Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa
File:                     ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa (raw, json)
Hash identifier:          a+JLwFG/R7q2BXBvA/5Qax6nAAjRyBAKdFWOyWWy7Lc=
Subject key identifier:   C6:86:0A:5B:C5:E4:C7:CD:86:63:C2:AD:CE:19:AB:D3:6C:BE:55:BD
Certificate issuer:       /CN=d49742e8-8d0c-4209-b76f-403554b0e6b4
Certificate serial:       010D0C9F4328584789EBFB4D3E087D67DEABFC40
Authority key identifier: C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     992
IP address blocks:        2602:810:5001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fb:4d:3e:08:7d:67:de:ab:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=25b25ec4-5f6c-4950-b297-ecea566afbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a5:04:70:5b:58:e5:13:80:69:7b:f2:da:29:
                    69:ce:49:66:87:e4:99:55:9c:73:b5:93:84:01:ad:
                    4c:13:68:0b:01:87:1d:f0:49:82:f4:e7:b3:6a:d6:
                    95:64:9d:12:f2:17:16:23:5d:c2:43:b6:02:a1:45:
                    f9:6e:e6:34:f7:24:52:c4:e4:15:c3:1a:49:bf:55:
                    46:f1:f6:7d:cb:00:34:b4:13:ed:11:f6:0a:7a:06:
                    81:77:ee:8e:5b:93:c8:21:88:5d:e0:27:12:16:80:
                    d6:e1:8e:d7:93:0e:cb:d1:fe:3b:3f:db:55:20:63:
                    50:27:1e:45:60:51:7a:65:7c:de:d1:a1:98:bf:0a:
                    50:28:fc:29:9b:ad:bb:10:5c:36:16:fc:12:84:d0:
                    bd:10:bd:0d:d8:f2:a2:68:93:bd:45:61:09:12:69:
                    3c:46:a8:4b:c4:5e:72:04:de:c4:e5:0e:66:89:43:
                    dd:0b:43:4e:4d:9d:e2:9d:fc:7c:18:04:88:cd:61:
                    9d:00:82:d3:49:72:77:d3:e6:f4:5a:62:c6:e0:d3:
                    fa:3a:fc:6f:58:3b:f6:9d:8c:e0:ea:1e:1c:05:f8:
                    a2:af:29:29:84:d4:43:16:17:08:08:b6:52:6f:10:
                    c2:b5:3d:cf:be:13:ae:0f:59:41:69:35:bc:be:bb:
                    6a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:86:0A:5B:C5:E4:C7:CD:86:63:C2:AD:CE:19:AB:D3:6C:BE:55:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl

            X509v3 Authority Key Identifier:
                keyid:C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:5001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:da:be:13:d9:15:94:40:87:f7:01:bb:3e:c1:b6:1a:ab:49:
         ae:d8:f9:af:56:b6:2a:4a:a7:75:02:9f:71:b7:38:2a:dd:86:
         df:b2:77:ba:b6:47:c0:b4:43:15:b3:8a:39:7b:74:b3:9b:fd:
         7c:01:59:37:5d:43:a0:48:aa:8a:4f:5d:bd:91:88:3b:7a:c7:
         f7:80:61:73:84:a4:81:45:d3:cb:00:f4:b5:c8:9b:63:68:3b:
         8a:25:db:c0:3d:19:4e:b3:f2:2b:0b:5c:d5:dc:f2:f3:2f:ca:
         d6:16:25:cc:9c:0f:1f:36:bb:57:7e:91:d4:4d:75:3a:df:94:
         19:13:6a:e6:f1:88:80:9f:5d:0e:d7:71:5a:d2:56:c3:e8:48:
         7d:58:75:67:46:bb:49:81:e8:9c:78:75:4e:6f:92:23:26:b4:
         8c:76:41:17:8b:ab:7c:c7:75:7e:26:c8:fa:47:f3:59:42:ad:
         ac:df:a2:be:16:90:45:c1:0c:df:68:cd:e0:1d:83:8a:80:0f:
         d7:b1:d6:62:af:ff:97:8c:f6:0c:99:3a:6e:4b:a8:f3:d4:24:
         6e:4a:54:42:17:b0:da:c2:8a:fb:92:bc:9b:96:60:ff:45:d0:
         fb:d6:26:ea:ff:f7:e1:d7:4b:87:40:cc:c1:f3:e7:72:f7:46:
         ad:00:04:5a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeJ6/tNPgh9Z96r/EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ5NzQyZTgtOGQwYy00MjA5LWI3NmYtNDAzNTU0YjBl
NmI0MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk
MjViMjVlYzQtNWY2Yy00OTUwLWIyOTctZWNlYTU2NmFmYmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKUEcFtY5ROAaXvy2ilpzklmh+SZVZxztZOE
Aa1ME2gLAYcd8EmC9OezataVZJ0S8hcWI13CQ7YCoUX5buY09yRSxOQVwxpJv1VG
8fZ9ywA0tBPtEfYKegaBd+6OW5PIIYhd4CcSFoDW4Y7Xkw7L0f47P9tVIGNQJx5F
YFF6ZXze0aGYvwpQKPwpm627EFw2FvwShNC9EL0N2PKiaJO9RWEJEmk8RqhLxF5y
BN7E5Q5miUPdC0NOTZ3infx8GASIzWGdAILTSXJ30+b0WmLG4NP6OvxvWDv2nYzg
6h4cBfiirykphNRDFhcICLZSbxDCtT3PvhOuD1lBaTW8vrtqtwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMaGClvF5MfNhmPCrc4Zq9NsvlW9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3
NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1NTRiMGU2YjQvZWE5YzM4M2YtMTI2Yi0z
ZGY3LWJhM2MtMTlmYzVjMjM5YjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5NzQyZTgtOGQwYy00MjA5LWI3
NmYtNDAzNTU0YjBlNmI0L2Q0OTc0MmU4LThkMGMtNDIwOS1iNzZmLTQwMzU1NGIw
ZTZiNC5jcmwwHwYDVR0jBBgwFoAUyXTCOGJ1ZdT2dzWU5jbMl87yC+wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1
NTRiMGU2YjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIEFAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIDavhPZFZRAh/cBuz7BthqrSa7Y+a9WtipKp3UCn3G3OCrdht+y
d7q2R8C0QxWzijl7dLOb/XwBWTddQ6BIqopPXb2RiDt6x/eAYXOEpIFF08sA9LXI
m2NoO4ol28A9GU6z8isLXNXc8vMvytYWJcycDx82u1d+kdRNdTrflBkTaubxiICf
XQ7XcVrSVsPoSH1YdWdGu0mB6Jx4dU5vkiMmtIx2QReLq3zHdX4myPpH81lCrazf
or4WkEXBDN9ozeAdg4qAD9ex1mKv/5eM9gyZOm5LqPPUJG5KVEIXsNrCivuSvJuW
YP9F0PvWJur/9+HXS4dAzMHz53L3Rq0ABFo=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:00:49 2024 by rpki-client on console-fra.rpki-client.org