Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/31b19ccf-3771-3488-afcc-3b9d947962e2.roa
File:                     31b19ccf-3771-3488-afcc-3b9d947962e2.roa (raw, json)
Hash identifier:          yjpL+0URxM9sbpDhGSJ9pF0RIZJVfI92mgYtGxe/VO4=
Subject key identifier:   4D:18:C8:97:18:F2:66:35:C8:13:C7:74:C1:9D:97:59:02:45:FD:18
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F43285845CB3E4BAD6F8EAEBDB6039C00
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/31b19ccf-3771-3488-afcc-3b9d947962e2.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     61112
IP address blocks:        2602:fa4f:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:4b:ad:6f:8e:ae:bd:b6:03:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=73c40253-ff8d-4d75-95b1-b654b458d9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c2:f9:6b:5f:fa:d3:39:c7:d2:fe:09:a4:8d:
                    46:f2:3c:f9:b5:8a:11:34:da:97:85:80:d7:4c:59:
                    5c:65:b7:d8:c8:66:4b:ad:be:13:df:19:27:4d:46:
                    31:70:05:bd:48:a8:a1:ba:c4:01:08:37:1d:fc:b6:
                    9d:00:d9:32:03:b3:d7:7f:c0:c9:ca:52:3b:92:b6:
                    a8:e0:e0:cb:99:7e:60:f4:31:97:40:17:0b:18:93:
                    6d:7e:80:7e:21:ce:19:ae:ea:1f:80:13:ca:9f:99:
                    3a:dd:50:00:0d:5b:ac:6f:5f:e9:a2:5b:fd:46:87:
                    a5:87:58:e8:d3:9c:e8:a4:81:4b:73:12:bd:8c:88:
                    e3:2a:7d:8f:85:c1:55:fc:0e:3d:b8:97:bb:ad:db:
                    12:29:33:5f:6a:7f:de:5c:68:bb:83:65:b5:31:ff:
                    5a:02:2a:4a:9d:07:b1:56:27:cb:75:f1:a9:44:ae:
                    3d:51:8a:c1:ea:02:a3:ff:89:e6:58:cb:1b:31:ff:
                    16:4c:4f:f8:7a:a2:2d:58:86:a7:53:82:8c:66:bd:
                    88:73:0c:da:b0:f8:c0:da:43:3f:d9:3c:d5:39:56:
                    6b:bc:da:84:c7:40:64:bb:3d:62:fd:dd:cc:65:22:
                    4d:62:08:69:6f:c0:5d:77:4c:76:c7:6d:0e:41:e3:
                    98:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:18:C8:97:18:F2:66:35:C8:13:C7:74:C1:9D:97:59:02:45:FD:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/31b19ccf-3771-3488-afcc-3b9d947962e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:32:3c:28:9a:58:da:fb:25:21:1e:a7:f5:8f:15:af:4f:52:
         17:79:80:14:44:a5:31:52:34:5e:7b:70:5f:0d:14:02:18:34:
         be:49:d2:cb:45:f5:a6:ec:0a:27:43:a7:82:62:40:e2:65:f8:
         1c:97:a1:c3:69:fa:9e:7b:37:f5:71:5d:e0:cd:fb:ee:4e:73:
         60:cd:9c:7e:2a:89:71:e0:d1:fe:c0:5a:43:74:0e:13:be:11:
         1f:ab:43:df:75:c9:ba:b3:d8:fb:74:5d:de:6c:44:b2:be:b2:
         39:7a:b3:a6:90:b1:0e:68:86:6f:e6:a0:4e:90:95:e2:95:41:
         1f:97:92:c0:bd:e2:d7:79:f1:17:25:e4:1b:19:50:f5:21:50:
         42:20:da:38:c9:23:f5:65:09:d3:66:35:0e:28:b3:73:58:a1:
         53:bd:54:b7:a4:8c:4a:76:cb:bf:3b:fb:c1:94:52:76:1d:91:
         13:0c:35:23:5a:4b:2b:1f:9f:c7:65:8d:6e:b2:ce:22:ee:fd:
         b0:34:cf:ba:61:82:e1:03:0b:82:b9:7b:7e:71:f0:97:0a:c2:
         54:59:a1:b7:8f:b4:4d:bf:b6:fd:e6:c7:fb:84:eb:02:1c:31:
         8e:9c:d9:99:24:14:a3:fd:d1:79:3f:55:09:77:83:ab:d3:5f:
         67:a9:ef:31
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEXLPkutb46uvbYDnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2
YmY3MB4XDTI0MDUwNzEzMDAzNVoXDTI0MDgwNTEzMDAzNVowLzEtMCsGA1UEAxMk
NzNjNDAyNTMtZmY4ZC00ZDc1LTk1YjEtYjY1NGI0NThkOWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ML5a1/60znH0v4JpI1G8jz5tYoRNNqXhYDX
TFlcZbfYyGZLrb4T3xknTUYxcAW9SKihusQBCDcd/LadANkyA7PXf8DJylI7krao
4ODLmX5g9DGXQBcLGJNtfoB+Ic4ZruofgBPKn5k63VAADVusb1/polv9Roelh1jo
05zopIFLcxK9jIjjKn2PhcFV/A49uJe7rdsSKTNfan/eXGi7g2W1Mf9aAipKnQex
VifLdfGpRK49UYrB6gKj/4nmWMsbMf8WTE/4eqItWIanU4KMZr2IcwzasPjA2kM/
2TzVOVZrvNqEx0Bkuz1i/d3MZSJNYghpb8Bdd0x2x20OQeOYYwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE0YyJcY8mY1yBPHdMGdl1kCRf0YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4
ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvMzFiMTljY2YtMzc3MS0z
NDg4LWFmY2MtM2I5ZDk0Nzk2MmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1
ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2
NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4
ZTU2NjZiZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6TwEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZzI8KJpY2vslIR6n9Y8Vr09SF3mAFESlMVI0XntwXw0UAhg0vknS
y0X1puwKJ0OngmJA4mX4HJehw2n6nns39XFd4M377k5zYM2cfiqJceDR/sBaQ3QO
E74RH6tD33XJurPY+3Rd3mxEsr6yOXqzppCxDmiGb+agTpCV4pVBH5eSwL3i13nx
FyXkGxlQ9SFQQiDaOMkj9WUJ02Y1Diizc1ihU71Ut6SMSnbLvzv7wZRSdh2REww1
I1pLKx+fx2WNbrLOIu79sDTPumGC4QMLgrl7fnHwlwrCVFmht4+0Tb+2/ebH+4Tr
AhwxjpzZmSQUo/3ReT9VCXeDq9NfZ6nvMQ==
-----END CERTIFICATE-----
Generated at Sun May 19 15:54:23 2024 by rpki-client on console-fra.rpki-client.org