Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3d204eac-8de5-3fca-995d-20b34553b459.roa
File:                     3d204eac-8de5-3fca-995d-20b34553b459.roa (raw, json)
Hash identifier:          DGqtInZ1YTbYpEsZeQSSIasH9YO7uWDBfZqtUo7gtHo=
Subject key identifier:   12:42:48:AA:3D:86:66:36:A6:8F:82:75:55:55:72:C4:31:62:95:A8
Certificate issuer:       /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial:       010D0C9F432858475EA62D7B69DD3097C8541B40
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3d204eac-8de5-3fca-995d-20b34553b459.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     26904
IP address blocks:        2602:fc15::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:2d:7b:69:dd:30:97:c8:54:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=ea23819b-5a92-4305-a1b7-197d8fa7fd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:28:4d:23:db:51:e3:e2:19:41:b5:25:0e:b4:
                    45:75:54:5f:62:38:33:54:e6:fe:b2:ce:4c:ec:6a:
                    46:a5:9c:ec:fe:eb:19:49:3a:ef:44:d7:92:f8:8e:
                    a8:16:5d:05:82:84:77:a0:83:eb:e3:93:98:8d:c9:
                    b1:77:ec:98:f8:94:78:eb:1f:a3:ed:43:5c:27:8c:
                    bd:4a:4f:f1:ef:d1:fa:5a:e8:af:a8:dd:54:85:d7:
                    2c:de:73:55:46:4d:20:fa:f7:c7:d8:3c:63:a5:ba:
                    4a:07:af:de:c9:d2:b9:fa:8a:1c:32:fd:b7:2d:8b:
                    df:9c:68:42:02:ec:ae:d4:41:0b:0f:31:11:83:15:
                    e4:c3:cc:5b:13:38:73:ca:47:5c:67:76:ab:a7:d7:
                    14:11:63:88:de:b8:38:34:72:5c:c9:5c:60:d4:5f:
                    fb:c0:c6:9a:4c:2c:48:82:25:0c:16:be:45:ba:9d:
                    1f:b4:8b:ce:4d:00:c5:bb:23:24:dd:72:58:c0:31:
                    c1:73:f0:bd:8d:3b:89:56:25:86:db:3b:24:c6:26:
                    bc:db:84:e5:fb:d8:75:c0:3f:7d:d9:31:35:c7:e4:
                    2c:9d:8f:31:29:b4:8e:41:c5:b0:0e:22:01:23:7c:
                    41:22:99:6b:0d:4e:cf:bd:68:79:18:52:cb:ce:45:
                    b2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:42:48:AA:3D:86:66:36:A6:8F:82:75:55:55:72:C4:31:62:95:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3d204eac-8de5-3fca-995d-20b34553b459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl

            X509v3 Authority Key Identifier:
                keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc15::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:5c:77:57:e3:dc:a8:10:f2:f4:4d:4f:53:44:67:cb:27:18:
         58:25:54:3c:4a:e5:67:ff:d2:a9:b1:32:5d:7a:ea:be:16:29:
         30:99:a5:d2:1e:da:75:0a:e2:77:57:ef:2b:bb:e5:a0:fe:15:
         dc:0a:b4:ce:cd:4b:2b:c4:1e:cc:60:b1:d7:68:13:ae:79:f4:
         47:86:5a:a8:aa:22:10:03:35:03:9d:63:c2:7c:ab:15:1d:73:
         f0:c2:b4:c1:55:7b:07:ef:31:fd:22:bf:b6:d6:ce:44:ba:d4:
         c7:73:ba:1c:8b:66:50:ed:39:ac:09:be:ac:76:70:f6:76:69:
         94:55:d0:7a:52:fa:33:1a:01:36:2b:91:5a:50:d4:65:3e:fe:
         99:d2:89:bb:a2:ea:2d:ac:8d:b1:50:c3:7c:71:cc:75:c4:63:
         2d:58:bf:c4:be:5e:80:d4:05:f8:bc:e1:f9:0e:26:9a:3e:80:
         20:23:4c:a6:4e:18:95:6b:d1:fd:25:ed:ef:7e:74:d2:18:35:
         47:27:14:44:67:11:c8:47:cc:dd:ce:dd:48:db:be:5f:8f:83:
         55:0e:7e:98:a6:0f:6d:2c:71:2d:9a:af:e7:c2:36:6b:3a:32:
         ad:1a:90:04:81:51:1f:2c:bf:78:4b:ed:95:29:b0:00:ee:84:
         b6:30:a1:c9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdepi17ad0wl8hUG0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5
MmQ3MB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk
ZWEyMzgxOWItNWE5Mi00MzA1LWExYjctMTk3ZDhmYTdmZDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgShNI9tR4+IZQbUlDrRFdVRfYjgzVOb+ss5M
7GpGpZzs/usZSTrvRNeS+I6oFl0FgoR3oIPr45OYjcmxd+yY+JR46x+j7UNcJ4y9
Sk/x79H6WuivqN1Uhdcs3nNVRk0g+vfH2DxjpbpKB6/eydK5+oocMv23LYvfnGhC
Auyu1EELDzERgxXkw8xbEzhzykdcZ3arp9cUEWOI3rg4NHJcyVxg1F/7wMaaTCxI
giUMFr5Fup0ftIvOTQDFuyMk3XJYwDHBc/C9jTuJViWG2zskxia824Tl+9h1wD99
2TE1x+QsnY8xKbSOQcWwDiIBI3xBIplrDU7PvWh5GFLLzkWyfwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBJCSKo9hmY2po+CdVVVcsQxYpWoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3
MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvM2QyMDRlYWMtOGRlNS0z
ZmNhLTk5NWQtMjBiMzQ1NTNiNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4
Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi
OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez
ZjIzYjkyZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL8FQAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA5cd1fj3KgQ8vRNT1NEZ8snGFglVDxK5Wf/0qmxMl166r4WKTCZ
pdIe2nUK4ndX7yu75aD+FdwKtM7NSyvEHsxgsddoE6559EeGWqiqIhADNQOdY8J8
qxUdc/DCtMFVewfvMf0iv7bWzkS61MdzuhyLZlDtOawJvqx2cPZ2aZRV0HpS+jMa
ATYrkVpQ1GU+/pnSibui6i2sjbFQw3xxzHXEYy1Yv8S+XoDUBfi84fkOJpo+gCAj
TKZOGJVr0f0l7e9+dNIYNUcnFERnEchHzN3O3Ujbvl+Pg1UOfpimD20scS2ar+fC
Nms6Mq0akASBUR8sv3hL7ZUpsADuhLYwock=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org