Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/94b3319a-658a-3317-bf87-91c877d6dd90.roa
File:                     94b3319a-658a-3317-bf87-91c877d6dd90.roa (raw, json)
Hash identifier:          j3S3Z9SA5rSvyp4o3SLIFp7xzMIMLgM/mCa35ZJNY/g=
Subject key identifier:   0A:96:7F:24:6C:B4:5A:9D:60:EB:B5:35:25:94:AD:DF:42:21:4F:C6
Certificate issuer:       /CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02
Certificate serial:       010D0C9F4328584754E0EB4D63A3941DD67A0800
Authority key identifier: B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/94b3319a-658a-3317-bf87-91c877d6dd90.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     396350
IP address blocks:        2602:f950::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:eb:4d:63:a3:94:1d:d6:7a:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=c23f6fab-e490-4d9a-9c9a-b8a282e28c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:85:dd:cc:ed:79:52:d2:16:56:c2:e2:bb:c7:
                    fe:b8:97:72:6f:ae:6d:c7:25:5a:0e:f7:6f:c4:0e:
                    4a:27:3a:46:eb:88:f2:10:b2:a2:e5:68:1b:35:38:
                    dc:7e:03:db:9a:e1:dc:e8:84:46:94:76:f5:26:0a:
                    57:4d:02:f8:2c:7c:65:1e:66:c1:24:42:ae:b5:09:
                    08:a0:1e:00:8e:5f:e3:df:17:b9:19:ea:3e:87:77:
                    79:57:3d:6e:e3:e1:7d:fd:bf:1f:ef:98:e8:87:60:
                    90:13:a6:1f:36:43:8e:78:5e:03:4c:e8:68:df:c1:
                    4e:c0:69:b0:1d:14:51:64:fd:43:20:c8:e5:66:2f:
                    a1:80:5e:29:fa:16:30:a2:5f:af:8f:4e:9e:1b:f1:
                    85:df:f0:80:ec:dc:19:e4:84:03:1e:89:d5:1b:9b:
                    5d:80:bb:f5:22:52:bc:8a:c2:2b:2d:a5:28:89:3f:
                    bb:fd:d8:0d:aa:7d:e4:b1:ad:61:d9:60:07:51:f2:
                    9c:4f:d9:92:c0:b7:7d:c9:3f:9b:07:16:fd:7e:db:
                    21:cb:85:52:21:c8:a1:19:68:c8:4a:01:35:6c:5f:
                    98:20:4e:05:47:03:4a:75:f0:da:01:d7:9c:5f:6f:
                    cf:fd:59:9f:fe:d2:fe:59:e7:7c:16:6c:92:1e:5d:
                    87:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:96:7F:24:6C:B4:5A:9D:60:EB:B5:35:25:94:AD:DF:42:21:4F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/94b3319a-658a-3317-bf87-91c877d6dd90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl

            X509v3 Authority Key Identifier:
                keyid:B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f950::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:87:1b:ca:ab:34:3a:b0:50:51:07:8d:8f:93:77:b6:3a:b9:
         49:2e:e2:4b:7e:ce:31:e3:fe:20:31:46:c1:d2:80:8d:56:22:
         7c:e4:0d:50:9f:be:31:46:1a:56:69:82:87:98:08:26:ab:10:
         b2:df:ea:41:94:60:45:18:a0:15:66:17:ab:4c:19:8d:c1:b1:
         a0:7f:ac:82:d9:5d:ab:32:c3:15:10:7b:63:33:a2:2f:cd:fc:
         f9:7b:f9:1b:45:6e:47:c6:80:f9:be:19:0e:54:c3:f9:b8:0b:
         96:8f:b5:d0:85:15:d2:96:64:b1:43:db:49:d7:61:b7:a4:0e:
         12:47:2a:a5:15:6b:a0:16:e1:92:15:41:da:e6:84:8d:1d:0d:
         84:09:60:95:c1:2b:bc:24:93:27:68:1f:65:d8:56:cb:3e:04:
         80:b9:a3:b9:8a:13:a5:c1:a2:ae:4a:94:3a:63:56:bf:be:23:
         c6:6d:59:04:1f:4f:2b:bd:6a:39:84:cc:6b:8b:b8:81:35:05:
         80:04:de:bf:ca:14:3a:1d:d1:25:a8:c1:63:95:fb:6d:ef:54:
         ea:2f:13:66:6c:04:36:ad:7b:b9:bb:82:9a:14:3a:ba:61:86:
         3f:ad:b5:c8:86:4d:df:01:3c:b1:d0:08:2b:fb:91:95:be:a0:
         66:a3:52:ed
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEdU4OtNY6OUHdZ6CAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2UzYjUyYzctYjdhNS00NWIwLWEyYTQtZjgyNDJiMmI2
ZTAyMB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
YzIzZjZmYWItZTQ5MC00ZDlhLTljOWEtYjhhMjgyZTI4YzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYXdzO15UtIWVsLiu8f+uJdyb65txyVaDvdv
xA5KJzpG64jyELKi5WgbNTjcfgPbmuHc6IRGlHb1JgpXTQL4LHxlHmbBJEKutQkI
oB4Ajl/j3xe5Geo+h3d5Vz1u4+F9/b8f75joh2CQE6YfNkOOeF4DTOho38FOwGmw
HRRRZP1DIMjlZi+hgF4p+hYwol+vj06eG/GF3/CA7NwZ5IQDHonVG5tdgLv1IlK8
isIrLaUoiT+7/dgNqn3ksa1h2WAHUfKcT9mSwLd9yT+bBxb9ftshy4VSIcihGWjI
SgE1bF+YIE4FRwNKdfDaAdecX2/P/Vmf/tL+Wed8FmySHl2H9wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAqWfyRstFqdYOu1NSWUrd9CIU/GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTNi
NTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0MmIyYjZlMDIvOTRiMzMxOWEtNjU4YS0z
MzE3LWJmODctOTFjODc3ZDZkZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UzYjUyYzctYjdhNS00NWIwLWEy
YTQtZjgyNDJiMmI2ZTAyLzNlM2I1MmM3LWI3YTUtNDViMC1hMmE0LWY4MjQyYjJi
NmUwMi5jcmwwHwYDVR0jBBgwFoAUtHC2EXrIXwKKvpTGbVycJLrG+u4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zZTNiNTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0
MmIyYjZlMDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5UAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABYcbyqs0OrBQUQeNj5N3tjq5SS7iS37OMeP+IDFGwdKAjVYifOQN
UJ++MUYaVmmCh5gIJqsQst/qQZRgRRigFWYXq0wZjcGxoH+sgtldqzLDFRB7YzOi
L838+Xv5G0VuR8aA+b4ZDlTD+bgLlo+10IUV0pZksUPbSddht6QOEkcqpRVroBbh
khVB2uaEjR0NhAlglcErvCSTJ2gfZdhWyz4EgLmjuYoTpcGirkqUOmNWv74jxm1Z
BB9PK71qOYTMa4u4gTUFgATev8oUOh3RJajBY5X7be9U6i8TZmwENq17ubuCmhQ6
umGGP621yIZN3wE8sdAIK/uRlb6gZqNS7Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:32 2024 by rpki-client on console-ams.rpki-client.org