Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/d3356b4f-17dd-37e3-a553-ea5cbce4e1f2.roa
File:                     d3356b4f-17dd-37e3-a553-ea5cbce4e1f2.roa (raw, json)
Hash identifier:          gKEOOfVAKSnpm0uJ0Jns3cVFCEZ+4FZJR767za83Sbc=
Subject key identifier:   61:13:06:4C:2E:9C:4A:30:8B:F5:CC:99:AC:A6:1B:3F:FD:3F:D4:0C
Certificate issuer:       /CN=e4f064d0-9017-41e7-be21-c7b9883020d5
Certificate serial:       010D0C9F4328584546622384D9B426FE1056B380
Authority key identifier: 6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/d3356b4f-17dd-37e3-a553-ea5cbce4e1f2.roa
Signing time:             Wed 20 Mar 2024 22:50:24 +0000
ROA not before:           Wed 20 Mar 2024 22:50:24 +0000
ROA not after:            Tue 18 Jun 2024 22:50:24 +0000
asID:                     21903
IP address blocks:        2602:fa6d:64::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:62:23:84:d9:b4:26:fe:10:56:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f064d0-9017-41e7-be21-c7b9883020d5
        Validity
            Not Before: Mar 20 22:50:24 2024 GMT
            Not After : Jun 18 22:50:24 2024 GMT
        Subject: CN=bdcd2972-d70c-4b27-9ca8-2e9d51f51033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a7:b2:35:c3:c4:1a:16:61:20:d8:f9:c6:47:
                    0b:d1:1a:05:19:99:14:b2:06:67:51:4e:9c:e6:42:
                    27:9c:38:26:d9:c6:2c:12:3f:73:d3:9b:14:b0:70:
                    28:3e:c6:5d:93:ab:f7:4b:27:8a:d5:de:9a:c9:44:
                    aa:cd:aa:78:e6:f6:95:cc:0f:9f:73:dd:17:be:13:
                    f2:e3:1a:a3:21:32:3b:88:64:e2:f3:e4:ed:40:23:
                    e0:d5:9c:f5:83:43:37:cf:89:4b:73:1a:82:04:39:
                    74:57:a5:b6:d8:15:3d:23:fa:47:9c:10:7a:16:cc:
                    e7:21:5d:6f:e5:10:fb:1f:3e:8d:29:ee:69:ad:a9:
                    6f:43:69:36:b7:ef:bc:3a:b5:5b:7b:f1:95:26:9b:
                    88:e4:d5:34:dd:bd:30:46:d4:76:7f:c3:d5:31:49:
                    c6:3c:29:15:44:00:94:b4:3f:48:0f:19:2e:94:05:
                    f9:98:de:d9:0f:c6:e1:ad:26:f3:4c:8e:b8:9b:42:
                    44:d5:a9:45:7f:b1:42:bd:0f:59:4c:ef:3d:b9:d6:
                    bb:d0:da:38:6e:9f:8b:cf:b5:22:68:cd:c0:de:86:
                    27:45:c6:7c:93:9e:f9:10:7d:71:42:8f:50:dd:11:
                    25:af:2a:d6:23:11:33:2e:1c:64:29:38:28:76:c1:
                    c7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:13:06:4C:2E:9C:4A:30:8B:F5:CC:99:AC:A6:1B:3F:FD:3F:D4:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/d3356b4f-17dd-37e3-a553-ea5cbce4e1f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6d:64::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d7:d8:24:01:85:7e:49:00:27:d5:77:2a:e2:f7:08:d7:6f:
         42:17:ea:8c:0e:bc:4b:af:8b:55:d5:42:b8:f1:f8:62:8f:b0:
         f8:d0:fe:de:97:10:4b:0a:03:62:4f:33:e6:8a:84:44:30:b0:
         49:3e:13:15:24:01:53:83:5d:ae:18:42:9b:7e:ef:f2:43:d1:
         05:33:e6:88:12:2c:69:ba:9e:0e:82:20:59:42:c6:40:ba:ec:
         97:86:06:a1:e0:75:0d:af:4c:6e:87:a9:a6:8c:c8:44:98:4d:
         cb:fc:8e:ab:3c:0e:4f:46:c9:b3:80:01:1b:14:fd:09:f3:98:
         db:9e:43:28:d1:40:d4:df:36:80:68:c6:bb:29:42:5d:d9:34:
         46:4f:ee:55:e6:e1:71:04:93:fb:87:f1:74:1d:b6:cc:b7:28:
         fc:8b:01:ac:f6:14:47:90:41:ab:65:4f:4a:c9:b1:97:1f:6c:
         0c:c0:8d:f2:cd:30:78:8f:33:23:7c:16:75:01:c9:dd:88:66:
         70:1a:ff:5a:04:6a:16:32:2e:10:94:ea:b9:59:8b:25:98:43:
         20:03:ce:12:c7:86:61:74:01:74:ab:df:e3:76:0c:5c:f1:62:
         d5:3c:2e:d9:30:e5:50:9c:e0:eb:b0:d5:d3:87:10:53:34:04:
         c0:fe:b8:b6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVGYiOE2bQm/hBWs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRmMDY0ZDAtOTAxNy00MWU3LWJlMjEtYzdiOTg4MzAy
MGQ1MB4XDTI0MDMyMDIyNTAyNFoXDTI0MDYxODIyNTAyNFowLzEtMCsGA1UEAxMk
YmRjZDI5NzItZDcwYy00YjI3LTljYTgtMmU5ZDUxZjUxMDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKeyNcPEGhZhINj5xkcL0RoFGZkUsgZnUU6c
5kInnDgm2cYsEj9z05sUsHAoPsZdk6v3SyeK1d6ayUSqzap45vaVzA+fc90XvhPy
4xqjITI7iGTi8+TtQCPg1Zz1g0M3z4lLcxqCBDl0V6W22BU9I/pHnBB6FsznIV1v
5RD7Hz6NKe5pralvQ2k2t++8OrVbe/GVJpuI5NU03b0wRtR2f8PVMUnGPCkVRACU
tD9IDxkulAX5mN7ZD8bhrSbzTI64m0JE1alFf7FCvQ9ZTO89uda70No4bp+Lz7Ui
aM3A3oYnRcZ8k575EH1xQo9Q3RElryrWIxEzLhxkKTgodsHH2wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGETBkwunEowi/XMmaymGz/9P9QMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNGYw
NjRkMC05MDE3LTQxZTctYmUyMS1jN2I5ODgzMDIwZDUvZDMzNTZiNGYtMTdkZC0z
N2UzLWE1NTMtZWE1Y2JjZTRlMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTRmMDY0ZDAtOTAxNy00MWU3LWJl
MjEtYzdiOTg4MzAyMGQ1L2U0ZjA2NGQwLTkwMTctNDFlNy1iZTIxLWM3Yjk4ODMw
MjBkNS5jcmwwHwYDVR0jBBgwFoAUamr2dIMc2n3zkrcHGqG+D3BjgpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNGYwNjRkMC05MDE3LTQxZTctYmUyMS1jN2I5
ODgzMDIwZDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL6bQBk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG/X2CQBhX5JACfVdyri9wjXb0IX6owOvEuvi1XVQrjx+GKPsPjQ
/t6XEEsKA2JPM+aKhEQwsEk+ExUkAVODXa4YQpt+7/JD0QUz5ogSLGm6ng6CIFlC
xkC67JeGBqHgdQ2vTG6HqaaMyESYTcv8jqs8Dk9GybOAARsU/QnzmNueQyjRQNTf
NoBoxrspQl3ZNEZP7lXm4XEEk/uH8XQdtsy3KPyLAaz2FEeQQatlT0rJsZcfbAzA
jfLNMHiPMyN8FnUByd2IZnAa/1oEahYyLhCU6rlZiyWYQyADzhLHhmF0AXSr3+N2
DFzxYtU8Ltkw5VCc4Ouw1dOHEFM0BMD+uLY=
-----END CERTIFICATE-----
Generated at Sun Jun 2 09:17:13 2024 by rpki-client on console-ams.rpki-client.org