Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/1bc212ef-c15c-392d-b4e5-648f5755c240.roa
File:                     1bc212ef-c15c-392d-b4e5-648f5755c240.roa (raw, json)
Hash identifier:          LDAubd3vvI2Hi6GXRIbdGeeze5aQk82AU2R9BtKfU7Q=
Subject key identifier:   52:EA:AC:FE:83:11:72:BE:CF:F5:58:72:8D:20:B9:F2:22:80:E5:7E
Certificate issuer:       /CN=77728ad0-067a-4ac0-884f-39d45b479fda
Certificate serial:       010D0C9F43285845D503D08187EE2DCB08A79000
Authority key identifier: D7:9F:73:41:48:B7:DC:6C:32:16:B0:5C:84:6F:63:BC:52:E2:EA:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/1bc212ef-c15c-392d-b4e5-648f5755c240.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     14482
IP address blocks:        2602:fa3b::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/77728ad0-067a-4ac0-884f-39d45b479fda.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/77728ad0-067a-4ac0-884f-39d45b479fda.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:d0:81:87:ee:2d:cb:08:a7:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77728ad0-067a-4ac0-884f-39d45b479fda
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=b14785dd-c607-443b-bed3-1a90a56578d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:f0:bb:84:9d:ee:79:85:1c:51:eb:09:ec:
                    40:b8:2c:f9:07:2c:2e:15:8a:dd:d7:5f:ca:ff:79:
                    ad:d6:c6:c4:75:71:8d:5e:58:8a:61:08:61:14:8f:
                    33:bf:07:22:4b:0f:2a:a9:5f:a1:db:7f:18:97:48:
                    ab:a3:60:9e:bc:af:4d:78:2e:57:27:99:59:37:af:
                    6d:96:b8:f7:30:12:db:38:bb:a2:6d:94:dc:17:34:
                    85:0e:56:df:54:c1:65:3a:2c:65:02:1a:90:32:5b:
                    f3:29:2e:07:0f:da:a0:fd:08:2b:56:1d:67:11:a5:
                    bb:d7:10:12:6d:2b:20:ce:c3:4e:62:4c:d6:4e:d8:
                    44:74:4b:74:63:aa:4e:d4:2b:ee:1d:dd:e8:6a:95:
                    ee:af:b3:44:71:f2:5f:35:72:cc:35:7a:d1:a1:cb:
                    87:f4:13:90:d3:3b:f7:15:a9:17:5f:7b:dd:05:12:
                    31:46:4f:31:fd:90:9a:d9:ab:91:f5:5c:f3:fc:85:
                    d6:9b:2b:0a:e8:24:10:bc:11:c7:49:ed:1b:d0:7b:
                    65:91:10:61:1a:f9:97:c0:6e:e8:6c:d6:5c:21:5c:
                    23:2f:9f:50:3a:20:b7:c1:b8:cc:cd:3b:c2:f6:c5:
                    07:77:87:98:9c:3d:25:f7:c2:eb:f5:19:b5:ce:c1:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EA:AC:FE:83:11:72:BE:CF:F5:58:72:8D:20:B9:F2:22:80:E5:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/1bc212ef-c15c-392d-b4e5-648f5755c240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/77728ad0-067a-4ac0-884f-39d45b479fda.crl

            X509v3 Authority Key Identifier:
                keyid:D7:9F:73:41:48:B7:DC:6C:32:16:B0:5C:84:6F:63:BC:52:E2:EA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa3b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:fc:13:09:f9:7e:1e:65:a0:10:38:95:49:2c:82:d3:8d:99:
         21:62:84:88:1d:dd:2c:d4:52:11:f3:01:83:bc:42:a9:d9:1e:
         ef:c3:24:50:c8:af:eb:d2:83:ce:48:f5:2a:df:e1:ed:0e:2a:
         9f:d0:00:3e:24:4d:b5:9a:4a:3c:aa:b5:05:5e:0b:c0:ee:9a:
         27:81:0f:01:9b:db:6d:00:70:32:c1:1b:7d:ae:49:f6:e8:c8:
         6c:cf:99:0c:75:b5:5f:6d:3f:1a:11:17:82:c5:e4:45:78:c2:
         c2:50:01:b3:97:fc:7e:48:90:bc:8a:5d:9c:74:39:75:ae:9f:
         c5:37:7a:82:7a:8c:15:f4:c8:2d:8f:52:1b:ec:10:8b:c7:7f:
         f6:c8:bb:a7:03:7c:f7:89:77:d1:f7:08:42:49:87:0d:69:fa:
         2d:2a:84:a3:2a:13:f3:ee:5b:95:24:78:4b:65:1e:7c:00:e0:
         a4:ae:68:0b:d1:a8:bb:b8:1e:a0:7c:8e:d1:d4:59:24:34:23:
         24:98:61:9a:74:17:94:26:4f:79:8c:f4:ac:16:45:79:b2:cb:
         c8:9f:9e:50:6f:58:f3:07:86:58:0f:3c:20:30:98:e1:bb:c4:
         25:22:61:10:28:8e:cd:37:2d:7c:bb:1e:76:ce:bb:4c:41:96:
         7a:71:dc:41
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEXVA9CBh+4tywinkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc3MjhhZDAtMDY3YS00YWMwLTg4NGYtMzlkNDViNDc5
ZmRhMB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk
YjE0Nzg1ZGQtYzYwNy00NDNiLWJlZDMtMWE5MGE1NjU3OGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrDwu4Sd7nmFHFHrCexAuCz5BywuFYrd11/K
/3mt1sbEdXGNXliKYQhhFI8zvwciSw8qqV+h238Yl0iro2CevK9NeC5XJ5lZN69t
lrj3MBLbOLuibZTcFzSFDlbfVMFlOixlAhqQMlvzKS4HD9qg/QgrVh1nEaW71xAS
bSsgzsNOYkzWTthEdEt0Y6pO1CvuHd3oapXur7NEcfJfNXLMNXrRocuH9BOQ0zv3
FakXX3vdBRIxRk8x/ZCa2auR9Vzz/IXWmysK6CQQvBHHSe0b0HtlkRBhGvmXwG7o
bNZcIVwjL59QOiC3wbjMzTvC9sUHd4eYnD0l98Lr9Rm1zsEsOwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFLqrP6DEXK+z/VYco0gufIigOV+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83Nzcy
OGFkMC0wNjdhLTRhYzAtODg0Zi0zOWQ0NWI0NzlmZGEvMWJjMjEyZWYtYzE1Yy0z
OTJkLWI0ZTUtNjQ4ZjU3NTVjMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzc3MjhhZDAtMDY3YS00YWMwLTg4
NGYtMzlkNDViNDc5ZmRhLzc3NzI4YWQwLTA2N2EtNGFjMC04ODRmLTM5ZDQ1YjQ3
OWZkYS5jcmwwHwYDVR0jBBgwFoAU159zQUi33GwyFrBchG9jvFLi6tYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83NzcyOGFkMC0wNjdhLTRhYzAtODg0Zi0zOWQ0
NWI0NzlmZGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6OwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAG/wTCfl+HmWgEDiVSSyC042ZIWKEiB3dLNRSEfMBg7xCqdke78Mk
UMiv69KDzkj1Kt/h7Q4qn9AAPiRNtZpKPKq1BV4LwO6aJ4EPAZvbbQBwMsEbfa5J
9ujIbM+ZDHW1X20/GhEXgsXkRXjCwlABs5f8fkiQvIpdnHQ5da6fxTd6gnqMFfTI
LY9SG+wQi8d/9si7pwN894l30fcIQkmHDWn6LSqEoyoT8+5blSR4S2UefADgpK5o
C9Gou7geoHyO0dRZJDQjJJhhmnQXlCZPeYz0rBZFebLLyJ+eUG9Y8weGWA88IDCY
4bvEJSJhECiOzTctfLseds67TEGWenHcQQ==
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:41 2024 by rpki-client on console-fra.rpki-client.org