Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/d2362234-9c1e-344f-b444-d1fd331ffa47.roa
File:                     d2362234-9c1e-344f-b444-d1fd331ffa47.roa (raw, json)
Hash identifier:          MF3/Gg50qX2Jf8Y73XX/1HxSlcHjxMy/nZ3EoomdfBo=
Subject key identifier:   8A:24:46:45:30:10:92:5F:15:F5:1C:6F:45:A6:D2:11:0A:48:16:B0
Certificate issuer:       /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
Certificate serial:       010D0C9F43285847D549590F75C42B442A8EFE00
Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/d2362234-9c1e-344f-b444-d1fd331ffa47.roa
Signing time:             Sun 10 Nov 2024 12:54:55 +0000
ROA not before:           Sun 10 Nov 2024 12:54:55 +0000
ROA not after:            Sat 08 Feb 2025 12:54:55 +0000
asID:                     203023
IP address blocks:        2602:f93b:a00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:49:59:0f:75:c4:2b:44:2a:8e:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
        Validity
            Not Before: Nov 10 12:54:55 2024 GMT
            Not After : Feb  8 12:54:55 2025 GMT
        Subject: CN=3d445402-c219-4850-b921-8508246bebff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:df:06:d9:e2:51:94:47:c9:76:a0:3b:cb:fa:
                    13:c3:b0:60:c2:86:f5:f6:08:d4:90:dd:45:cb:cd:
                    9a:73:d6:d4:bb:80:10:ec:42:fe:78:e6:92:40:83:
                    99:14:ac:bd:f1:8c:cb:18:2a:1c:c2:0d:78:08:0d:
                    e9:c1:b8:a4:b9:e9:40:48:ec:00:92:32:b8:ad:6a:
                    ca:e3:31:07:08:f2:f9:b5:7c:84:4b:08:9a:0f:f3:
                    d7:df:01:24:d6:7a:70:c9:cb:6d:6a:5d:32:b1:48:
                    e2:87:02:3b:29:81:f1:b1:7a:87:3e:bd:21:a1:a0:
                    e6:dd:84:00:9f:0f:9c:3d:b0:c6:99:34:ae:8e:b8:
                    30:22:3f:bb:35:77:4c:03:97:ba:45:37:1c:ff:2b:
                    8e:70:6e:87:25:f6:25:11:0e:9c:26:51:93:ed:8f:
                    5b:2b:37:4a:88:cd:c6:ce:1b:44:05:d2:d9:47:42:
                    a8:c5:8b:cc:f3:3b:a5:64:0d:e8:4a:52:95:b7:b3:
                    5a:61:d5:af:e5:d7:68:2a:81:9c:25:29:09:cf:43:
                    27:95:7e:67:ec:a9:99:23:42:53:f5:05:32:39:d3:
                    60:d3:c3:83:1d:5d:9a:bd:69:9b:d6:db:4a:76:be:
                    5b:4d:5d:91:d3:e4:0a:48:08:00:02:72:5f:31:3d:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:24:46:45:30:10:92:5F:15:F5:1C:6F:45:A6:D2:11:0A:48:16:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/d2362234-9c1e-344f-b444-d1fd331ffa47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f93b:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:06:75:90:4a:5e:25:35:3a:bc:46:fc:4c:92:7a:dd:00:73:
         36:9d:ef:b4:10:c3:60:03:bb:44:f1:96:9f:94:77:38:02:f0:
         ba:e1:05:c2:e7:10:07:98:51:63:74:05:d7:74:b0:59:81:8c:
         70:a8:c5:a2:00:4c:5c:cf:fb:80:c9:7b:fe:9b:74:6d:51:20:
         02:e7:b8:e2:c1:12:ee:fa:0d:41:05:ec:86:69:6a:7c:7e:19:
         be:4a:21:83:61:cb:84:51:0a:c3:27:2a:03:62:e6:63:0e:b7:
         80:2b:f4:26:7d:ca:d9:d0:72:27:7c:d8:f1:4e:c0:67:d4:56:
         49:2b:21:c2:a4:24:bb:08:ac:54:30:13:d6:04:81:77:d0:37:
         ce:64:cb:8d:5c:0c:4b:67:79:30:7c:7e:06:f2:70:30:1c:e3:
         c2:2f:b6:36:3f:17:ae:fc:ad:47:1d:a0:9f:90:be:87:48:7a:
         24:8f:1c:52:e7:c0:91:aa:5d:2c:18:c8:c3:e7:41:fb:3d:d3:
         72:d2:99:21:fa:cb:32:2b:e0:5c:6e:b3:8d:14:76:91:4c:76:
         d1:d0:09:0a:fd:5a:53:86:93:fa:75:4e:f7:26:31:74:c6:01:
         6d:66:8d:98:05:4b:b4:a5:7e:3d:b5:6c:e9:0b:e4:2c:ab:e4:
         9f:4b:b4:af
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfVSVkPdcQrRCqO/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTdlYzJkYTUtNTRmZS00ZDdhLThiMDYtMTU4ODc0Nzdj
MmU4MB4XDTI0MTExMDEyNTQ1NVoXDTI1MDIwODEyNTQ1NVowLzEtMCsGA1UEAxMk
M2Q0NDU0MDItYzIxOS00ODUwLWI5MjEtODUwODI0NmJlYmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd8G2eJRlEfJdqA7y/oTw7Bgwob19gjUkN1F
y82ac9bUu4AQ7EL+eOaSQIOZFKy98YzLGCocwg14CA3pwbikuelASOwAkjK4rWrK
4zEHCPL5tXyESwiaD/PX3wEk1npwycttal0ysUjihwI7KYHxsXqHPr0hoaDm3YQA
nw+cPbDGmTSujrgwIj+7NXdMA5e6RTcc/yuOcG6HJfYlEQ6cJlGT7Y9bKzdKiM3G
zhtEBdLZR0KoxYvM8zulZA3oSlKVt7NaYdWv5ddoKoGcJSkJz0MnlX5n7KmZI0JT
9QUyOdNg08ODHV2avWmb1ttKdr5bTV2R0+QKSAgAAnJfMT0sLQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIokRkUwEJJfFfUcb0Wm0hEKSBawMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xN2Vj
MmRhNS01NGZlLTRkN2EtOGIwNi0xNTg4NzQ3N2MyZTgvZDIzNjIyMzQtOWMxZS0z
NDRmLWI0NDQtZDFmZDMzMWZmYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTdlYzJkYTUtNTRmZS00ZDdhLThi
MDYtMTU4ODc0NzdjMmU4LzE3ZWMyZGE1LTU0ZmUtNGQ3YS04YjA2LTE1ODg3NDc3
YzJlOC5jcmwwHwYDVR0jBBgwFoAUyPPC9itSfvJd8ScSn/7szOwOiEswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xN2VjMmRhNS01NGZlLTRkN2EtOGIwNi0xNTg4
NzQ3N2MyZTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5Owow
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQwZ1kEpeJTU6vEb8TJJ63QBzNp3vtBDDYAO7RPGWn5R3OALwuuEF
wucQB5hRY3QF13SwWYGMcKjFogBMXM/7gMl7/pt0bVEgAue44sES7voNQQXshmlq
fH4Zvkohg2HLhFEKwycqA2LmYw63gCv0Jn3K2dByJ3zY8U7AZ9RWSSshwqQkuwis
VDAT1gSBd9A3zmTLjVwMS2d5MHx+BvJwMBzjwi+2Nj8XrvytRx2gn5C+h0h6JI8c
UufAkapdLBjIw+dB+z3TctKZIfrLMivgXG6zjRR2kUx20dAJCv1aU4aT+nVO9yYx
dMYBbWaNmAVLtKV+PbVs6QvkLKvkn0u0rw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:38 2024 by rpki-client on console-fra.rpki-client.org