Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/8739209d-0492-3814-9eef-35e5f7d13167.roa
File:                     8739209d-0492-3814-9eef-35e5f7d13167.roa (raw, json)
Hash identifier:          ukIxD2JhqOyS78CXDTuA7gC8bn8C082dg7AWZP8v924=
Subject key identifier:   62:0A:0B:BC:74:EB:6B:85:2A:3D:4A:A8:E5:D3:DD:6D:E7:89:58:16
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F432858457FDDDAA2B4C23303441E1480
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/8739209d-0492-3814-9eef-35e5f7d13167.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     30690
IP address blocks:        2602:f99b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:da:a2:b4:c2:33:03:44:1e:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=316b99ed-66c0-4040-b905-60be294d4eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:8f:e6:ab:ab:e5:22:4e:73:cd:dc:e1:83:
                    c8:31:83:53:2b:f6:07:e2:bc:9c:51:fc:92:82:17:
                    92:b6:69:05:9b:2e:c1:5b:1d:7d:95:d3:04:0a:d8:
                    99:dd:9a:ac:bf:80:4a:c9:1d:58:89:d0:67:ec:85:
                    93:58:9f:ae:16:24:18:d8:28:ef:37:05:0f:8f:cd:
                    ce:39:75:44:4e:31:92:e9:b6:47:1f:29:a0:b3:19:
                    74:34:83:48:c8:e5:1c:a7:c3:a3:b3:06:58:a6:34:
                    01:39:d9:e1:89:54:81:65:48:ad:86:20:9a:1c:d1:
                    01:8d:03:7a:35:8a:31:47:bb:f7:d9:54:02:8f:66:
                    6a:10:f5:91:89:b9:de:15:8f:f3:ba:39:53:d4:32:
                    a1:a9:f3:3b:0b:d5:b3:ff:d3:16:c7:66:df:61:a4:
                    a0:2f:3c:99:a4:dd:c8:6c:80:30:80:71:d1:7a:78:
                    c5:c0:16:3b:03:fe:89:da:b4:dc:8c:8e:0a:15:d7:
                    7b:14:33:27:6e:a3:3a:1d:2f:46:cd:53:e5:d9:f1:
                    66:5b:00:95:58:52:57:1f:52:b6:33:81:80:e1:89:
                    ba:c0:55:49:ef:83:8d:e5:0a:b0:24:f9:d4:ef:10:
                    c6:c1:69:e0:ba:47:9f:93:ad:43:51:7e:31:be:0b:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0A:0B:BC:74:EB:6B:85:2A:3D:4A:A8:E5:D3:DD:6D:E7:89:58:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/8739209d-0492-3814-9eef-35e5f7d13167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:ce:10:b4:e8:bb:5b:97:67:7b:fd:91:ab:e3:6a:7b:2a:93:
         1d:5d:5c:b9:24:ea:e4:c1:e0:c4:88:eb:e8:72:82:0d:fb:e6:
         07:35:fa:9c:dc:89:a6:b6:87:fe:d0:1a:57:cb:51:db:8a:9c:
         d9:ed:94:76:07:09:c0:40:38:99:1b:af:a3:d7:fb:72:ce:25:
         f3:21:e9:3e:55:05:b7:3d:d2:8c:32:43:e3:6a:7d:03:a2:50:
         ea:98:e5:2d:1c:6a:85:40:69:52:27:99:ee:c3:c2:3a:1a:10:
         6f:a8:5c:bf:6c:63:6e:bc:a3:d4:52:7b:98:7e:42:10:cc:8f:
         ef:42:ab:41:07:70:aa:2e:99:21:de:f3:e0:23:aa:d6:6b:e8:
         a9:0b:fb:a8:cf:f5:58:eb:12:a0:10:73:85:15:c8:82:f9:2e:
         61:dc:52:c2:4a:bc:ec:18:6b:89:0b:e8:77:e0:9f:56:16:38:
         6c:35:d6:a9:0a:16:79:64:14:fa:fe:29:ba:7a:b6:61:fc:70:
         ec:3b:a2:0d:61:12:06:71:fa:6d:37:ae:6a:2b:79:fd:23:df:
         f7:b2:5b:49:ad:d9:74:94:42:1b:f0:5f:db:b2:10:3d:a6:0a:
         39:cb:1e:d7:e2:a9:d2:66:7a:0b:43:9a:ad:d2:aa:07:8e:96:
         67:e4:63:ca
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV/3dqitMIzA0QeFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM1ZmMyM2EtZTQyMi00YzYxLWEyNWEtYjczYjA5NjNi
NmY3MB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk
MzE2Yjk5ZWQtNjZjMC00MDQwLWI5MDUtNjBiZTI5NGQ0ZWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljCP5qur5SJOc83c4YPIMYNTK/YH4rycUfyS
gheStmkFmy7BWx19ldMECtiZ3Zqsv4BKyR1YidBn7IWTWJ+uFiQY2CjvNwUPj83O
OXVETjGS6bZHHymgsxl0NINIyOUcp8OjswZYpjQBOdnhiVSBZUithiCaHNEBjQN6
NYoxR7v32VQCj2ZqEPWRibneFY/zujlT1DKhqfM7C9Wz/9MWx2bfYaSgLzyZpN3I
bIAwgHHRenjFwBY7A/6J2rTcjI4KFdd7FDMnbqM6HS9GzVPl2fFmWwCVWFJXH1K2
M4GA4Ym6wFVJ74ON5QqwJPnU7xDGwWngukefk61DUX4xvgsCNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGIKC7x062uFKj1KqOXT3W3niVgWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMzVm
YzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNiMDk2M2I2ZjcvODczOTIwOWQtMDQ5Mi0z
ODE0LTllZWYtMzVlNWY3ZDEzMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjM1ZmMyM2EtZTQyMi00YzYxLWEy
NWEtYjczYjA5NjNiNmY3L2IzNWZjMjNhLWU0MjItNGM2MS1hMjVhLWI3M2IwOTYz
YjZmNy5jcmwwHwYDVR0jBBgwFoAUjS9eZJw3d6zMTnUYB7+cZ2lqHf4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMzVmYzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNi
MDk2M2I2ZjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5mwAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKLOELTou1uXZ3v9kavjansqkx1dXLkk6uTB4MSI6+hygg375gc1
+pzciaa2h/7QGlfLUduKnNntlHYHCcBAOJkbr6PX+3LOJfMh6T5VBbc90owyQ+Nq
fQOiUOqY5S0caoVAaVInme7DwjoaEG+oXL9sY268o9RSe5h+QhDMj+9Cq0EHcKou
mSHe8+AjqtZr6KkL+6jP9VjrEqAQc4UVyIL5LmHcUsJKvOwYa4kL6Hfgn1YWOGw1
1qkKFnlkFPr+Kbp6tmH8cOw7og1hEgZx+m03rmoref0j3/eyW0mt2XSUQhvwX9uy
ED2mCjnLHtfiqdJmegtDmq3SqgeOlmfkY8o=
-----END CERTIFICATE-----
Generated at Tue Jun 4 17:47:03 2024 by rpki-client on console-ams.rpki-client.org