Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa
File:                     b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa (raw, json)
Hash identifier:          qiSjBtpDqrJ3IqNLy07vBytDfEE3oQ6/8X81DGV9uVk=
Subject key identifier:   E2:4E:0A:04:F1:8D:27:5D:A8:06:4D:AF:C8:5F:22:A3:DF:CB:F4:EE
Certificate issuer:       /CN=e97da778-a1f6-4dad-9d0a-d3a070010373
Certificate serial:       010D0C9F43285845453D6B625D7281DB30C2CA98
Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     21538
IP address blocks:        2602:fc30:a4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:6b:62:5d:72:81:db:30:c2:ca:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=f00f7ef1-9334-4ce6-84a9-ef493d09bba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:af:78:21:d6:d8:42:c4:c3:78:68:ae:5f:
                    f1:0d:03:a5:37:f7:fd:8b:f0:8b:98:1c:a4:bc:e1:
                    d9:a3:f0:b7:d3:70:55:82:e0:b2:41:eb:66:65:ed:
                    47:f2:b8:61:8b:5f:77:e3:d6:c1:9c:87:68:4c:40:
                    c1:52:e2:eb:c1:ff:8d:7e:03:ee:50:ef:32:39:1c:
                    3f:59:b0:cd:a0:66:9b:d6:1d:0f:4a:1b:4c:5b:55:
                    f4:36:3a:3d:0d:4b:fa:e8:50:39:54:25:5d:20:14:
                    a8:6e:5e:a8:b8:2c:78:34:38:70:d3:e1:22:75:08:
                    f9:c2:ba:e0:37:3f:4d:5d:83:2e:cc:d9:e3:6f:25:
                    ea:bb:79:ba:85:59:9c:a6:70:0b:34:54:35:f8:6f:
                    32:8b:fa:a9:a2:fb:86:28:c4:ee:7b:59:9d:40:d8:
                    88:58:9d:ba:69:8d:f9:2b:f6:0b:96:ee:cd:d7:71:
                    3c:2c:d2:3c:7f:15:74:72:cf:53:b3:19:ec:47:c0:
                    ad:ae:e7:02:2e:d1:2b:84:cd:0b:de:a9:bd:d2:3c:
                    8b:d9:4d:d8:a0:4f:b1:0f:c2:e1:06:dd:76:dc:8a:
                    34:81:12:bc:d9:88:c6:51:0d:89:7e:24:a1:a7:67:
                    31:f6:6c:9a:f1:4d:f4:ac:fc:4c:cb:d1:75:e1:5a:
                    ca:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4E:0A:04:F1:8D:27:5D:A8:06:4D:AF:C8:5F:22:A3:DF:CB:F4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl

            X509v3 Authority Key Identifier:
                keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc30:a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9f:11:b4:6e:1c:ab:34:4f:fa:5b:73:e4:2e:69:6a:a0:9b:
         a3:b7:b5:58:c5:d3:8b:0f:0b:b5:4d:fd:41:e2:d5:24:17:38:
         bb:3e:68:1a:56:d0:c5:42:90:bb:2f:c9:24:dd:9c:42:ac:08:
         a9:20:0f:1e:28:68:9a:9e:98:8c:7c:de:65:e6:aa:4e:13:5e:
         b2:dc:92:c8:b9:56:ab:88:0f:2b:72:04:38:a0:55:23:4e:52:
         8b:e3:f9:8c:d5:20:be:4e:f8:09:7d:56:05:29:4e:15:86:0a:
         03:96:da:41:f8:8a:b5:71:1b:19:2b:5e:0b:34:51:e6:ff:a8:
         cd:40:f7:78:74:08:64:24:34:29:e1:0c:bb:26:98:5e:43:7f:
         38:30:84:f6:cf:ec:8b:1e:ec:ab:5a:03:86:83:f3:5f:d0:81:
         b6:65:28:78:84:2c:30:43:19:e0:4a:2e:53:d0:00:5f:5f:b0:
         bd:5a:68:25:5b:dd:f3:16:87:05:c8:13:68:59:b4:5d:6e:dc:
         72:be:14:9e:83:3a:64:ac:6f:78:ca:8e:5e:e9:4a:ca:49:69:
         e0:a6:42:5d:0e:5e:e5:98:32:0a:b6:f2:ec:92:51:2b:78:17:
         44:95:9e:ff:1d:ca:bd:eb:a4:8f:44:14:a8:75:b0:34:5d:fb:
         f3:d0:5b:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVFPWtiXXKB2zDCypgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk3ZGE3NzgtYTFmNi00ZGFkLTlkMGEtZDNhMDcwMDEw
MzczMB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
ZjAwZjdlZjEtOTMzNC00Y2U2LTg0YTktZWY0OTNkMDliYmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd2veCHW2ELEw3horl/xDQOlN/f9i/CLmByk
vOHZo/C303BVguCyQetmZe1H8rhhi19349bBnIdoTEDBUuLrwf+NfgPuUO8yORw/
WbDNoGab1h0PShtMW1X0Njo9DUv66FA5VCVdIBSobl6ouCx4NDhw0+EidQj5wrrg
Nz9NXYMuzNnjbyXqu3m6hVmcpnALNFQ1+G8yi/qpovuGKMTue1mdQNiIWJ26aY35
K/YLlu7N13E8LNI8fxV0cs9TsxnsR8CtrucCLtErhM0L3qm90jyL2U3YoE+xD8Lh
Bt123Io0gRK82YjGUQ2JfiShp2cx9mya8U30rPxMy9F14VrKNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOJOCgTxjSddqAZNr8hfIqPfy/TuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdk
YTc3OC1hMWY2LTRkYWQtOWQwYS1kM2EwNzAwMTAzNzMvYjhlZjM5YmEtOGEzMS0z
ODlhLWEyZTgtNWM1ZWIzYmRkM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk3ZGE3NzgtYTFmNi00ZGFkLTlk
MGEtZDNhMDcwMDEwMzczL2U5N2RhNzc4LWExZjYtNGRhZC05ZDBhLWQzYTA3MDAx
MDM3My5jcmwwHwYDVR0jBBgwFoAUMuC2ppBpQiEgQL1KkOWS4I8ee6owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdkYTc3OC1hMWY2LTRkYWQtOWQwYS1kM2Ew
NzAwMTAzNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8MACk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC+fEbRuHKs0T/pbc+QuaWqgm6O3tVjF04sPC7VN/UHi1SQXOLs+
aBpW0MVCkLsvySTdnEKsCKkgDx4oaJqemIx83mXmqk4TXrLcksi5VquIDytyBDig
VSNOUovj+YzVIL5O+Al9VgUpThWGCgOW2kH4irVxGxkrXgs0Ueb/qM1A93h0CGQk
NCnhDLsmmF5DfzgwhPbP7Ise7KtaA4aD81/QgbZlKHiELDBDGeBKLlPQAF9fsL1a
aCVb3fMWhwXIE2hZtF1u3HK+FJ6DOmSsb3jKjl7pSspJaeCmQl0OXuWYMgq28uyS
USt4F0SVnv8dyr3rpI9EFKh1sDRd+/PQW9s=
-----END CERTIFICATE-----
Generated at Tue May 14 16:35:40 2024 by rpki-client on console-ams.rpki-client.org