Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa
File:                     fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa (raw, json)
Hash identifier:          6z03l6YEw3DQ6LX/YAOg6aAd+5quBgXFau/5a78+TFI=
Subject key identifier:   17:77:1B:5B:60:01:48:84:8D:BC:87:6A:AA:F2:91:BF:F9:75:A9:42
Certificate issuer:       /CN=e4f064d0-9017-41e7-be21-c7b9883020d5
Certificate serial:       010D0C9F432858473FF0A7E935D36FE16F15F300
Authority key identifier: 6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     21903
IP address blocks:        2602:fa6d:70::/46 maxlen: 46
                          2602:fa6d:74::/46 maxlen: 46
                          2602:fa6d:78::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:a7:e9:35:d3:6f:e1:6f:15:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f064d0-9017-41e7-be21-c7b9883020d5
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=55271d82-1968-4d7f-894e-86a0fbe099ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a9:8d:19:ed:5a:68:c1:3c:41:72:af:cc:fc:
                    06:ab:eb:85:1d:82:e6:68:f4:a1:6a:fa:4a:54:b6:
                    70:6f:21:e2:cd:db:a1:a1:5f:9b:5f:c6:e2:b3:a6:
                    9c:f8:5d:25:fe:b3:0a:d7:d1:f6:d1:cb:05:4f:f7:
                    a7:a2:c9:3a:17:d4:fc:75:04:d8:eb:66:1f:18:32:
                    1c:50:73:61:76:1e:fe:08:16:95:d6:b0:05:aa:a9:
                    18:76:89:23:a9:85:c6:da:cb:ac:3b:08:8c:79:b5:
                    9c:c6:36:d2:9d:f9:e4:58:84:7c:da:a0:cc:88:29:
                    2b:57:14:86:6b:ed:8e:fb:77:29:f7:c7:b6:8e:b4:
                    b0:35:5e:90:23:9d:d5:88:59:04:5f:b3:8a:97:de:
                    9f:1e:78:17:29:e7:15:7d:f4:cc:5f:02:9f:cb:50:
                    6e:3c:d7:68:90:82:d7:57:66:ce:98:b5:b6:ef:d5:
                    d9:28:ff:a5:a9:84:09:c3:5f:78:36:e3:31:15:68:
                    36:05:26:7c:42:72:8e:56:ff:83:69:cd:45:21:42:
                    2c:f6:67:a8:a8:a8:54:26:99:41:23:f6:5e:11:ec:
                    18:d4:7a:82:3e:28:00:db:9d:10:36:a0:38:f0:6a:
                    db:2b:1e:c9:75:e6:cf:ae:b0:92:5e:af:56:ab:c4:
                    65:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:77:1B:5B:60:01:48:84:8D:BC:87:6A:AA:F2:91:BF:F9:75:A9:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6d:70::-2602:fa6d:79:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:bd:d3:29:7c:f3:ad:a4:30:22:f8:46:34:90:a0:9c:bf:c8:
         9c:e1:7f:bb:8f:3f:27:40:0c:01:92:86:4f:63:09:0c:3b:59:
         96:68:15:19:24:3d:93:6a:8e:50:5c:6d:d8:fe:7d:36:7d:56:
         c1:c2:92:8f:bf:50:46:00:3e:01:a1:5f:0e:f6:54:cc:ba:87:
         4c:49:77:21:d6:fb:24:bf:f8:3a:0a:ee:79:96:01:40:a6:c3:
         cd:94:5c:5b:1a:99:7b:8f:54:f9:5a:63:ce:a7:28:20:e8:b9:
         ea:d3:6b:fe:a1:d3:ac:d2:2a:54:47:25:74:7d:01:97:ce:fc:
         b8:87:32:49:c2:60:d0:fe:b5:81:ca:3c:79:fd:25:2b:1c:6d:
         24:89:16:99:9d:34:36:11:c7:0f:54:a0:e6:78:91:de:5a:84:
         3a:5c:61:c7:ed:d6:36:fa:a9:67:62:5f:4f:e7:82:af:1b:8a:
         86:7b:ab:0e:ff:a8:1f:aa:98:99:0d:6e:98:c1:11:35:bd:52:
         a3:eb:97:a6:bd:42:d1:76:42:ef:cf:c9:ae:04:69:c4:e8:c7:
         70:ca:e8:21:15:29:9c:a6:54:5f:e1:9a:74:f4:7f:06:6a:d3:
         11:b8:4a:70:12:0f:6e:16:53:f6:43:4a:30:87:32:1e:1a:7d:
         30:86:9b:cb
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEc/8KfpNdNv4W8V8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRmMDY0ZDAtOTAxNy00MWU3LWJlMjEtYzdiOTg4MzAy
MGQ1MB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk
NTUyNzFkODItMTk2OC00ZDdmLTg5NGUtODZhMGZiZTA5OWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKmNGe1aaME8QXKvzPwGq+uFHYLmaPShavpK
VLZwbyHizduhoV+bX8bis6ac+F0l/rMK19H20csFT/enosk6F9T8dQTY62YfGDIc
UHNhdh7+CBaV1rAFqqkYdokjqYXG2susOwiMebWcxjbSnfnkWIR82qDMiCkrVxSG
a+2O+3cp98e2jrSwNV6QI53ViFkEX7OKl96fHngXKecVffTMXwKfy1BuPNdokILX
V2bOmLW279XZKP+lqYQJw194NuMxFWg2BSZ8QnKOVv+Dac1FIUIs9meoqKhUJplB
I/ZeEewY1HqCPigA250QNqA48GrbKx7JdebPrrCSXq9Wq8RlQwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFBd3G1tgAUiEjbyHaqrykb/5dalCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNGYw
NjRkMC05MDE3LTQxZTctYmUyMS1jN2I5ODgzMDIwZDUvZmE0Y2ZlMjAtY2JhZi0z
ZGU4LTk5MDktNTAxYjQwYTFlNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTRmMDY0ZDAtOTAxNy00MWU3LWJl
MjEtYzdiOTg4MzAyMGQ1L2U0ZjA2NGQwLTkwMTctNDFlNy1iZTIxLWM3Yjk4ODMw
MjBkNS5jcmwwHwYDVR0jBBgwFoAUamr2dIMc2n3zkrcHGqG+D3BjgpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNGYwNjRkMC05MDE3LTQxZTctYmUyMS1jN2I5
ODgzMDIwZDUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQmAvpt
AHADBwEmAvptAHgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEABr3TKXzzraQwIvhGNJCgnL/InOF/u48/J0AM
AZKGT2MJDDtZlmgVGSQ9k2qOUFxt2P59Nn1WwcKSj79QRgA+AaFfDvZUzLqHTEl3
Idb7JL/4OgrueZYBQKbDzZRcWxqZe49U+VpjzqcoIOi56tNr/qHTrNIqVEcldH0B
l878uIcyScJg0P61gco8ef0lKxxtJIkWmZ00NhHHD1Sg5niR3lqEOlxhx+3WNvqp
Z2JfT+eCrxuKhnurDv+oH6qYmQ1umMERNb1So+uXpr1C0XZC78/JrgRpxOjHcMro
IRUpnKZUX+GadPR/BmrTEbhKcBIPbhZT9kNKMIcyHhp9MIabyw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:32 2024 by rpki-client on console-fra.rpki-client.org