Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/73fa706f-955a-33d3-927d-050c17047b65.roa
File:                     73fa706f-955a-33d3-927d-050c17047b65.roa (raw, json)
Hash identifier:          UyRIJHDXs8wyRir0PXaGeZy2ql2wKiQZaRbOQe01KrQ=
Subject key identifier:   11:E1:5F:E9:C3:AD:DD:8F:BE:58:B4:CA:85:3E:2D:98:EC:BC:13:F7
Certificate issuer:       /CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7
Certificate serial:       010D0C9F4328584754E0CD99E4C32C0326B44280
Authority key identifier: BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/73fa706f-955a-33d3-927d-050c17047b65.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        2602:80c::/42 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:cd:99:e4:c3:2c:03:26:b4:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=c15bbee0-7d55-4077-99ec-25b6651362cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ef:43:ea:71:25:51:e8:1c:c6:30:d8:31:ca:
                    e8:d4:bc:33:a1:4f:32:75:1c:f6:11:78:76:78:07:
                    50:ef:5f:5f:d9:13:d0:ac:d0:24:f0:1b:17:e4:46:
                    bd:4e:6e:0a:4c:0c:19:d9:72:e1:a3:7b:22:8b:51:
                    7a:a3:6b:f0:26:03:0a:8c:08:0d:76:58:b3:de:e6:
                    03:a9:e6:1a:7f:e7:4b:cf:ed:0f:60:fb:e9:bb:10:
                    25:be:28:f8:dc:e5:46:50:46:b7:01:b4:8e:74:9a:
                    a1:c0:9e:6d:ee:7d:f0:f1:97:73:09:fc:8d:ad:af:
                    e4:e8:fd:2a:44:80:66:d1:0f:0f:71:3c:b1:cf:a1:
                    38:2d:f9:0e:61:d4:8b:5e:17:35:82:7c:fc:db:e0:
                    24:f9:9b:2f:df:89:28:02:1d:46:ef:bf:60:9f:f3:
                    1d:03:32:52:3d:80:de:b8:84:88:89:ae:4d:3b:a7:
                    30:c9:87:de:98:85:f5:41:41:f7:39:c9:5b:45:3a:
                    d7:99:fc:3e:51:26:52:f7:4e:33:1a:b0:36:fe:a6:
                    61:1f:60:ed:cd:b3:07:f8:5b:81:38:2d:57:6f:52:
                    ac:69:97:87:d9:03:f2:a4:05:ce:fa:b9:7c:76:dc:
                    9b:9b:41:18:94:40:ea:81:7d:cb:97:27:da:15:0a:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E1:5F:E9:C3:AD:DD:8F:BE:58:B4:CA:85:3E:2D:98:EC:BC:13:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/73fa706f-955a-33d3-927d-050c17047b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl

            X509v3 Authority Key Identifier:
                keyid:BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6d:34:ea:40:26:eb:ec:78:1a:90:86:12:47:93:ab:69:95:
         f2:3d:d7:e1:74:c1:16:69:9b:1d:05:25:42:6d:e1:fc:90:b4:
         c2:1e:c7:87:fb:f2:a4:5b:c7:6a:8b:bc:4a:dc:3e:b2:64:a4:
         72:c7:97:87:26:f6:b7:75:78:97:78:81:c0:e8:4d:34:bb:3d:
         70:22:ed:cb:24:13:2d:a4:a6:2e:8e:9f:51:aa:cd:b8:1d:ce:
         65:7e:2c:46:99:91:bd:7f:15:9b:aa:b2:b9:ef:aa:83:23:d7:
         dc:03:7a:f5:6e:78:13:c0:3a:01:b1:d9:b3:d8:69:e4:a3:0d:
         00:65:cf:a4:3c:91:19:b9:5b:3d:90:77:6a:3b:2b:33:b2:21:
         87:05:60:13:19:84:92:38:00:5d:c3:d3:d6:7f:72:5b:9d:f2:
         c5:37:af:7f:77:9a:d9:36:93:aa:3f:80:b4:2c:20:a6:f9:93:
         b6:55:18:9e:b5:fa:99:86:ca:97:e7:bb:c2:ee:74:a9:f6:45:
         d8:87:0c:43:93:a9:dc:4b:a3:e2:d4:05:73:1e:62:47:51:3b:
         9f:be:b8:17:90:1c:c6:f1:26:33:ea:dd:c0:9c:e0:41:c4:cc:
         ba:d0:c5:f0:bb:04:a1:04:01:31:30:26:4c:e2:5a:05:0e:7f:
         a8:23:38:0b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdU4M2Z5MMsAya0QoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRjN2YzMGUtNzBiZS00ZjhjLWJjOGYtNjBiODVkMWI2
OGY3MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
YzE1YmJlZTAtN2Q1NS00MDc3LTk5ZWMtMjViNjY1MTM2MmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO9D6nElUegcxjDYMcro1LwzoU8ydRz2EXh2
eAdQ719f2RPQrNAk8BsX5Ea9Tm4KTAwZ2XLho3sii1F6o2vwJgMKjAgNdliz3uYD
qeYaf+dLz+0PYPvpuxAlvij43OVGUEa3AbSOdJqhwJ5t7n3w8ZdzCfyNra/k6P0q
RIBm0Q8PcTyxz6E4LfkOYdSLXhc1gnz82+Ak+Zsv34koAh1G779gn/MdAzJSPYDe
uISIia5NO6cwyYfemIX1QUH3OclbRTrXmfw+USZS904zGrA2/qZhH2DtzbMH+FuB
OC1Xb1KsaZeH2QPypAXO+rl8dtybm0EYlEDqgX3LlyfaFQoWfQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBHhX+nDrd2Pvli0yoU+LZjsvBP3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NGM3
ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4NWQxYjY4ZjcvNzNmYTcwNmYtOTU1YS0z
M2QzLTkyN2QtMDUwYzE3MDQ3YjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzRjN2YzMGUtNzBiZS00ZjhjLWJj
OGYtNjBiODVkMWI2OGY3Lzc0YzdmMzBlLTcwYmUtNGY4Yy1iYzhmLTYwYjg1ZDFi
NjhmNy5jcmwwHwYDVR0jBBgwFoAUvT8d3y7wTu8fXjVGgXxUE+Gl7UMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83NGM3ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4
NWQxYjY4ZjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgIIDAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAJtNOpAJuvseBqQhhJHk6tplfI91+F0wRZpmx0FJUJt4fyQtMIe
x4f78qRbx2qLvErcPrJkpHLHl4cm9rd1eJd4gcDoTTS7PXAi7cskEy2kpi6On1Gq
zbgdzmV+LEaZkb1/FZuqsrnvqoMj19wDevVueBPAOgGx2bPYaeSjDQBlz6Q8kRm5
Wz2Qd2o7KzOyIYcFYBMZhJI4AF3D09Z/clud8sU3r393mtk2k6o/gLQsIKb5k7ZV
GJ61+pmGypfnu8LudKn2RdiHDEOTqdxLo+LUBXMeYkdRO5++uBeQHMbxJjPq3cCc
4EHEzLrQxfC7BKEEATEwJkziWgUOf6gjOAs=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:47:21 2024 by rpki-client on console-ams.rpki-client.org