Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa
File:                     cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa (raw, json)
Hash identifier:          XMxoZZKaDydc65vcgc15/fZLSwwaZKz6pqGXr71b9O4=
Subject key identifier:   01:F1:BA:BE:CA:E8:25:54:93:B4:7A:75:EC:CA:07:71:8B:54:E3:E5
Certificate issuer:       /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
Certificate serial:       010D0C9F4328584518B046108E6B6BB033B05000
Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa
Signing time:             Mon 04 Mar 2024 14:00:33 +0000
ROA not before:           Mon 04 Mar 2024 14:00:33 +0000
ROA not after:            Sun 02 Jun 2024 13:00:33 +0000
asID:                     32604
IP address blocks:        2602:fa9c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:b0:46:10:8e:6b:6b:b0:33:b0:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
        Validity
            Not Before: Mar  4 14:00:33 2024 GMT
            Not After : Jun  2 13:00:33 2024 GMT
        Subject: CN=5b7581d4-56d7-40e5-917b-d03bbe03b1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0e:cf:92:26:76:c1:2c:0d:7e:ca:41:6e:f3:
                    0b:e8:71:ba:b9:7e:dc:52:2b:b0:7f:0f:f1:cf:e1:
                    25:2f:de:2c:ba:0f:13:c1:e3:46:5a:dc:37:a8:48:
                    a7:8f:f6:cd:a6:fb:43:35:c9:ab:3e:d3:e6:c8:c8:
                    ff:4e:a6:69:ac:64:41:94:49:0a:90:a8:3e:8c:b0:
                    b3:0b:d4:fc:53:c9:d3:b6:ad:93:eb:d5:a8:5c:e8:
                    c8:3e:b2:c7:80:f6:90:f3:c4:73:0e:25:4f:1c:7d:
                    78:e4:ce:ca:40:86:b6:4a:09:5b:ba:ee:d4:98:b4:
                    b1:0a:7b:03:0b:de:54:6a:dd:86:d7:2e:57:f0:bf:
                    00:f2:72:eb:2c:c6:93:2f:4d:1b:a5:3c:e3:45:ae:
                    64:56:00:b8:98:11:63:db:b2:8e:95:f0:06:75:1d:
                    f0:6c:49:3e:9b:87:45:53:0a:8a:43:f4:20:b5:c8:
                    ee:5f:5b:f8:7d:5c:50:fb:fd:b5:24:d7:4e:61:63:
                    aa:68:72:07:3d:ea:54:7b:a7:2f:94:95:0f:00:ed:
                    30:ba:f0:b8:72:4f:e6:66:88:28:3a:5b:24:41:22:
                    d1:27:f3:2d:8b:b2:3a:e3:2c:76:97:76:b4:08:e1:
                    00:66:2d:38:4f:d9:2b:24:de:da:1b:1b:21:92:b7:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F1:BA:BE:CA:E8:25:54:93:B4:7A:75:EC:CA:07:71:8B:54:E3:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl

            X509v3 Authority Key Identifier:
                keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:8d:ef:b8:3b:a4:03:a9:04:fe:84:0c:91:b5:f6:b1:e1:66:
         8e:f0:10:11:62:ab:43:19:86:16:c6:86:96:3a:35:c7:33:02:
         3c:7a:36:a8:47:4b:4c:b0:49:72:9c:3d:64:95:36:f6:80:37:
         7e:0f:b7:be:3e:08:a3:a3:dc:98:f7:78:a0:60:4e:b6:d9:d9:
         0a:c9:2b:e3:4b:40:ff:15:25:4c:15:c2:49:ca:4f:28:63:c0:
         c2:09:15:b3:d2:24:e0:c4:bc:db:a8:3d:f2:3b:cd:48:6b:66:
         3e:94:7b:75:6d:0a:c7:9a:25:1d:c5:05:1a:37:91:22:2b:d9:
         c4:b6:84:06:93:7a:62:8c:5f:78:ec:88:b5:d7:6f:55:6e:2c:
         ad:96:17:a2:28:70:22:ee:6c:a1:b8:41:1e:ef:fe:38:c2:0b:
         6a:d3:21:da:5b:b8:e6:6c:f5:3f:1f:8a:0e:9a:f8:7d:70:5f:
         d5:f1:89:60:3c:76:4e:c9:9a:2a:84:da:52:ed:7c:b1:cb:ba:
         4b:12:0a:b1:a0:a2:ba:0d:93:15:16:92:7e:26:d4:47:fe:5b:
         a7:49:6a:6a:a9:c8:81:0b:49:80:43:df:bd:4f:72:ac:54:8a:
         32:be:ce:a8:4a:28:fc:08:ef:ba:21:40:11:90:d4:7a:65:53:
         c0:42:ac:a4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUYsEYQjmtrsDOwUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ5MzgxYTMtOWM2Zi00N2Q2LTljNTItOWZhMDdkMmJm
MTg4MB4XDTI0MDMwNDE0MDAzM1oXDTI0MDYwMjEzMDAzM1owLzEtMCsGA1UEAxMk
NWI3NTgxZDQtNTZkNy00MGU1LTkxN2ItZDAzYmJlMDNiMWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww7PkiZ2wSwNfspBbvML6HG6uX7cUiuwfw/x
z+ElL94sug8TweNGWtw3qEinj/bNpvtDNcmrPtPmyMj/TqZprGRBlEkKkKg+jLCz
C9T8U8nTtq2T69WoXOjIPrLHgPaQ88RzDiVPHH145M7KQIa2Sglbuu7UmLSxCnsD
C95Uat2G1y5X8L8A8nLrLMaTL00bpTzjRa5kVgC4mBFj27KOlfAGdR3wbEk+m4dF
UwqKQ/QgtcjuX1v4fVxQ+/21JNdOYWOqaHIHPepUe6cvlJUPAO0wuvC4ck/mZogo
OlskQSLRJ/Mti7I64yx2l3a0COEAZi04T9krJN7aGxshkrd2NQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAHxur7K6CVUk7R6dezKB3GLVOPlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkz
ODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEwN2QyYmYxODgvY2IyYWJmNjktMWRlNC0z
NGYwLTliZGEtNGY2NjIzNTBkYzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTQ5MzgxYTMtOWM2Zi00N2Q2LTlj
NTItOWZhMDdkMmJmMTg4L2E0OTM4MWEzLTljNmYtNDdkNi05YzUyLTlmYTA3ZDJi
ZjE4OC5jcmwwHwYDVR0jBBgwFoAUYlJh53P6ANsVeqjVvHpystSAfMswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkzODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEw
N2QyYmYxODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6nAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFiN77g7pAOpBP6EDJG19rHhZo7wEBFiq0MZhhbGhpY6NcczAjx6
NqhHS0ywSXKcPWSVNvaAN34Pt74+CKOj3Jj3eKBgTrbZ2QrJK+NLQP8VJUwVwknK
TyhjwMIJFbPSJODEvNuoPfI7zUhrZj6Ue3VtCseaJR3FBRo3kSIr2cS2hAaTemKM
X3jsiLXXb1VuLK2WF6IocCLubKG4QR7v/jjCC2rTIdpbuOZs9T8fig6a+H1wX9Xx
iWA8dk7JmiqE2lLtfLHLuksSCrGgoroNkxUWkn4m1Ef+W6dJamqpyIELSYBD371P
cqxUijK+zqhKKPwI77ohQBGQ1HplU8BCrKQ=
-----END CERTIFICATE-----
Generated at Sun May 12 00:42:12 2024 by rpki-client on console-fra.rpki-client.org