Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa
File:                     72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa (raw, json)
Hash identifier:          WeR7BJN2sAJEz064VJf/lKRjjby6FEJvABS+6lMycZs=
Subject key identifier:   57:43:90:9A:1B:62:C7:83:E2:C4:8A:85:97:0C:B9:9E:4F:83:6F:5C
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285845B4E8C4C54B3F9FA8C7993980
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:2000::/36 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:c4:c5:4b:3f:9f:a8:c7:99:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=aca11816-d54a-41e7-8860-b057b12c8332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:63:8e:4a:68:ee:ce:27:b5:57:4f:89:22:
                    09:8c:bb:71:71:bf:36:25:94:58:2d:10:cc:2e:40:
                    8f:be:fd:83:a9:c2:29:fa:db:8e:dc:b4:94:83:d1:
                    13:51:24:d4:53:e4:c9:f5:a0:ff:66:89:6b:38:e6:
                    db:6a:2f:b1:1c:d1:4f:9c:25:cb:37:3d:7b:2b:68:
                    8f:30:19:38:fd:a6:6a:e3:96:04:2b:14:02:c4:e5:
                    02:77:40:e3:02:d1:96:6d:b3:72:da:ee:fb:e8:0d:
                    31:a9:33:b5:5f:70:71:39:c3:ec:bc:3e:8c:5f:66:
                    ab:59:1f:50:65:fd:7c:91:2b:f2:14:62:25:62:11:
                    c7:f2:92:b4:80:f9:71:82:1e:82:71:da:ec:27:80:
                    2f:cf:0a:a2:5f:c8:35:50:d2:d9:10:2b:01:2d:92:
                    aa:79:6b:df:73:41:69:a0:ed:55:1d:59:83:48:d6:
                    fb:4d:48:88:17:01:cd:32:e2:f9:06:7c:1d:1c:a0:
                    0e:f5:6a:c6:86:bd:01:31:91:58:15:05:4c:ea:17:
                    2e:87:2e:00:bf:80:f2:95:10:09:36:87:7d:dd:8f:
                    7c:27:68:8f:17:cb:cb:01:d8:27:ad:26:08:e8:1d:
                    05:f8:20:2e:2c:7e:b4:2e:8b:50:97:54:14:15:18:
                    96:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:43:90:9A:1B:62:C7:83:E2:C4:8A:85:97:0C:B9:9E:4F:83:6F:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:0e:c6:48:55:7d:7a:76:d2:90:6c:4e:6d:b5:ef:08:52:b5:
         6d:8e:7f:78:30:eb:76:9d:4e:4e:a0:2e:63:b6:57:c1:f7:90:
         0a:8d:28:d2:2f:de:ff:96:95:d4:96:ea:91:56:99:cc:b5:1d:
         d3:d6:e4:42:21:59:27:6c:16:d1:81:76:7c:b3:8b:e9:1b:91:
         e1:4b:f9:e6:a3:e0:41:19:2f:ec:07:01:5a:9f:20:46:74:ea:
         a4:38:fa:1c:de:48:57:eb:fa:e6:e3:e3:c7:47:7a:9e:62:d6:
         68:9b:4e:94:43:98:af:f1:7f:37:fd:43:14:0a:e1:38:9a:6c:
         b8:fb:a9:7a:12:b2:88:26:73:a2:62:30:9c:4d:59:5c:99:a0:
         92:d3:9c:f4:8c:e2:d0:51:f8:6c:0e:f4:02:8e:7f:c8:64:08:
         09:7c:2c:23:a9:e3:4f:dd:95:4f:99:da:43:85:fc:30:8d:25:
         21:d6:28:85:97:ed:5f:59:25:7e:67:a7:5e:69:0a:27:5c:05:
         74:a5:67:41:00:4a:e0:8b:98:4d:8d:df:d4:12:3e:83:1f:60:
         fc:82:cc:a0:99:d1:e5:3c:15:80:53:73:aa:48:e5:c8:fa:92:
         79:ec:3f:2d:91:b0:dd:ba:0b:27:5a:3e:29:52:5d:71:4a:c0:
         82:0b:46:6f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEW06MTFSz+fqMeZOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk
YWNhMTE4MTYtZDU0YS00MWU3LTg4NjAtYjA1N2IxMmM4MzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HJjjkpo7s4ntVdPiSIJjLtxcb82JZRYLRDM
LkCPvv2DqcIp+tuO3LSUg9ETUSTUU+TJ9aD/ZolrOObbai+xHNFPnCXLNz17K2iP
MBk4/aZq45YEKxQCxOUCd0DjAtGWbbNy2u776A0xqTO1X3BxOcPsvD6MX2arWR9Q
Zf18kSvyFGIlYhHH8pK0gPlxgh6CcdrsJ4AvzwqiX8g1UNLZECsBLZKqeWvfc0Fp
oO1VHVmDSNb7TUiIFwHNMuL5BnwdHKAO9WrGhr0BMZFYFQVM6hcuhy4Av4DylRAJ
Nod93Y98J2iPF8vLAdgnrSYI6B0F+CAuLH60LotQl1QUFRiWmwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFdDkJobYseD4sSKhZcMuZ5Pg29cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvNzJhYWRjNDItYTZiNi0z
ZjFlLWE5YjItYzNkNDZlYzYzMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIIDCAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAew7GSFV9enbSkGxObbXvCFK1bY5/eDDrdp1OTqAuY7ZXwfeQCo0o
0i/e/5aV1JbqkVaZzLUd09bkQiFZJ2wW0YF2fLOL6RuR4Uv55qPgQRkv7AcBWp8g
RnTqpDj6HN5IV+v65uPjx0d6nmLWaJtOlEOYr/F/N/1DFArhOJpsuPupehKyiCZz
omIwnE1ZXJmgktOc9Izi0FH4bA70Ao5/yGQICXwsI6njT92VT5naQ4X8MI0lIdYo
hZftX1klfmenXmkKJ1wFdKVnQQBK4IuYTY3f1BI+gx9g/ILMoJnR5TwVgFNzqkjl
yPqSeew/LZGw3boLJ1o+KVJdcUrAggtGbw==
-----END CERTIFICATE-----
Generated at Fri May 10 00:44:53 2024 by rpki-client on console-fra.rpki-client.org