1:4d:f2:fd:7a:fe:8b:52:c7:1e:c9:cc:
         2f:20:d9:08:27:b7:ce:3f:51:51:06:f0:57:9f:b9:32:c7:ae:
         91:66:67:72:a2:c0:82:9c:d8:fe:2d:a1:94:25:26:fd:2b:e6:
         fb:d8:d9:15
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVICBP6DN/9p96i5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODExYmQyYWMtYzUzZC00MGE2LWJmYTQtMjc1YzIyNDFh
ZjYzMB4XDTI0MDMyMTEzMDAzM1oXDTI0MDYxOTEzMDAzM1owLzEtMCsGA1UEAxMk
ZjcyNzVhNDAtOTEyMC00MmEwLTk3NjMtYTZjYzQ3OGZkMGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiboiYIbJXHqT7Sz5oq80eflNw1BWbqhpLaVb
Jsp2OYZKA57NdLQrqx0dXhTMjBV0u5s/X5/veXPDiep3TQe8s1pMH9u0DcRn8Vc5
XHxE/zstQ+CMi8q171yLynDn5qWqo8aaVJqFY0p2XgtMNR32rbF5ilHQ4rGC2yiO
hsQ9Qz+OTiZFDnda5GJ6FVkoodYOBkXr/QglOBWIvjVHNLtDCMsPR86WmAIwBGVZ
KTuzuNSNpnoJBhgWktNW94dgzzgK6+SmCHFaBHQlaRBwC1TmBgmO0rDSmU5lUIHX
tF9Q03GGkvx+PBOtqSO2KwHtS3TzwAoS2yBpxj+5GIAlJL1vQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA0kBilllvKEG42ndvsh/2ZJ7XD0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFi
ZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0MWFmNjMvNDE4MzJiZjUtYmY2OS0z
OTJiLWExZDUtNmQxNzlkYzRlMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODExYmQyYWMtYzUzZC00MGE2LWJm
YTQtMjc1YzIyNDFhZjYzLzgxMWJkMmFjLWM1M2QtNDBhNi1iZmE0LTI3NWMyMjQx
YWY2My5jcmwwHwYDVR0jBBgwFoAUL6VyaMN3iHmP21Xe0bvHxqiGXYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVj
MjI0MWFmNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7GwAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACaaSnKbvCxstMVFvzqOp4fqIcOlAnU3yaD1cHJhyKMTlJt3aJPq
815aTclGeE4ZHf2pPoMI2hsIahj6059Dz6v88GOE5TM8C1qofBUNbhce7QRvmKdK
9deG9NJfj1d5fVnejjMSOh+HTFcgy8SnedLOtGK4X0FYAgrnhQCf6kG2FJ9ntP6G
Bem8gwPfIXCF4dJcuiFf+VxG+bzG9a7Cepmr0EFWYUOsUfLQ/Dl8xVbRhedi3suL
JbALAbZB8v1RXasfQhWAgI8rf1J1Z7FN8v16/otSxx7JzC8g2Qgnt84/UVEG8Fef
uTLHrpFmZ3KiwIKc2P4toZQlJv0r5vvY2RU=
-----END CERTIFICATE-----
Generated at Fri May 10 03:02:18 2024 by rpki-client on console-ams.rpki-client.org