Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/15db4c7f-a0e2-3d65-b833-2756ea3409a4.roa
File:                     15db4c7f-a0e2-3d65-b833-2756ea3409a4.roa (raw, json)
Hash identifier:          4l1ZoyZQZ/dudCv/2Ae9PWfvVGosZuUIV/Tj74Zimv8=
Subject key identifier:   10:79:AB:01:F3:2E:87:58:25:1D:9B:DA:6D:2D:64:55:B2:79:BF:81
Certificate issuer:       /CN=0679e601-ff38-42c1-9b52-0b5bad96b962
Certificate serial:       010D0C9F43285847ED24B46CE47217799D85192F
Authority key identifier: FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/15db4c7f-a0e2-3d65-b833-2756ea3409a4.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     137509
IP address blocks:        2602:fbe6:10::/44 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:b4:6c:e4:72:17:79:9d:85:19:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0679e601-ff38-42c1-9b52-0b5bad96b962
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=10954707-9213-415f-92dc-fe3436b8042f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:c4:c7:7c:2d:49:01:15:d9:50:5a:00:21:
                    00:4c:7a:ce:93:37:66:dd:48:22:a9:cc:78:39:c7:
                    22:80:e6:b4:31:62:64:ac:a5:08:64:3d:3d:11:da:
                    ec:6b:53:24:7b:42:57:b9:04:0a:f6:8e:8d:15:47:
                    88:1a:2e:8c:1e:7e:e1:97:13:f3:46:d2:40:c8:b7:
                    f0:05:b0:61:33:59:ab:eb:cf:99:ad:16:d3:c6:81:
                    9f:2b:f9:40:3f:01:fe:a7:28:75:08:75:87:00:92:
                    9e:21:03:a1:57:6a:02:19:e1:1b:f2:0b:ab:24:13:
                    bb:fb:3c:54:62:42:3d:99:ff:7b:5e:54:6f:6c:de:
                    8d:ef:dc:47:84:59:92:28:c6:ea:1e:a2:2d:07:e7:
                    5e:a1:99:c1:61:19:aa:87:02:b3:3e:57:63:46:f7:
                    cc:54:d7:20:48:e0:3a:e1:f5:db:9c:f1:6d:3c:2d:
                    95:1f:77:29:e6:c8:7f:e4:b8:90:47:0c:c5:03:ad:
                    b0:71:92:b6:c6:44:be:78:1a:37:53:d9:ca:7d:ef:
                    de:2f:39:b1:7c:03:6c:07:f8:a7:f8:92:72:f3:36:
                    96:16:31:32:de:58:52:90:ce:fd:0c:52:30:9f:89:
                    02:d4:49:86:16:cc:3b:0b:c4:3f:87:64:b9:37:da:
                    40:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:79:AB:01:F3:2E:87:58:25:1D:9B:DA:6D:2D:64:55:B2:79:BF:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/15db4c7f-a0e2-3d65-b833-2756ea3409a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl

            X509v3 Authority Key Identifier:
                keyid:FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbe6:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:b6:a4:4b:44:f0:cf:35:f8:2b:fb:92:35:42:92:d1:af:ed:
         dc:2b:c7:44:f4:31:9a:b9:21:52:82:85:ec:20:5f:ba:86:1f:
         5f:92:36:ea:43:bc:14:71:27:c8:fb:ad:63:9d:97:09:c0:aa:
         ad:d9:1a:ef:e2:1a:f6:87:1e:85:e6:20:92:ee:0d:d9:9b:90:
         23:a5:c1:59:a0:65:25:0d:95:4b:11:ca:1a:45:55:f8:a7:3f:
         c5:87:97:d5:6d:8a:74:62:85:d0:81:6b:77:84:e3:48:ce:9b:
         2f:ca:5f:b6:a3:33:b7:9a:89:fa:3a:bf:f8:5f:7f:84:89:d4:
         30:fa:19:da:1d:8b:3d:af:ef:f6:69:7b:a2:65:36:94:62:fd:
         7d:c1:10:84:12:a2:65:8c:a0:79:b0:fb:6f:50:1e:73:82:14:
         9a:24:6c:20:af:c4:de:2a:dd:e0:ef:e5:0f:ae:c5:3a:02:cc:
         bd:dd:e3:30:84:cf:5e:2b:5f:ab:75:00:79:14:23:a2:f1:bc:
         ab:09:1d:36:b3:a6:9d:1f:5c:71:65:ad:c2:e2:6e:66:92:b3:
         27:34:2f:40:91:f8:de:1f:bd:f8:17:1d:72:d0:11:d8:c3:3d:
         ef:74:0a:97:c3:d8:d3:80:df:4d:c1:f5:bb:26:2d:0d:09:a5:
         d6:94:aa:fd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEftJLRs5HIXeZ2FGS8wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY3OWU2MDEtZmYzOC00MmMxLTliNTItMGI1YmFkOTZi
OTYyMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk
MTA5NTQ3MDctOTIxMy00MTVmLTkyZGMtZmUzNDM2YjgwNDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAPEx3wtSQEV2VBaACEATHrOkzdm3Ugiqcx4
OccigOa0MWJkrKUIZD09Edrsa1Mke0JXuQQK9o6NFUeIGi6MHn7hlxPzRtJAyLfw
BbBhM1mr68+ZrRbTxoGfK/lAPwH+pyh1CHWHAJKeIQOhV2oCGeEb8gurJBO7+zxU
YkI9mf97XlRvbN6N79xHhFmSKMbqHqItB+deoZnBYRmqhwKzPldjRvfMVNcgSOA6
4fXbnPFtPC2VH3cp5sh/5LiQRwzFA62wcZK2xkS+eBo3U9nKfe/eLzmxfANsB/in
+JJy8zaWFjEy3lhSkM79DFIwn4kC1EmGFsw7C8Q/h2S5N9pAwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBB5qwHzLodYJR2b2m0tZFWyeb+BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5
ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjViYWQ5NmI5NjIvMTVkYjRjN2YtYTBlMi0z
ZDY1LWI4MzMtMjc1NmVhMzQwOWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY3OWU2MDEtZmYzOC00MmMxLTli
NTItMGI1YmFkOTZiOTYyLzA2NzllNjAxLWZmMzgtNDJjMS05YjUyLTBiNWJhZDk2
Yjk2Mi5jcmwwHwYDVR0jBBgwFoAU/OZG/SXdIEzcQIFTZ7JzsbFaHJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjVi
YWQ5NmI5NjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL75gAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMG2pEtE8M81+Cv7kjVCktGv7dwrx0T0MZq5IVKChewgX7qGH1+S
NupDvBRxJ8j7rWOdlwnAqq3ZGu/iGvaHHoXmIJLuDdmbkCOlwVmgZSUNlUsRyhpF
VfinP8WHl9VtinRihdCBa3eE40jOmy/KX7ajM7eaifo6v/hff4SJ1DD6Gdodiz2v
7/Zpe6JlNpRi/X3BEIQSomWMoHmw+29QHnOCFJokbCCvxN4q3eDv5Q+uxToCzL3d
4zCEz14rX6t1AHkUI6LxvKsJHTazpp0fXHFlrcLibmaSsyc0L0CR+N4fvfgXHXLQ
EdjDPe90CpfD2NOA303B9bsmLQ0JpdaUqv0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:44 2024 by rpki-client on console-fra.rpki-client.org