Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/edf1e27f-193a-3176-84c9-145d1ab5a903.roa
File:                     edf1e27f-193a-3176-84c9-145d1ab5a903.roa (raw, json)
Hash identifier:          PFU98iJR8CkaoJwov02ZUrhwqwfrad/lgVywzpNQ/j8=
Subject key identifier:   46:05:0E:49:C7:7F:8A:62:C9:1E:13:2D:88:B8:64:46:3B:71:EF:A1
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285845B4E8CF5D63B9790023DBFEC0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/edf1e27f-193a-3176-84c9-145d1ab5a903.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:20af::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:cf:5d:63:b9:79:00:23:db:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=6c8d81a4-ad36-43aa-a311-4cdba37725b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:16:74:7c:78:34:f3:17:a7:86:cd:41:3d:
                    84:29:fa:32:e4:e6:77:93:07:cf:19:29:69:d1:73:
                    77:43:dc:53:dd:94:bc:b5:d5:42:48:92:44:32:50:
                    71:1a:9a:e2:8a:f2:dd:77:ea:27:cc:5d:21:66:bc:
                    c2:c1:3a:a8:6c:02:92:11:2e:91:1e:b6:8e:76:6c:
                    dc:72:7c:9f:ec:7f:b4:db:05:42:67:44:31:b5:e5:
                    fe:51:44:bb:5d:5f:88:0a:f8:76:89:71:d8:21:68:
                    83:c1:0f:ab:f3:ef:15:5b:eb:7b:a9:47:7c:86:f0:
                    f8:91:86:47:46:11:52:30:05:34:70:39:c6:38:e6:
                    f0:42:11:c9:1e:35:ea:6e:ce:ac:8b:5d:13:7b:30:
                    41:31:56:9f:64:f5:ea:ed:6e:7c:dc:6f:29:fe:ec:
                    93:05:aa:ad:c1:f9:5f:f8:46:52:77:3f:ea:6f:2b:
                    ad:66:4c:1e:23:a5:49:2f:d9:cc:c1:22:50:23:79:
                    b9:e7:a7:02:37:61:3e:a8:57:e0:6d:54:d2:3f:fa:
                    1f:8f:9d:36:b5:9b:f3:87:50:04:51:f7:18:9c:87:
                    37:88:b0:09:49:00:1d:fd:b5:f8:cf:4e:13:70:32:
                    a9:75:82:d6:7a:f4:ba:07:52:2e:ec:c6:a3:86:c0:
                    f4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:05:0E:49:C7:7F:8A:62:C9:1E:13:2D:88:B8:64:46:3B:71:EF:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/edf1e27f-193a-3176-84c9-145d1ab5a903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20af::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e9:c5:c1:3d:a1:13:a7:fb:d7:15:13:f0:cd:85:8f:2f:66:
         ae:d3:55:9e:c8:1f:21:85:7d:46:8b:90:e7:d7:4b:ee:92:05:
         ae:86:9e:66:08:3a:83:f8:a3:4d:8c:cc:7a:ac:1b:0b:04:c5:
         98:ca:1e:2c:2b:4c:3f:c7:9b:24:94:84:3a:cf:0b:99:e6:3e:
         08:8b:d7:69:3b:4c:1a:b8:1e:81:ba:2a:b6:e9:9e:5e:43:fe:
         85:a9:bc:0d:b0:0c:3f:65:64:41:a9:25:6d:bd:e4:4b:83:db:
         f9:31:2f:57:95:51:11:c1:e4:af:8a:de:5f:99:06:87:df:4a:
         29:45:93:46:40:34:50:43:3c:99:c2:22:f8:d1:94:a2:0f:a0:
         84:83:d5:60:8f:88:6e:06:da:70:7d:6b:ed:8d:ef:70:45:02:
         9d:73:68:aa:9f:59:56:06:6c:77:4d:91:5f:41:fe:f7:4a:22:
         ad:a0:75:23:26:76:77:e9:10:d8:25:c3:a9:1c:6c:f7:0e:1c:
         e9:09:2b:17:23:06:ad:ba:7d:c8:98:cc:f2:77:6e:42:62:bc:
         1a:72:ca:9e:42:8b:b5:0b:62:d7:29:1f:61:4c:97:60:c8:01:
         39:9b:65:33:c1:94:e1:cb:5c:e7:b0:93:d6:c7:ed:03:3b:0a:
         15:c2:9f:6a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEW06M9dY7l5ACPb/sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk
NmM4ZDgxYTQtYWQzNi00M2FhLWEzMTEtNGNkYmEzNzcyNWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAoWdHx4NPMXp4bNQT2EKfoy5OZ3kwfPGSlp
0XN3Q9xT3ZS8tdVCSJJEMlBxGpriivLdd+onzF0hZrzCwTqobAKSES6RHraOdmzc
cnyf7H+02wVCZ0QxteX+UUS7XV+ICvh2iXHYIWiDwQ+r8+8VW+t7qUd8hvD4kYZH
RhFSMAU0cDnGOObwQhHJHjXqbs6si10TezBBMVafZPXq7W583G8p/uyTBaqtwflf
+EZSdz/qbyutZkweI6VJL9nMwSJQI3m556cCN2E+qFfgbVTSP/ofj502tZvzh1AE
UfcYnIc3iLAJSQAd/bX4z04TcDKpdYLWevS6B1Iu7MajhsD0+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEYFDknHf4piyR4TLYi4ZEY7ce+hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvZWRmMWUyN2YtMTkzYS0z
MTc2LTg0YzktMTQ1ZDFhYjVhOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCCv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADHpxcE9oROn+9cVE/DNhY8vZq7TVZ7IHyGFfUaLkOfXS+6SBa6G
nmYIOoP4o02MzHqsGwsExZjKHiwrTD/HmySUhDrPC5nmPgiL12k7TBq4HoG6Krbp
nl5D/oWpvA2wDD9lZEGpJW295EuD2/kxL1eVURHB5K+K3l+ZBoffSilFk0ZANFBD
PJnCIvjRlKIPoISD1WCPiG4G2nB9a+2N73BFAp1zaKqfWVYGbHdNkV9B/vdKIq2g
dSMmdnfpENglw6kcbPcOHOkJKxcjBq26fciYzPJ3bkJivBpyyp5Ci7ULYtcpH2FM
l2DIATmbZTPBlOHLXOewk9bH7QM7ChXCn2o=
-----END CERTIFICATE-----
Generated at Fri May 10 09:11:22 2024 by rpki-client on console-ams.rpki-client.org