Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/59990428-91ee-3746-8405-ef5d22c38294.roa
File:                     59990428-91ee-3746-8405-ef5d22c38294.roa (raw, json)
Hash identifier:          ZeqSUGcVPOAxqDHt2jeDQvLbgDg+vb3iOSf93U8AJ24=
Subject key identifier:   C3:97:D4:65:F0:B2:C6:90:09:45:D8:C5:FB:72:97:EA:5C:DD:E2:80
Certificate issuer:       /CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
Certificate serial:       010D0C9F432858488A8D10929C113560524EE700
Authority key identifier: A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/59990428-91ee-3746-8405-ef5d22c38294.roa
Signing time:             Tue 14 Jan 2025 11:12:40 +0000
ROA not before:           Tue 14 Jan 2025 11:12:40 +0000
ROA not after:            Mon 14 Apr 2025 10:12:40 +0000
asID:                     30201
IP address blocks:        2602:fcb5::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:8d:10:92:9c:11:35:60:52:4e:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
        Validity
            Not Before: Jan 14 11:12:40 2025 GMT
            Not After : Apr 14 10:12:40 2025 GMT
        Subject: CN=4533146c-d9ca-4af5-80f6-c040d723b449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:28:f0:be:55:9d:71:27:73:43:9e:3a:1a:
                    79:6c:ee:50:b2:9e:36:df:df:3f:61:dc:0c:4f:0b:
                    5a:fc:3f:83:bb:d7:78:bb:cd:fe:6a:6c:24:18:bd:
                    74:c2:04:1a:f1:58:8a:0c:35:35:28:7a:c2:d1:58:
                    65:a8:af:c4:d7:34:b7:4d:93:8c:5c:6c:8d:e7:58:
                    c0:24:dd:00:40:b6:bd:78:3e:d7:09:1b:c1:49:5a:
                    4e:5c:c6:ea:82:d3:2c:d6:c3:cc:79:49:d3:c7:e9:
                    77:87:00:9d:3f:38:ea:82:3f:0b:aa:93:9f:17:5a:
                    06:6d:73:ef:de:1f:45:35:a3:95:85:a6:35:32:b5:
                    b2:76:69:57:70:05:da:c5:14:66:9f:8a:8b:e5:28:
                    f3:cb:3c:7a:ac:ae:86:fd:0e:3b:74:b5:cb:76:07:
                    3c:cb:e7:88:84:bb:0e:69:89:db:fa:78:fe:db:03:
                    86:85:25:1b:9d:d6:95:e3:84:12:07:c4:f1:57:0a:
                    11:1a:39:e0:13:82:23:60:7c:31:20:46:46:e6:24:
                    76:d9:eb:9a:f2:f8:a8:7e:33:7d:ca:59:49:65:e2:
                    1b:77:0b:dd:23:aa:07:ba:33:96:2f:fd:fa:21:ed:
                    7a:65:ea:52:2f:4f:1b:6e:4e:73:e7:06:ac:a8:ce:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:97:D4:65:F0:B2:C6:90:09:45:D8:C5:FB:72:97:EA:5C:DD:E2:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/59990428-91ee-3746-8405-ef5d22c38294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcb5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:50:7c:8f:6f:f5:ea:68:ae:9f:95:3f:bc:97:4b:69:97:76:
         14:95:95:b8:33:34:e0:7c:b4:e3:b8:c7:33:17:07:b8:be:86:
         0c:ba:b8:fe:20:54:0a:db:0b:f5:3e:aa:d4:85:a9:7b:4e:34:
         f3:fb:87:ac:e7:b1:7d:85:cd:b1:e7:a7:ee:ee:a1:2e:ff:35:
         3c:57:32:18:c6:ff:50:aa:52:6c:fa:e2:d7:96:65:3d:0c:bc:
         ad:93:ce:ee:fd:04:44:ec:91:3f:c5:a5:a8:7f:53:4f:3b:e6:
         44:bd:f8:62:cc:54:ee:0f:ba:22:e1:71:ba:98:83:8c:b2:6c:
         41:0b:9f:d0:b6:7b:25:16:02:0b:fe:cd:90:64:44:a8:52:83:
         e6:4f:d2:ed:85:d6:ac:35:03:26:9f:cd:e5:72:4e:c9:d6:d2:
         38:7d:fa:96:f9:15:9d:73:4c:7c:18:33:14:5b:f6:1b:ab:71:
         26:4a:a1:2d:27:d1:95:cd:e9:e3:ce:bf:84:c2:d4:84:51:2e:
         d8:6f:cf:15:c6:4a:63:b8:58:c6:21:18:09:e9:46:fd:15:6f:
         68:45:b4:72:24:34:d5:25:4a:d9:5b:a2:7e:1b:57:5e:ff:d6:
         ba:01:5b:76:a8:68:25:be:7c:a7:62:4f:6c:62:63:8b:a9:05:
         d6:a9:08:a3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiKjRCSnBE1YFJO5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM4YzdjYTQtM2E0MS00MTM0LWExMjctODFkYzE0MGJj
N2E5MB4XDTI1MDExNDExMTI0MFoXDTI1MDQxNDEwMTI0MFowLzEtMCsGA1UEAxMk
NDUzMzE0NmMtZDljYS00YWY1LTgwZjYtYzA0MGQ3MjNiNDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXUo8L5VnXEnc0OeOhp5bO5Qsp42398/YdwM
Twta/D+Du9d4u83+amwkGL10wgQa8ViKDDU1KHrC0VhlqK/E1zS3TZOMXGyN51jA
JN0AQLa9eD7XCRvBSVpOXMbqgtMs1sPMeUnTx+l3hwCdPzjqgj8LqpOfF1oGbXPv
3h9FNaOVhaY1MrWydmlXcAXaxRRmn4qL5Sjzyzx6rK6G/Q47dLXLdgc8y+eIhLsO
aYnb+nj+2wOGhSUbndaV44QSB8TxVwoRGjngE4IjYHwxIEZG5iR22eua8viofjN9
yllJZeIbdwvdI6oHujOWL/36Ie16ZepSL08bbk5z5wasqM5fDwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMOX1GXwssaQCUXYxftyl+pc3eKAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzhj
N2NhNC0zYTQxLTQxMzQtYTEyNy04MWRjMTQwYmM3YTkvNTk5OTA0MjgtOTFlZS0z
NzQ2LTg0MDUtZWY1ZDIyYzM4Mjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM4YzdjYTQtM2E0MS00MTM0LWEx
MjctODFkYzE0MGJjN2E5L2YzOGM3Y2E0LTNhNDEtNDEzNC1hMTI3LTgxZGMxNDBi
YzdhOS5jcmwwHwYDVR0jBBgwFoAUocfcL5AVBoPAPHxbaIA+jBhWHHkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzhjN2NhNC0zYTQxLTQxMzQtYTEyNy04MWRj
MTQwYmM3YTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8tQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAhVB8j2/16miun5U/vJdLaZd2FJWVuDM04Hy047jHMxcHuL6GDLq4
/iBUCtsL9T6q1IWpe0408/uHrOexfYXNseen7u6hLv81PFcyGMb/UKpSbPri15Zl
PQy8rZPO7v0EROyRP8WlqH9TTzvmRL34YsxU7g+6IuFxupiDjLJsQQuf0LZ7JRYC
C/7NkGREqFKD5k/S7YXWrDUDJp/N5XJOydbSOH36lvkVnXNMfBgzFFv2G6txJkqh
LSfRlc3p486/hMLUhFEu2G/PFcZKY7hYxiEYCelG/RVvaEW0ciQ01SVK2VuifhtX
Xv/WugFbdqhoJb58p2JPbGJji6kF1qkIow==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:38 2025 by rpki-client