Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/bce8f85b-086e-35bb-8b91-c3436eb6d2cd.roa
File:                     bce8f85b-086e-35bb-8b91-c3436eb6d2cd.roa (raw, json)
Hash identifier:          0Bj1+7bmxDsCro+nfmxwLCItBuz7rkQWIFWC7u7NrGw=
Subject key identifier:   1E:B1:0B:D3:75:69:08:0E:24:A1:0A:6E:2D:E8:1E:24:70:89:0B:03
Certificate issuer:       /CN=37e69330-3024-406b-b60a-0d95e25f2334
Certificate serial:       010D0C9F43285847B7F66489828D72036E3D8100
Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/bce8f85b-086e-35bb-8b91-c3436eb6d2cd.roa
Signing time:             Thu 31 Oct 2024 00:49:20 +0000
ROA not before:           Thu 31 Oct 2024 00:49:20 +0000
ROA not after:            Wed 29 Jan 2025 01:49:20 +0000
asID:                     401390
IP address blocks:        2602:f7da:3f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:f6:64:89:82:8d:72:03:6e:3d:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334
        Validity
            Not Before: Oct 31 00:49:20 2024 GMT
            Not After : Jan 29 01:49:20 2025 GMT
        Subject: CN=9f0ba283-2c8b-4718-8e27-42f120218a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:93:91:96:cd:12:14:92:b2:12:34:ce:b3:b2:
                    89:c9:40:80:03:7a:74:13:84:c2:7f:ac:de:10:91:
                    b2:02:c1:1c:96:b9:20:17:2e:c8:80:25:e6:af:3e:
                    e1:4d:20:03:ec:fc:a3:56:93:07:48:4b:ff:73:7a:
                    43:04:dc:98:5f:a5:bf:09:4d:a7:85:34:e0:33:85:
                    14:cb:e8:01:7b:ea:d6:02:d1:69:ad:bf:aa:c7:db:
                    69:07:2e:39:07:29:ac:38:00:2f:0a:31:f9:55:5b:
                    19:a0:6a:fb:64:08:f6:4e:d8:bd:99:e3:69:f6:b9:
                    ff:ca:cc:6c:fe:4c:50:48:1a:64:99:cf:a6:ba:0f:
                    63:7d:64:73:04:23:78:08:24:6b:c0:5d:27:ad:fa:
                    78:a1:ed:51:d2:fd:a7:aa:6e:f1:5e:64:4c:4a:c2:
                    c6:a2:3c:fd:90:77:cc:69:f1:2e:3d:7f:5a:54:07:
                    bc:cb:6d:b1:43:0b:b3:66:ac:fc:49:52:af:fe:7e:
                    22:78:c8:35:29:54:0f:e7:9f:92:23:71:52:e2:be:
                    0e:4a:a7:ac:b9:f6:f7:c7:59:b4:ea:77:61:2c:1e:
                    14:c8:e9:19:b4:2c:f6:8a:10:b0:bc:80:10:24:25:
                    ff:44:64:d6:6a:eb:d3:c6:fc:b5:48:0d:d1:74:96:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B1:0B:D3:75:69:08:0E:24:A1:0A:6E:2D:E8:1E:24:70:89:0B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/bce8f85b-086e-35bb-8b91-c3436eb6d2cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl

            X509v3 Authority Key Identifier:
                keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7da:3f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:89:a0:98:57:7c:bf:f9:2e:43:93:6b:5b:fe:27:5a:bc:7b:
         96:96:47:36:77:8d:1f:f8:e1:89:2c:2b:87:a8:c8:73:48:89:
         4a:0a:c1:ea:dd:a2:98:ef:e9:36:df:9b:30:11:1a:17:35:98:
         40:79:11:8d:90:e3:69:13:7b:99:f7:ff:d0:6a:8d:cc:2d:dc:
         47:a0:2b:19:04:79:81:55:46:2c:b0:a4:36:37:9a:26:9b:6f:
         50:bc:a5:fa:fe:0f:0b:9e:e8:7c:42:d4:62:8d:08:c5:2f:74:
         e6:89:c5:a4:72:75:69:40:ae:47:a0:85:0b:15:56:e4:cb:3f:
         da:4c:f8:1e:c6:2a:5f:8d:fe:76:e7:13:5a:ac:71:1d:98:95:
         0e:54:11:7b:9f:01:3d:28:c1:01:b3:b5:3f:19:58:b0:03:36:
         21:b6:88:52:98:35:8a:cc:f6:ff:d9:9d:46:24:12:1c:27:3e:
         24:3c:43:5d:1d:d5:12:9a:f1:30:25:fe:aa:98:03:e5:58:74:
         24:5d:d0:e1:d8:27:c1:63:a3:f0:e9:18:c3:f3:b5:c5:21:63:
         13:6c:36:e5:57:91:27:61:de:87:fd:06:99:fb:d2:bc:66:86:
         a0:c9:8f:9c:51:fe:73:5e:62:6c:5e:9c:c5:e6:45:ee:23:e8:
         08:fa:6e:46
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe39mSJgo1yA249gQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYy
MzM0MB4XDTI0MTAzMTAwNDkyMFoXDTI1MDEyOTAxNDkyMFowLzEtMCsGA1UEAxMk
OWYwYmEyODMtMmM4Yi00NzE4LThlMjctNDJmMTIwMjE4YTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5ORls0SFJKyEjTOs7KJyUCAA3p0E4TCf6ze
EJGyAsEclrkgFy7IgCXmrz7hTSAD7PyjVpMHSEv/c3pDBNyYX6W/CU2nhTTgM4UU
y+gBe+rWAtFprb+qx9tpBy45BymsOAAvCjH5VVsZoGr7ZAj2Tti9meNp9rn/ysxs
/kxQSBpkmc+mug9jfWRzBCN4CCRrwF0nrfp4oe1R0v2nqm7xXmRMSsLGojz9kHfM
afEuPX9aVAe8y22xQwuzZqz8SVKv/n4ieMg1KVQP55+SI3FS4r4OSqesufb3x1m0
6ndhLB4UyOkZtCz2ihCwvIAQJCX/RGTWauvTxvy1SA3RdJYCeQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB6xC9N1aQgOJKEKbi3oHiRwiQsDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zN2U2
OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvYmNlOGY4NWItMDg2ZS0z
NWJiLThiOTEtYzM0MzZlYjZkMmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzdlNjkzMzAtMzAyNC00MDZiLWI2
MGEtMGQ5NWUyNWYyMzM0LzM3ZTY5MzMwLTMwMjQtNDA2Yi1iNjBhLTBkOTVlMjVm
MjMzNC5jcmwwHwYDVR0jBBgwFoAUlxapq2aVPz8sQPwdM2OFp0XUZTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1
ZTI1ZjIzMzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL32gA/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB6JoJhXfL/5LkOTa1v+J1q8e5aWRzZ3jR/44YksK4eoyHNIiUoK
werdopjv6TbfmzARGhc1mEB5EY2Q42kTe5n3/9Bqjcwt3EegKxkEeYFVRiywpDY3
miabb1C8pfr+Dwue6HxC1GKNCMUvdOaJxaRydWlArkeghQsVVuTLP9pM+B7GKl+N
/nbnE1qscR2YlQ5UEXufAT0owQGztT8ZWLADNiG2iFKYNYrM9v/ZnUYkEhwnPiQ8
Q10d1RKa8TAl/qqYA+VYdCRd0OHYJ8Fjo/DpGMPztcUhYxNsNuVXkSdh3of9Bpn7
0rxmhqDJj5xR/nNeYmxenMXmRe4j6Aj6bkY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:09 2024 by rpki-client on console-ams.rpki-client.org