Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f0875c5d-ee9e-3f7e-8a41-81f8031211db.roa
File:                     f0875c5d-ee9e-3f7e-8a41-81f8031211db.roa (raw, json)
Hash identifier:          iqISZ1DcsyEvVZNBbUrYvOb4Gfy5BRBMoObzmjTQNdc=
Subject key identifier:   7D:61:4A:B0:42:50:DC:1A:D4:97:58:9D:3D:E9:7D:1A:3C:48:43:ED
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F43285845A6F3704BF5CD4F762B59D280
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f0875c5d-ee9e-3f7e-8a41-81f8031211db.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     801
IP address blocks:        2602:fa2e:8a1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:70:4b:f5:cd:4f:76:2b:59:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=532927f3-2238-416c-9f91-068764b574d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:4d:3d:f7:e1:3f:02:de:e4:79:53:6a:9a:
                    fe:6f:89:08:17:37:49:99:4d:45:ea:89:54:1a:2b:
                    ff:c3:58:b9:0c:c5:90:c8:f7:01:54:81:75:41:3d:
                    0f:8b:5c:78:67:09:5a:32:ec:0e:91:ec:ad:f8:34:
                    57:e4:1a:28:68:2f:4a:80:d5:b8:e5:f8:86:81:83:
                    dc:9f:8c:83:8a:9e:cc:fd:d9:a5:67:ee:1b:ba:ae:
                    d2:20:50:a1:01:4c:d4:32:13:e0:9a:65:0f:39:8b:
                    76:be:b8:5e:47:fa:f2:30:a6:65:f7:86:69:5e:80:
                    8d:ba:c1:19:ad:95:ba:4d:0b:75:58:e0:93:5e:8b:
                    aa:c7:5a:c5:c1:61:c1:2f:9e:f5:3e:83:34:43:84:
                    12:3f:d0:10:c2:39:76:9b:d7:17:60:a9:0e:83:22:
                    c5:f5:3a:3d:71:f7:80:89:bc:5f:30:42:0f:9b:75:
                    46:3d:22:cf:33:bb:36:0a:f5:64:67:0c:72:09:b8:
                    ff:cf:b4:e9:17:a0:86:93:17:d7:43:29:16:e3:2a:
                    f6:2b:35:cb:1f:bf:c7:ca:21:cc:2a:99:23:15:b1:
                    69:a3:a7:42:c0:a3:2a:27:6f:98:88:1c:6c:fb:a9:
                    c8:6a:77:3f:15:8c:ca:08:c3:df:29:44:f7:cc:49:
                    3c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:61:4A:B0:42:50:DC:1A:D4:97:58:9D:3D:E9:7D:1A:3C:48:43:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f0875c5d-ee9e-3f7e-8a41-81f8031211db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:8a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a9:74:33:6f:ce:3c:94:7e:71:04:3e:80:1f:2a:d4:64:c1:
         24:22:e1:7d:5c:c7:a2:0a:e7:ef:94:b3:fe:07:a4:f6:6f:84:
         b2:d5:b8:06:d9:54:f5:d8:c3:77:50:91:a0:32:ff:9f:f9:c6:
         ed:66:75:9e:d6:5c:62:bd:80:ac:07:65:37:22:e8:0f:45:d5:
         30:47:a4:1d:16:b3:7d:ec:6b:4c:c3:ee:3f:51:35:00:5d:d2:
         26:a2:d6:8a:31:72:50:a8:5a:1b:38:d2:5a:94:0f:48:90:f3:
         6f:0d:4a:45:a4:c5:1b:ff:c0:9e:de:03:37:9c:f2:56:ce:89:
         1e:57:16:83:96:49:98:9a:c9:de:c4:18:ea:67:20:9c:f5:b5:
         10:4b:8d:ba:b6:eb:b6:da:06:3e:ee:02:2a:86:1b:a3:ff:db:
         20:72:b6:b0:5f:91:9f:b5:44:46:16:e1:99:59:81:15:87:7c:
         00:3b:3c:c9:82:87:29:c5:e0:07:5b:0d:dc:7c:8c:a2:9c:97:
         88:73:23:11:55:03:31:25:48:1a:66:79:e3:8e:d7:66:4a:ba:
         c6:22:ff:72:0f:70:3b:4c:66:72:0e:6b:fd:0c:2d:69:7a:91:
         19:69:cb:f3:55:96:cb:cb:57:fe:fb:0d:33:1b:40:6f:90:28:
         61:a1:be:b6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWm83BL9c1PditZ0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY5ODMyMDctODA3My00MmFmLTg4ZWUtZGY0OTAyYzhh
ZGFmMB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk
NTMyOTI3ZjMtMjIzOC00MTZjLTlmOTEtMDY4NzY0YjU3NGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlFNPffhPwLe5HlTapr+b4kIFzdJmU1F6olU
Giv/w1i5DMWQyPcBVIF1QT0Pi1x4ZwlaMuwOkeyt+DRX5BooaC9KgNW45fiGgYPc
n4yDip7M/dmlZ+4buq7SIFChAUzUMhPgmmUPOYt2vrheR/ryMKZl94ZpXoCNusEZ
rZW6TQt1WOCTXouqx1rFwWHBL571PoM0Q4QSP9AQwjl2m9cXYKkOgyLF9To9cfeA
ibxfMEIPm3VGPSLPM7s2CvVkZwxyCbj/z7TpF6CGkxfXQykW4yr2KzXLH7/HyiHM
KpkjFbFpo6dCwKMqJ2+YiBxs+6nIanc/FYzKCMPfKUT3zEk8JQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH1hSrBCUNwa1JdYnT3pfRo8SEPtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4
MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5MDJjOGFkYWYvZjA4NzVjNWQtZWU5ZS0z
ZjdlLThhNDEtODFmODAzMTIxMWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWY5ODMyMDctODA3My00MmFmLTg4
ZWUtZGY0OTAyYzhhZGFmLzlmOTgzMjA3LTgwNzMtNDJhZi04OGVlLWRmNDkwMmM4
YWRhZi5jcmwwHwYDVR0jBBgwFoAUwyy5+3oif0oFHkqZqPtujWhZyqEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5
MDJjOGFkYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6Lgih
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABupdDNvzjyUfnEEPoAfKtRkwSQi4X1cx6IK5++Us/4HpPZvhLLV
uAbZVPXYw3dQkaAy/5/5xu1mdZ7WXGK9gKwHZTci6A9F1TBHpB0Ws33sa0zD7j9R
NQBd0iai1ooxclCoWhs40lqUD0iQ828NSkWkxRv/wJ7eAzec8lbOiR5XFoOWSZia
yd7EGOpnIJz1tRBLjbq267baBj7uAiqGG6P/2yBytrBfkZ+1REYW4ZlZgRWHfAA7
PMmChynF4AdbDdx8jKKcl4hzIxFVAzElSBpmeeOO12ZKusYi/3IPcDtMZnIOa/0M
LWl6kRlpy/NVlsvLV/77DTMbQG+QKGGhvrY=
-----END CERTIFICATE-----
Generated at Mon May 20 14:55:26 2024 by rpki-client on console-ams.rpki-client.org