Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/c7f81528-d3f7-3184-87f0-d2670a835419.roa
File:                     c7f81528-d3f7-3184-87f0-d2670a835419.roa (raw, json)
Hash identifier:          auQI3/gbogF0ByfJ959R4Pch+FB0cFlvHYb4I0IarZM=
Subject key identifier:   BB:BF:8E:CD:2C:ED:22:90:7D:2D:A8:FE:D0:23:A9:8B:CB:18:1E:C9
Certificate issuer:       /CN=e97da778-a1f6-4dad-9d0a-d3a070010373
Certificate serial:       010D0C9F43285845453D6AF22A5E6DC9F9E50340
Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/c7f81528-d3f7-3184-87f0-d2670a835419.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     21538
IP address blocks:        2602:fc30:a3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:6a:f2:2a:5e:6d:c9:f9:e5:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=da8f4bff-9c7f-43cf-9022-c69d227908d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:0b:3b:ae:86:73:90:9d:02:b2:99:ba:37:
                    bf:73:69:f1:b4:63:4a:fa:f9:b3:9f:a4:39:f4:20:
                    3d:fc:6a:fe:55:ff:d2:8c:bd:d8:02:f3:39:4a:53:
                    f6:d2:06:27:23:c5:27:b7:4b:05:30:2e:94:8e:9c:
                    b1:a8:e6:56:23:c9:8a:05:9f:8a:92:76:eb:76:13:
                    96:03:a5:e7:96:38:0e:0e:6d:c5:7f:36:e3:44:5a:
                    6c:03:c3:32:7b:26:bf:99:85:99:1b:d6:41:8d:29:
                    90:86:03:e3:8e:a3:d1:24:e5:52:17:72:aa:1e:f2:
                    78:13:aa:7e:93:0c:21:bd:87:24:01:85:20:c8:8f:
                    a9:cc:a8:7f:97:5e:bb:f9:23:6b:2f:db:db:a5:a7:
                    6c:47:05:ad:ad:83:77:a0:db:b7:5f:e3:c7:f8:20:
                    bd:4b:ca:17:6f:10:84:65:e1:99:69:68:94:66:f1:
                    35:87:7a:fe:ff:e9:50:fa:6b:d8:b6:8a:b2:a2:6c:
                    5f:d2:03:37:62:a9:32:fb:ed:a5:b7:79:26:23:19:
                    4f:c6:49:58:07:07:a2:90:08:35:7f:7b:eb:91:ee:
                    10:9a:87:54:45:89:0b:18:30:57:8a:84:f5:ac:d9:
                    7b:6a:46:7a:87:e7:46:3f:bc:9d:9b:40:5b:e2:76:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BF:8E:CD:2C:ED:22:90:7D:2D:A8:FE:D0:23:A9:8B:CB:18:1E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/c7f81528-d3f7-3184-87f0-d2670a835419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl

            X509v3 Authority Key Identifier:
                keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc30:a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:db:bd:81:4c:94:af:87:d0:44:cd:89:05:2d:b3:80:d1:1c:
         24:ba:4d:56:a8:e3:c7:5c:2f:71:80:cb:a7:24:e0:c6:52:06:
         1d:de:e4:ae:a3:74:2a:91:eb:ef:17:7e:05:ac:64:27:e2:a6:
         b6:ad:1e:0a:f7:59:aa:78:0e:1c:e0:97:c8:a4:7e:67:5c:56:
         24:b7:8a:fa:5f:8e:3c:78:56:e2:45:86:8a:bf:ac:9e:ff:61:
         ab:67:86:2a:6e:d7:da:57:8d:a6:f7:36:ab:a4:d3:45:3d:94:
         51:6c:d0:2f:b6:03:fc:1d:f2:ef:a8:ba:2c:2e:6c:9b:39:c6:
         9a:b7:fa:9b:dd:f4:36:dc:bd:c5:41:5d:75:60:5e:0e:77:01:
         85:f7:be:1c:a2:68:eb:52:f5:b1:52:42:c0:fa:60:17:0a:dd:
         d6:69:3e:c9:2a:30:47:04:29:76:f6:a8:c6:c2:7f:53:96:8b:
         a6:5e:8d:c8:ff:69:aa:12:f3:59:29:59:d3:0e:6e:53:d2:26:
         fc:f1:21:87:85:ca:b4:80:05:dd:fd:95:fe:8e:52:44:78:38:
         fb:a2:2d:8e:5e:7f:c7:76:91:4d:f3:d3:56:9f:8f:d5:67:c5:
         fb:de:c1:bd:6d:8a:8d:14:df:da:c1:5c:88:58:5a:55:84:66:
         ce:7b:c0:1d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVFPWryKl5tyfnlA0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk3ZGE3NzgtYTFmNi00ZGFkLTlkMGEtZDNhMDcwMDEw
MzczMB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
ZGE4ZjRiZmYtOWM3Zi00M2NmLTkwMjItYzY5ZDIyNzkwOGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9cLO66Gc5CdArKZuje/c2nxtGNK+vmzn6Q5
9CA9/Gr+Vf/SjL3YAvM5SlP20gYnI8Unt0sFMC6UjpyxqOZWI8mKBZ+KknbrdhOW
A6XnljgODm3FfzbjRFpsA8Myeya/mYWZG9ZBjSmQhgPjjqPRJOVSF3KqHvJ4E6p+
kwwhvYckAYUgyI+pzKh/l167+SNrL9vbpadsRwWtrYN3oNu3X+PH+CC9S8oXbxCE
ZeGZaWiUZvE1h3r+/+lQ+mvYtoqyomxf0gM3Yqky++2lt3kmIxlPxklYBweikAg1
f3vrke4QmodURYkLGDBXioT1rNl7akZ6h+dGP7ydm0Bb4nbPnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLu/js0s7SKQfS2o/tAjqYvLGB7JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdk
YTc3OC1hMWY2LTRkYWQtOWQwYS1kM2EwNzAwMTAzNzMvYzdmODE1MjgtZDNmNy0z
MTg0LTg3ZjAtZDI2NzBhODM1NDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk3ZGE3NzgtYTFmNi00ZGFkLTlk
MGEtZDNhMDcwMDEwMzczL2U5N2RhNzc4LWExZjYtNGRhZC05ZDBhLWQzYTA3MDAx
MDM3My5jcmwwHwYDVR0jBBgwFoAUMuC2ppBpQiEgQL1KkOWS4I8ee6owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdkYTc3OC1hMWY2LTRkYWQtOWQwYS1kM2Ew
NzAwMTAzNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8MACj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMHbvYFMlK+H0ETNiQUts4DRHCS6TVao48dcL3GAy6ck4MZSBh3e
5K6jdCqR6+8XfgWsZCfipratHgr3Wap4Dhzgl8ikfmdcViS3ivpfjjx4VuJFhoq/
rJ7/Yatnhipu19pXjab3Nquk00U9lFFs0C+2A/wd8u+ouiwubJs5xpq3+pvd9Dbc
vcVBXXVgXg53AYX3vhyiaOtS9bFSQsD6YBcK3dZpPskqMEcEKXb2qMbCf1OWi6Ze
jcj/aaoS81kpWdMOblPSJvzxIYeFyrSABd39lf6OUkR4OPuiLY5ef8d2kU3z01af
j9Vnxfvewb1tio0U39rBXIhYWlWEZs57wB0=
-----END CERTIFICATE-----
Generated at Mon May 13 17:04:05 2024 by rpki-client on console-ams.rpki-client.org