Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/a7ff3d4a-e1d6-3346-95b0-74995851664e.roa
File:                     a7ff3d4a-e1d6-3346-95b0-74995851664e.roa (raw, json)
Hash identifier:          E/9Jaf1auh2ADpVM8WG6PPNLso6crvjdD0ZVsJ7jHpE=
Subject key identifier:   46:B9:48:60:39:DA:30:49:C4:60:A9:B6:5E:24:76:91:98:41:D4:66
Certificate issuer:       /CN=791130fd-44cf-4486-92b3-7838b38e49ea
Certificate serial:       010D0C9F43285847B10163CC98140E96323C1880
Authority key identifier: F4:0F:25:D4:C4:B7:2D:A3:55:8D:66:06:95:9E:F1:E9:CF:98:04:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/a7ff3d4a-e1d6-3346-95b0-74995851664e.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     150698
IP address blocks:        2602:fa65::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:63:cc:98:14:0e:96:32:3c:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=791130fd-44cf-4486-92b3-7838b38e49ea
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=57801107-00bf-456b-b6d5-9d73cffc4dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3b:88:55:ec:9e:bc:21:ef:31:02:74:87:84:
                    b9:a1:cd:5d:f9:c5:38:42:51:95:7c:a3:9a:61:31:
                    59:72:da:d9:38:c8:49:a0:ec:66:8c:13:9b:5c:a2:
                    d4:66:36:0c:73:7a:94:8e:2e:f2:5e:b8:f8:93:07:
                    b2:84:1a:5d:88:b1:3f:f5:78:43:0d:10:35:30:00:
                    e9:e4:f6:3f:ed:3a:fa:af:0f:73:85:49:9c:41:43:
                    20:d3:cf:d8:e8:a4:28:cc:ce:1d:bd:77:1d:eb:dc:
                    ec:0c:ea:ff:9b:4d:01:c7:d2:8f:92:14:8c:43:57:
                    7e:d8:2a:87:7c:84:95:f9:71:bb:ae:ce:a3:52:e1:
                    1d:c8:b9:fd:77:f2:14:5a:71:69:69:c8:d4:85:8e:
                    07:c8:14:86:f5:6a:f5:11:47:cd:a8:48:67:bc:07:
                    eb:2d:d3:63:4e:10:b0:ad:27:80:f9:dc:42:36:97:
                    92:24:d0:ff:17:57:84:3c:ee:9c:45:70:80:6d:73:
                    28:8e:89:72:70:29:64:5a:44:94:4f:d7:23:35:50:
                    cd:0c:57:a4:15:a0:99:61:d9:66:d0:28:5b:ec:02:
                    d0:de:80:27:f7:80:81:ea:6b:4b:eb:10:77:1a:ae:
                    21:e5:df:f9:03:bc:b6:0f:7b:68:b5:da:e9:c8:29:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B9:48:60:39:DA:30:49:C4:60:A9:B6:5E:24:76:91:98:41:D4:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/a7ff3d4a-e1d6-3346-95b0-74995851664e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.crl

            X509v3 Authority Key Identifier:
                keyid:F4:0F:25:D4:C4:B7:2D:A3:55:8D:66:06:95:9E:F1:E9:CF:98:04:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa65::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:53:26:d9:75:43:c4:b3:fe:6f:f6:dc:23:93:8e:6c:78:e1:
         67:04:b2:35:3e:5b:91:50:62:86:7a:5c:64:3e:16:df:5d:e5:
         44:35:e0:2a:35:aa:51:11:32:9f:c5:3a:59:07:9c:09:4f:73:
         f7:11:1b:d3:bc:8f:72:bc:f3:82:fb:18:36:5f:fa:c4:e5:20:
         24:59:53:29:cb:3c:f7:ee:49:57:5b:61:e2:60:2a:18:3d:88:
         eb:2e:96:58:dd:0d:60:e1:74:8e:c1:5d:1c:80:3f:6b:3e:40:
         5f:ef:dd:cd:e8:dc:96:7d:ea:6a:ff:03:e7:05:5c:32:10:5c:
         13:71:56:11:d6:02:18:16:26:ce:79:86:f3:e6:d8:fc:b7:9a:
         14:ab:b5:44:dd:4e:47:49:b9:33:90:c7:43:38:29:96:c4:78:
         f4:df:f0:ea:a9:67:f0:e5:fc:93:76:99:71:08:cc:01:9c:aa:
         d1:9b:54:a2:66:da:b1:13:f7:b0:9c:5f:7a:50:72:c1:06:8a:
         96:20:a7:72:07:54:6e:af:df:c9:ab:65:15:dc:38:16:a0:6e:
         6d:e5:33:8f:e5:16:51:b3:9d:8d:a9:62:53:f3:dc:9a:b8:27:
         e2:93:10:49:c9:5d:5f:fe:3d:97:f8:8b:ff:17:fe:3a:f3:d8:
         39:05:a4:73
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEexAWPMmBQOljI8GIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzkxMTMwZmQtNDRjZi00NDg2LTkyYjMtNzgzOGIzOGU0
OWVhMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk
NTc4MDExMDctMDBiZi00NTZiLWI2ZDUtOWQ3M2NmZmM0ZGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTuIVeyevCHvMQJ0h4S5oc1d+cU4QlGVfKOa
YTFZctrZOMhJoOxmjBObXKLUZjYMc3qUji7yXrj4kweyhBpdiLE/9XhDDRA1MADp
5PY/7Tr6rw9zhUmcQUMg08/Y6KQozM4dvXcd69zsDOr/m00Bx9KPkhSMQ1d+2CqH
fISV+XG7rs6jUuEdyLn9d/IUWnFpacjUhY4HyBSG9Wr1EUfNqEhnvAfrLdNjThCw
rSeA+dxCNpeSJND/F1eEPO6cRXCAbXMojolycClkWkSUT9cjNVDNDFekFaCZYdlm
0Chb7ALQ3oAn94CB6mtL6xB3Gq4h5d/5A7y2D3totdrpyCmoFwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEa5SGA52jBJxGCptl4kdpGYQdRmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83OTEx
MzBmZC00NGNmLTQ0ODYtOTJiMy03ODM4YjM4ZTQ5ZWEvYTdmZjNkNGEtZTFkNi0z
MzQ2LTk1YjAtNzQ5OTU4NTE2NjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzkxMTMwZmQtNDRjZi00NDg2LTky
YjMtNzgzOGIzOGU0OWVhLzc5MTEzMGZkLTQ0Y2YtNDQ4Ni05MmIzLTc4MzhiMzhl
NDllYS5jcmwwHwYDVR0jBBgwFoAU9A8l1MS3LaNVjWYGlZ7x6c+YBM8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83OTExMzBmZC00NGNmLTQ0ODYtOTJiMy03ODM4
YjM4ZTQ5ZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6ZQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbVMm2XVDxLP+b/bcI5OObHjhZwSyNT5bkVBihnpcZD4W313lRDXg
KjWqUREyn8U6WQecCU9z9xEb07yPcrzzgvsYNl/6xOUgJFlTKcs89+5JV1th4mAq
GD2I6y6WWN0NYOF0jsFdHIA/az5AX+/dzejcln3qav8D5wVcMhBcE3FWEdYCGBYm
znmG8+bY/LeaFKu1RN1OR0m5M5DHQzgplsR49N/w6qln8OX8k3aZcQjMAZyq0ZtU
ombasRP3sJxfelBywQaKliCncgdUbq/fyatlFdw4FqBubeUzj+UWUbOdjaliU/Pc
mrgn4pMQScldX/49l/iL/xf+OvPYOQWkcw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:26 2024 by rpki-client on console-fra.rpki-client.org