Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bc6cfdde-216a-35da-83a5-db62d0724ac4.roa
File:                     bc6cfdde-216a-35da-83a5-db62d0724ac4.roa (raw, json)
Hash identifier:          B1VNzrNe8IDjhuqTBgRkO2IGPI0qLZfUl6QRG5RaJXQ=
Subject key identifier:   05:A6:97:D0:7F:AE:3F:74:D4:B4:44:41:D5:67:87:F3:FD:46:D8:86
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584774FB9BCF5C735F76C1C01340
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bc6cfdde-216a-35da-83a5-db62d0724ac4.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     399976
IP address blocks:        2602:80c:2013::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:9b:cf:5c:73:5f:76:c1:c0:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=00f3a9eb-f64e-4d47-a051-339b1646c3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fc:ed:31:1d:22:99:a7:df:5f:c5:2f:72:6e:
                    e2:16:40:c1:4c:06:e5:7f:5a:01:7f:11:f3:7c:50:
                    46:e2:5d:e0:9b:ae:0b:61:9a:39:06:d1:46:68:c3:
                    3d:41:47:46:20:99:bb:73:57:78:92:f3:05:05:07:
                    8f:8a:b8:3f:41:08:53:ef:25:38:63:1b:f0:76:a5:
                    27:d0:fd:13:9d:11:41:ad:90:99:20:ab:6e:98:a1:
                    db:1a:4d:ef:8e:56:da:9f:db:b0:d7:b7:9a:73:ca:
                    0b:44:bb:92:ac:dc:89:7f:31:fc:87:c7:2e:89:04:
                    6a:73:70:3d:a9:47:ff:1b:b4:02:f9:d5:1a:a0:c9:
                    9f:26:28:70:32:32:03:ad:7b:a4:0b:bc:91:cd:08:
                    68:ca:62:31:09:f3:da:3f:05:13:6a:ae:b3:6d:2b:
                    27:b5:65:77:f0:d3:4c:0f:fe:9b:07:8c:31:cf:2e:
                    f7:bf:a0:7b:43:90:50:55:e1:52:6b:54:3e:18:9f:
                    cd:9d:44:eb:62:e7:30:d7:2a:1a:19:a6:20:2c:c2:
                    2c:c7:32:31:6a:8a:64:9e:bb:6b:6b:8e:f8:c0:c5:
                    5e:9c:80:de:39:57:4c:37:24:e8:51:5a:47:d5:df:
                    b4:3b:8f:26:e0:77:50:33:da:d8:9c:54:d6:c6:0e:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A6:97:D0:7F:AE:3F:74:D4:B4:44:41:D5:67:87:F3:FD:46:D8:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bc6cfdde-216a-35da-83a5-db62d0724ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2013::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:95:a6:fe:be:c4:64:39:4e:93:57:b6:90:a5:5f:15:12:29:
         59:a8:58:e4:a0:f3:8a:ab:9c:38:80:de:6e:33:4b:a2:ba:58:
         97:08:fd:7f:0d:d1:20:c1:ae:87:c4:4b:ad:e4:f9:1b:5e:89:
         74:df:2e:07:9e:74:5a:17:e0:59:92:4e:30:f7:d5:22:e9:32:
         c6:39:37:20:fa:78:29:f9:00:35:cc:b2:41:38:06:27:29:21:
         74:71:45:46:90:88:17:c2:bf:47:51:17:5e:56:a2:af:ee:33:
         e7:c8:6e:a9:78:96:8c:05:60:49:a3:5a:05:65:f8:46:ed:4b:
         a2:6c:01:a8:c6:97:6f:b2:0b:fb:61:83:21:90:81:fd:b2:e5:
         c6:a9:7c:c9:31:0c:43:58:b8:e9:60:50:a6:5d:98:d2:e6:95:
         11:13:f6:4e:e7:c2:a0:12:8f:1b:71:81:fd:13:05:df:46:26:
         82:23:f3:c4:a5:7e:ef:76:12:f8:75:6e:57:f9:51:85:3a:14:
         72:d0:6d:18:78:04:a9:26:0c:63:00:1a:ff:69:b9:ec:4c:66:
         29:c4:e8:b7:ae:f2:bc:b7:75:87:ce:28:36:fa:5b:d2:ea:dc:
         85:72:f6:4e:c9:16:23:7a:f8:70:16:45:4e:c7:1d:67:c1:e6:
         02:76:5d:71
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd0+5vPXHNfdsHAE0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk
MDBmM2E5ZWItZjY0ZS00ZDQ3LWEwNTEtMzM5YjE2NDZjM2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/ztMR0imaffX8Uvcm7iFkDBTAblf1oBfxHz
fFBG4l3gm64LYZo5BtFGaMM9QUdGIJm7c1d4kvMFBQePirg/QQhT7yU4YxvwdqUn
0P0TnRFBrZCZIKtumKHbGk3vjlban9uw17eac8oLRLuSrNyJfzH8h8cuiQRqc3A9
qUf/G7QC+dUaoMmfJihwMjIDrXukC7yRzQhoymIxCfPaPwUTaq6zbSsntWV38NNM
D/6bB4wxzy73v6B7Q5BQVeFSa1Q+GJ/NnUTrYucw1yoaGaYgLMIsxzIxaopknrtr
a474wMVenIDeOVdMNyToUVpH1d+0O48m4HdQM9rYnFTWxg4aVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAWml9B/rj901LREQdVnh/P9RtiGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvYmM2Y2ZkZGUtMjE2YS0z
NWRhLTgzYTUtZGI2MmQwNzI0YWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCAT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHyVpv6+xGQ5TpNXtpClXxUSKVmoWOSg84qrnDiA3m4zS6K6WJcI
/X8N0SDBrofES63k+RteiXTfLgeedFoX4FmSTjD31SLpMsY5NyD6eCn5ADXMskE4
BicpIXRxRUaQiBfCv0dRF15Woq/uM+fIbql4lowFYEmjWgVl+EbtS6JsAajGl2+y
C/thgyGQgf2y5capfMkxDENYuOlgUKZdmNLmlRET9k7nwqASjxtxgf0TBd9GJoIj
88Slfu92Evh1blf5UYU6FHLQbRh4BKkmDGMAGv9puexMZinE6Leu8ry3dYfOKDb6
W9Lq3IVy9k7JFiN6+HAWRU7HHWfB5gJ2XXE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:04 2024 by rpki-client on console-fra.rpki-client.org