Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/472da24f-3022-3399-a161-89f2d647c5b1.roa
File:                     472da24f-3022-3399-a161-89f2d647c5b1.roa (raw, json)
Hash identifier:          XbspUNEmRZaa1UlW3m7dxehf2/2bZ2PxOVAeD2sQwMM=
Subject key identifier:   1E:5E:DC:98:19:23:16:27:2D:8E:86:D4:19:D5:05:BA:9E:56:CA:F8
Certificate issuer:       /CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
Certificate serial:       010D0C9F4328584571E86E282C425D84199FD980
Authority key identifier: 4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/472da24f-3022-3399-a161-89f2d647c5b1.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     63452
IP address blocks:        2602:ff50:200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:6e:28:2c:42:5d:84:19:9f:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=16b65ece-3c4a-48b4-806e-b4d97631ca05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:ee:a7:07:ea:48:e7:2d:42:bf:d9:e6:a3:
                    20:11:34:42:6a:d0:0d:cb:f8:20:06:b8:98:bf:0c:
                    d4:98:7a:5e:08:86:ea:cd:66:19:82:13:ac:ae:1e:
                    8f:be:b6:74:91:96:49:f4:1d:6c:82:dd:34:fa:c4:
                    fc:dd:7b:ce:80:ee:a3:c6:c9:c4:10:8a:86:fa:71:
                    8b:99:a2:20:a5:24:03:4f:77:8b:55:6b:bf:fe:74:
                    5f:5c:39:a3:93:57:a0:9b:c6:68:3d:5b:12:98:b4:
                    dd:83:c8:d6:c6:d4:24:bb:a4:ac:f8:27:a1:7e:e6:
                    71:43:62:c0:b3:96:f8:94:c0:64:62:48:0f:1b:90:
                    d1:ac:74:37:a6:1e:f5:be:18:0e:e0:db:a7:0a:97:
                    c4:93:af:9b:45:92:77:9f:f7:91:21:2d:a5:c1:e3:
                    51:50:60:7e:b2:54:10:1d:a5:f2:0a:f7:88:f6:de:
                    38:fd:46:52:25:d1:1d:3c:a8:34:60:69:8f:02:90:
                    45:d6:9e:4b:02:ea:ca:22:c8:db:cb:63:05:94:9b:
                    ed:75:a0:a7:c2:5f:1d:83:60:52:cb:ac:86:7a:d9:
                    58:e6:61:36:5d:93:a2:76:f3:de:99:da:de:8e:7d:
                    2d:58:a6:ac:77:fe:bc:55:33:55:f9:e0:de:d3:83:
                    e2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5E:DC:98:19:23:16:27:2D:8E:86:D4:19:D5:05:BA:9E:56:CA:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/472da24f-3022-3399-a161-89f2d647c5b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl

            X509v3 Authority Key Identifier:
                keyid:4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff50:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:19:b7:4d:c4:ac:2f:ab:aa:f9:89:7c:ea:0c:86:62:e8:49:
         4d:5a:8e:ba:28:4c:73:f5:4c:72:cf:78:53:14:8d:1b:2f:b4:
         9e:fd:de:64:83:00:4a:d2:40:49:be:0b:97:6e:7f:4e:ba:ce:
         19:9c:a6:e6:38:21:05:ce:35:98:16:0a:19:24:2a:a2:52:df:
         a6:eb:b9:58:4c:13:1e:65:5d:24:15:d1:87:dd:20:7e:53:d0:
         c0:ad:9d:41:31:d8:86:7b:11:df:84:7e:6b:e5:d4:a8:d6:d1:
         c0:e8:58:93:01:08:1f:9f:96:d2:b8:9d:da:70:5f:5d:43:69:
         2b:1b:6c:66:5b:2d:8d:23:e2:b8:80:99:10:b4:63:4e:a6:2a:
         61:87:7e:02:da:83:8e:d1:a4:91:7b:f2:53:d1:5e:ea:97:a6:
         0d:87:e6:40:bc:9a:85:e8:bd:cf:55:ff:40:bb:6d:e6:a3:98:
         b4:21:f7:32:d1:80:72:f9:47:13:44:0c:eb:00:3d:54:ba:d6:
         76:87:dc:b9:17:6d:7c:3b:3b:02:d6:6c:d7:87:92:cd:1b:95:
         cd:8a:96:52:ea:c2:2d:84:e3:98:18:1d:bf:99:ad:8a:20:86:
         ff:a7:80:13:8c:c7:d1:09:33:0e:c3:80:cc:7a:c5:e7:00:36:
         16:95:4b:94
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVx6G4oLEJdhBmf2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VmOGQzMjAtYzJiNC00NzE4LWJlOWMtZWMzZjgwMWMw
ODE4MB4XDTI0MDQwNTEzMDAzM1oXDTI0MDcwNDEzMDAzM1owLzEtMCsGA1UEAxMk
MTZiNjVlY2UtM2M0YS00OGI0LTgwNmUtYjRkOTc2MzFjYTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVDupwfqSOctQr/Z5qMgETRCatANy/ggBriY
vwzUmHpeCIbqzWYZghOsrh6PvrZ0kZZJ9B1sgt00+sT83XvOgO6jxsnEEIqG+nGL
maIgpSQDT3eLVWu//nRfXDmjk1egm8ZoPVsSmLTdg8jWxtQku6Ss+CehfuZxQ2LA
s5b4lMBkYkgPG5DRrHQ3ph71vhgO4NunCpfEk6+bRZJ3n/eRIS2lweNRUGB+slQQ
HaXyCveI9t44/UZSJdEdPKg0YGmPApBF1p5LAurKIsjby2MFlJvtdaCnwl8dg2BS
y6yGetlY5mE2XZOidvPemdrejn0tWKasd/68VTNV+eDe04PikQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB5e3JgZIxYnLY6G1BnVBbqeVsr4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZWY4
ZDMyMC1jMmI0LTQ3MTgtYmU5Yy1lYzNmODAxYzA4MTgvNDcyZGEyNGYtMzAyMi0z
Mzk5LWExNjEtODlmMmQ2NDdjNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2VmOGQzMjAtYzJiNC00NzE4LWJl
OWMtZWMzZjgwMWMwODE4L2NlZjhkMzIwLWMyYjQtNDcxOC1iZTljLWVjM2Y4MDFj
MDgxOC5jcmwwHwYDVR0jBBgwFoAUTiXbhrEvEqYZ1KQB1V/ykpZSQ+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZWY4ZDMyMC1jMmI0LTQ3MTgtYmU5Yy1lYzNm
ODAxYzA4MTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL/UAIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJoZt03ErC+rqvmJfOoMhmLoSU1ajrooTHP1THLPeFMUjRsvtJ79
3mSDAErSQEm+C5duf066zhmcpuY4IQXONZgWChkkKqJS36bruVhMEx5lXSQV0Yfd
IH5T0MCtnUEx2IZ7Ed+Efmvl1KjW0cDoWJMBCB+fltK4ndpwX11DaSsbbGZbLY0j
4riAmRC0Y06mKmGHfgLag47RpJF78lPRXuqXpg2H5kC8moXovc9V/0C7beajmLQh
9zLRgHL5RxNEDOsAPVS61naH3LkXbXw7OwLWbNeHks0blc2KllLqwi2E45gYHb+Z
rYoghv+ngBOMx9EJMw7DgMx6xecANhaVS5Q=
-----END CERTIFICATE-----
Generated at Sat May 11 15:30:50 2024 by rpki-client on console-fra.rpki-client.org