Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/2aad301a-fb8f-39e6-9c9b-9f96f0e577fd.roa
File:                     2aad301a-fb8f-39e6-9c9b-9f96f0e577fd.roa (raw, json)
Hash identifier:          l6yMraf7i6BhozNWbdzhFJ/Nc1kZDLAi/auHWm4dFxs=
Subject key identifier:   89:9F:F9:76:CE:21:C6:3E:8B:89:44:E2:3C:64:D0:DD:7B:C5:E2:C8
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F43285847E4C4A8333C8102BB34C62400
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/2aad301a-fb8f-39e6-9c9b-9f96f0e577fd.roa
Signing time:             Sat 16 Nov 2024 02:00:28 +0000
ROA not before:           Sat 16 Nov 2024 02:00:28 +0000
ROA not after:            Fri 14 Feb 2025 02:00:28 +0000
asID:                     63150
IP address blocks:        2602:f988:c0::/42 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:c4:a8:33:3c:81:02:bb:34:c6:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Nov 16 02:00:28 2024 GMT
            Not After : Feb 14 02:00:28 2025 GMT
        Subject: CN=7716a817-10c9-468f-a1c8-5119355b32f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:90:07:cd:d9:37:fa:76:e3:bc:1c:7e:bf:
                    7d:cb:e4:73:f8:86:3e:31:b8:3e:18:14:57:29:88:
                    b8:e3:d7:c6:6b:13:b3:ce:94:26:44:bb:0b:68:7b:
                    40:76:85:e9:d4:ef:f5:40:24:18:9a:4d:fb:db:5c:
                    61:88:2b:c0:d2:26:9b:d9:76:54:ff:59:85:ef:ee:
                    48:6a:5d:84:e8:f1:6a:c2:eb:60:fa:3e:65:86:01:
                    e7:29:5d:a1:6a:08:0e:4b:c8:10:2f:62:05:3b:b7:
                    d8:29:34:ba:d5:23:58:64:1c:31:b6:8d:13:72:e8:
                    b6:3a:62:74:56:f6:09:5a:ed:94:30:05:14:53:36:
                    39:7b:fe:62:ad:fd:41:9a:dd:df:33:56:f0:88:c1:
                    b4:ec:6d:ec:78:5a:a7:09:f5:77:cb:7f:2a:bc:37:
                    41:82:01:6f:1f:bf:81:c9:c6:a0:16:50:fb:65:98:
                    f4:91:23:f6:52:27:f3:eb:9c:96:84:62:aa:d4:99:
                    e4:65:16:a5:48:0c:be:2a:62:6d:0d:82:11:a5:7a:
                    1f:90:fb:bc:a0:50:01:8d:8d:01:d9:f9:ee:0c:ea:
                    cf:04:94:86:ea:c9:b2:29:03:b6:13:65:f9:21:cb:
                    43:16:ad:e3:8d:d5:0e:2d:2a:83:e8:66:af:45:52:
                    ac:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9F:F9:76:CE:21:C6:3E:8B:89:44:E2:3C:64:D0:DD:7B:C5:E2:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/2aad301a-fb8f-39e6-9c9b-9f96f0e577fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:a5:db:e4:73:75:f8:97:7e:da:be:d3:06:84:84:ec:38:9f:
         f6:8e:3d:1c:10:51:e1:6a:43:37:28:d6:e1:9b:48:2c:00:1e:
         49:d2:61:7b:e7:04:1c:a4:3d:e6:a9:2d:8b:5f:14:5f:e6:c2:
         24:03:9c:cd:3f:e1:6f:f0:d2:f5:72:4e:0c:7e:7a:16:ac:0c:
         63:ec:df:8a:10:e2:c6:72:43:fd:9a:55:ff:af:6b:4e:8e:6f:
         b1:61:5d:41:dc:65:65:73:3b:a6:f3:95:f8:4f:0e:b1:d4:fc:
         46:f5:54:fb:f7:00:ae:11:72:0e:0c:5d:c3:34:e7:69:b9:64:
         7e:26:9a:cb:8b:52:99:37:8c:ff:1d:31:c3:87:b0:07:3d:e4:
         f4:eb:e9:cd:f5:7d:9f:0b:83:41:18:25:58:a3:cc:d6:31:3d:
         34:50:ce:ab:24:3a:78:8a:f5:07:27:25:98:3e:36:2e:66:df:
         28:ca:b4:e8:55:5e:6f:66:31:82:98:4f:db:c4:29:98:bc:7b:
         93:6f:d0:89:24:2c:3b:96:25:8d:53:83:18:4e:2a:3a:7b:83:
         b7:03:42:fa:49:b6:99:33:ec:4f:97:9c:90:b7:82:0d:06:69:
         83:f4:75:3e:50:37:9d:84:09:c6:1b:30:0f:c1:a7:1b:eb:a8:
         80:53:e0:c7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfkxKgzPIECuzTGJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMThhOTI4ZWItNDhhNS00NTYwLWEyMTctMzZjYjFlYTMy
NjQ4MB4XDTI0MTExNjAyMDAyOFoXDTI1MDIxNDAyMDAyOFowLzEtMCsGA1UEAxMk
NzcxNmE4MTctMTBjOS00NjhmLWExYzgtNTExOTM1NWIzMmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6qQB83ZN/p247wcfr99y+Rz+IY+Mbg+GBRX
KYi449fGaxOzzpQmRLsLaHtAdoXp1O/1QCQYmk3721xhiCvA0iab2XZU/1mF7+5I
al2E6PFqwutg+j5lhgHnKV2haggOS8gQL2IFO7fYKTS61SNYZBwxto0Tcui2OmJ0
VvYJWu2UMAUUUzY5e/5irf1Bmt3fM1bwiMG07G3seFqnCfV3y38qvDdBggFvH7+B
ycagFlD7ZZj0kSP2Uifz65yWhGKq1JnkZRalSAy+KmJtDYIRpXofkPu8oFABjY0B
2fnuDOrPBJSG6smyKQO2E2X5IctDFq3jjdUOLSqD6GavRVKsWwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFImf+XbOIcY+i4lE4jxk0N17xeLIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xOGE5
MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNiMWVhMzI2NDgvMmFhZDMwMWEtZmI4Zi0z
OWU2LTljOWItOWY5NmYwZTU3N2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMThhOTI4ZWItNDhhNS00NTYwLWEy
MTctMzZjYjFlYTMyNjQ4LzE4YTkyOGViLTQ4YTUtNDU2MC1hMjE3LTM2Y2IxZWEz
MjY0OC5jcmwwHwYDVR0jBBgwFoAU9H6x3C6P5f0Uj3qixMZGdbQwqzgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xOGE5MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNi
MWVhMzI2NDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL5iADA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALil2+RzdfiXftq+0waEhOw4n/aOPRwQUeFqQzco1uGbSCwAHknS
YXvnBBykPeapLYtfFF/mwiQDnM0/4W/w0vVyTgx+ehasDGPs34oQ4sZyQ/2aVf+v
a06Ob7FhXUHcZWVzO6bzlfhPDrHU/Eb1VPv3AK4Rcg4MXcM052m5ZH4mmsuLUpk3
jP8dMcOHsAc95PTr6c31fZ8Lg0EYJVijzNYxPTRQzqskOniK9QcnJZg+Ni5m3yjK
tOhVXm9mMYKYT9vEKZi8e5Nv0IkkLDuWJY1TgxhOKjp7g7cDQvpJtpkz7E+XnJC3
gg0GaYP0dT5QN52ECcYbMA/BpxvrqIBT4Mc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:29 2024 by rpki-client on console-ams.rpki-client.org