Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/07fb30ae-1f64-3350-bfb6-8f95e0ef27de.roa
File:                     07fb30ae-1f64-3350-bfb6-8f95e0ef27de.roa (raw, json)
Hash identifier:          iQRxclBMhFTAcgwhasOkvrYOz4hn3caVLIlI8Hga/fo=
Subject key identifier:   74:F4:B1:32:2E:E4:88:86:72:27:51:98:0F:1F:E7:2B:4E:A7:39:08
Certificate issuer:       /CN=206290f3-53e1-4d17-8678-29dace17c006
Certificate serial:       010D0C9F43285845B7B38DF9CCF93EE2C54CF600
Authority key identifier: B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/07fb30ae-1f64-3350-bfb6-8f95e0ef27de.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     64289
IP address blocks:        2602:fa21:8::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:8d:f9:cc:f9:3e:e2:c5:4c:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206290f3-53e1-4d17-8678-29dace17c006
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=463ebaac-61d7-4149-b720-d2312e4a5380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ef:2d:a1:5c:77:1f:e7:e3:7e:3a:6f:92:70:
                    9a:d8:7d:0b:dc:27:a8:5c:8f:43:6e:72:e7:ed:ca:
                    be:a0:47:81:72:d6:79:6d:b5:30:8f:9f:53:39:ff:
                    fc:14:24:f5:ff:9c:08:31:ff:3f:9b:38:2f:8d:bd:
                    57:65:9a:51:a3:02:27:2e:37:d3:a9:7a:fe:08:a1:
                    f5:6b:cb:08:8c:46:9b:f9:f0:e9:e8:d0:95:51:4f:
                    30:d3:85:a8:a7:4e:04:c5:e2:52:75:a5:65:35:ef:
                    f1:1c:ed:a1:0f:76:1a:63:6c:9f:d1:d7:7e:df:dc:
                    9c:ec:da:7b:03:58:3f:59:81:b0:7c:47:2d:c1:94:
                    2a:e1:1b:a4:47:ad:ac:b9:2e:f0:48:22:f3:8c:bb:
                    04:4a:cd:bb:bc:b6:ad:8f:82:bb:76:31:3a:0c:d1:
                    0a:e3:04:83:40:60:65:48:a9:62:c3:01:cc:b6:cb:
                    0c:e8:d5:de:9e:a1:d2:ec:bd:21:00:4a:9b:c0:6d:
                    ab:fa:f8:c6:c0:d0:b6:50:aa:d0:cf:3c:6e:89:a6:
                    3a:da:45:4a:0e:ef:0e:92:9c:ce:69:5e:41:9f:d1:
                    e6:72:0b:71:d5:c0:28:16:41:11:6d:35:e9:67:f0:
                    aa:7f:0c:13:7e:ce:08:d2:01:54:14:42:9f:80:fc:
                    be:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F4:B1:32:2E:E4:88:86:72:27:51:98:0F:1F:E7:2B:4E:A7:39:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/07fb30ae-1f64-3350-bfb6-8f95e0ef27de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl

            X509v3 Authority Key Identifier:
                keyid:B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa21:8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:4e:31:b7:f6:ca:d1:4b:b9:24:f1:1d:b3:99:aa:99:e4:35:
         f1:c8:d6:71:e8:a0:7d:fc:6c:91:34:1a:69:9b:65:f0:66:e0:
         d5:c7:b1:a0:63:b0:ae:5d:8d:20:5b:15:0a:73:2b:9c:8f:96:
         ea:0f:2a:d2:e0:9d:40:4b:47:58:dd:80:45:c0:59:a7:26:08:
         74:83:58:d3:ac:bf:00:9b:b1:61:23:de:81:ac:52:88:34:c7:
         52:af:1d:6d:bd:57:a7:ad:f3:8c:c7:a7:4f:1d:b6:4d:b3:d1:
         09:33:1c:e8:ad:a6:51:b1:b6:fc:96:a2:10:08:5d:1e:ba:20:
         5a:83:36:5c:6d:a9:3e:67:97:09:cb:0b:16:d0:e1:65:ba:ba:
         7b:31:79:cb:a8:59:88:b3:e6:fc:87:1f:7e:c6:26:a0:df:5a:
         c7:17:41:0b:d0:d5:c2:71:05:d6:9a:0c:96:9f:7e:0e:80:b0:
         c1:67:27:63:e2:9e:e8:ea:66:52:d5:89:39:66:2f:83:27:4f:
         2c:83:27:32:9d:8f:4a:4a:b6:4b:2e:59:1f:73:6e:50:04:f4:
         4e:53:dc:38:d7:c6:84:06:74:bd:bf:b3:25:24:de:c6:57:7e:
         05:c6:70:53:f8:ee:a6:2a:c3:ca:f0:6d:19:83:05:ed:f8:29:
         0b:4a:e8:fe
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEW3s435zPk+4sVM9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA2MjkwZjMtNTNlMS00ZDE3LTg2NzgtMjlkYWNlMTdj
MDA2MB4XDTI0MDQzMDEzMDAzNFoXDTI0MDcyOTEzMDAzNFowLzEtMCsGA1UEAxMk
NDYzZWJhYWMtNjFkNy00MTQ5LWI3MjAtZDIzMTJlNGE1MzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu8toVx3H+fjfjpvknCa2H0L3CeoXI9DbnLn
7cq+oEeBctZ5bbUwj59TOf/8FCT1/5wIMf8/mzgvjb1XZZpRowInLjfTqXr+CKH1
a8sIjEab+fDp6NCVUU8w04Wop04ExeJSdaVlNe/xHO2hD3YaY2yf0dd+39yc7Np7
A1g/WYGwfEctwZQq4RukR62suS7wSCLzjLsESs27vLatj4K7djE6DNEK4wSDQGBl
SKliwwHMtssM6NXenqHS7L0hAEqbwG2r+vjGwNC2UKrQzzxuiaY62kVKDu8OkpzO
aV5Bn9Hmcgtx1cAoFkERbTXpZ/CqfwwTfs4I0gFUFEKfgPy+jQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHT0sTIu5IiGcidRmA8f5ytOpzkIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYy
OTBmMy01M2UxLTRkMTctODY3OC0yOWRhY2UxN2MwMDYvMDdmYjMwYWUtMWY2NC0z
MzUwLWJmYjYtOGY5NWUwZWYyN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjA2MjkwZjMtNTNlMS00ZDE3LTg2
NzgtMjlkYWNlMTdjMDA2LzIwNjI5MGYzLTUzZTEtNGQxNy04Njc4LTI5ZGFjZTE3
YzAwNi5jcmwwHwYDVR0jBBgwFoAUsHV107looknvuXfhkkalRpfsG/gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYyOTBmMy01M2UxLTRkMTctODY3OC0yOWRh
Y2UxN2MwMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgL6IQAI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGBOMbf2ytFLuSTxHbOZqpnkNfHI1nHooH38bJE0GmmbZfBm4NXH
saBjsK5djSBbFQpzK5yPluoPKtLgnUBLR1jdgEXAWacmCHSDWNOsvwCbsWEj3oGs
Uog0x1KvHW29V6et84zHp08dtk2z0QkzHOitplGxtvyWohAIXR66IFqDNlxtqT5n
lwnLCxbQ4WW6unsxecuoWYiz5vyHH37GJqDfWscXQQvQ1cJxBdaaDJaffg6AsMFn
J2PinujqZlLViTlmL4MnTyyDJzKdj0pKtksuWR9zblAE9E5T3DjXxoQGdL2/syUk
3sZXfgXGcFP47qYqw8rwbRmDBe34KQtK6P4=
-----END CERTIFICATE-----
Generated at Sat Jun 1 16:35:01 2024 by rpki-client on console-ams.rpki-client.org