Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/22824fc2-5847-3567-bb08-05cbc0ef7a80.roa
File:                     22824fc2-5847-3567-bb08-05cbc0ef7a80.roa (raw, json)
Hash identifier:          AKTmDh4OS3fzQcDgFV4zAKBdzZVuxCEXZLrjaSqpSIA=
Subject key identifier:   46:7D:8C:C0:26:31:20:A3:CC:37:30:87:2D:22:7F:E6:93:70:93:70
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F4328584785BBB0409A89F8CDE9465C80
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/22824fc2-5847-3567-bb08-05cbc0ef7a80.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        2602:fa70:390::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:b0:40:9a:89:f8:cd:e9:46:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=8c6e33d3-eba9-4ae9-be22-2fde86ff78d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5f:84:37:fb:7f:27:2c:fb:01:13:8c:29:60:
                    0f:cf:cd:27:00:67:17:da:e2:d6:1e:ea:d3:b5:9c:
                    72:c3:bb:ae:33:c3:84:3f:c4:be:0b:bc:72:64:df:
                    66:dd:cb:06:93:8d:39:3a:36:a2:6f:1d:3f:a4:9c:
                    48:1e:1e:0f:8f:d2:1d:53:9e:bb:28:73:48:15:06:
                    34:6e:d6:64:dc:7d:ab:18:0e:5c:98:3a:7c:38:0e:
                    ef:b6:ff:d0:7e:78:89:1c:34:72:79:46:91:a7:67:
                    0f:54:60:0f:cc:61:9b:6b:03:a2:22:c6:a9:9d:4c:
                    11:1c:6b:f5:56:5c:10:b4:e4:67:e5:e8:9c:cc:7c:
                    a1:ec:9c:29:68:a1:d2:4d:a4:96:0f:c5:56:be:9f:
                    44:84:7d:8e:ad:5b:8d:8d:21:c6:69:bd:05:d5:69:
                    3a:ed:2d:60:69:41:c7:a7:24:09:72:d5:28:a2:2d:
                    8f:21:f6:9f:c9:4d:40:e3:db:48:89:c1:40:6d:b5:
                    7e:02:c8:68:d3:79:ae:8a:2c:22:37:d4:aa:47:06:
                    eb:d9:91:76:36:97:b1:96:bf:20:dd:ec:a4:4b:a1:
                    05:7f:7d:36:a8:54:85:db:00:01:f9:23:90:f3:fb:
                    7a:18:db:d9:6e:de:6f:65:00:cb:d2:c2:51:58:88:
                    4f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7D:8C:C0:26:31:20:A3:CC:37:30:87:2D:22:7F:E6:93:70:93:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/22824fc2-5847-3567-bb08-05cbc0ef7a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa70:390::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:69:04:63:76:63:35:d7:84:c4:78:f4:9f:d9:df:98:ed:62:
         33:08:e9:75:c2:e6:78:6a:cc:8a:61:a9:41:6d:b1:87:94:78:
         36:ee:08:d6:c6:99:49:09:7c:bd:88:c7:2d:40:ba:4e:8f:9b:
         e7:53:8d:df:39:c3:fe:94:66:97:eb:3b:ad:1d:fb:7d:23:72:
         8c:5a:88:8a:0c:02:a5:eb:15:55:30:ec:76:91:6b:c1:83:e6:
         31:22:46:6d:29:08:12:a6:9d:66:fb:61:26:3a:ab:36:76:52:
         c7:5b:22:84:64:37:91:72:2a:7b:ec:03:7d:2e:79:24:40:30:
         a4:1c:a5:8a:3f:34:26:c9:e3:26:0f:28:da:d8:41:aa:f2:2e:
         76:97:2e:fc:c1:89:6b:60:a2:d0:50:06:0f:c0:fd:79:d9:d7:
         ee:95:98:4c:67:c7:3c:60:fd:a1:36:26:9a:09:d1:df:eb:f8:
         1a:a0:d7:9b:d8:f5:5f:56:d9:c4:8c:fd:34:a2:de:65:af:6b:
         90:08:f9:09:86:44:80:0a:19:8c:c1:76:0f:d5:d3:89:37:40:
         86:c0:3e:36:65:6c:28:2e:23:5b:11:38:1a:78:66:10:09:a8:
         c0:8b:24:58:79:92:a5:d5:0f:93:48:88:c6:60:38:8f:f3:d9:
         b2:4e:3b:4f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeFu7BAmon4zelGXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU3YjliMjgtNzkzNC00NTRhLThiMmYtMjQ2ZDg4ODlm
ZGJkMB4XDTI0MTAxMzAxMDAzMVoXDTI1MDExMTAyMDAzMVowLzEtMCsGA1UEAxMk
OGM2ZTMzZDMtZWJhOS00YWU5LWJlMjItMmZkZTg2ZmY3OGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F+EN/t/Jyz7AROMKWAPz80nAGcX2uLWHurT
tZxyw7uuM8OEP8S+C7xyZN9m3csGk405Ojaibx0/pJxIHh4Pj9IdU567KHNIFQY0
btZk3H2rGA5cmDp8OA7vtv/QfniJHDRyeUaRp2cPVGAPzGGbawOiIsapnUwRHGv1
VlwQtORn5eiczHyh7JwpaKHSTaSWD8VWvp9EhH2OrVuNjSHGab0F1Wk67S1gaUHH
pyQJctUooi2PIfafyU1A49tIicFAbbV+Asho03muiiwiN9SqRwbr2ZF2Npexlr8g
3eykS6EFf302qFSF2wAB+SOQ8/t6GNvZbt5vZQDL0sJRWIhPDwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEZ9jMAmMSCjzDcwhy0if+aTcJNwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdi
OWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZkODg4OWZkYmQvMjI4MjRmYzItNTg0Ny0z
NTY3LWJiMDgtMDVjYmMwZWY3YTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWU3YjliMjgtNzkzNC00NTRhLThi
MmYtMjQ2ZDg4ODlmZGJkLzFlN2I5YjI4LTc5MzQtNDU0YS04YjJmLTI0NmQ4ODg5
ZmRiZC5jcmwwHwYDVR0jBBgwFoAU7CTbIeW+m2u6JkrzwmZOds7dmxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdiOWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZk
ODg4OWZkYmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6cAOQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABNpBGN2YzXXhMR49J/Z35jtYjMI6XXC5nhqzIphqUFtsYeUeDbu
CNbGmUkJfL2Ixy1Auk6Pm+dTjd85w/6UZpfrO60d+30jcoxaiIoMAqXrFVUw7HaR
a8GD5jEiRm0pCBKmnWb7YSY6qzZ2UsdbIoRkN5FyKnvsA30ueSRAMKQcpYo/NCbJ
4yYPKNrYQaryLnaXLvzBiWtgotBQBg/A/XnZ1+6VmExnxzxg/aE2JpoJ0d/r+Bqg
15vY9V9W2cSM/TSi3mWva5AI+QmGRIAKGYzBdg/V04k3QIbAPjZlbCguI1sROBp4
ZhAJqMCLJFh5kqXVD5NIiMZgOI/z2bJOO08=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org