Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1/c3c6cf0a-4976-32e4-a53a-9597b4bbe863.roa
File:                     c3c6cf0a-4976-32e4-a53a-9597b4bbe863.roa (raw, json)
Hash identifier:          CR0yUWtpJmqD1x65TQQJINg6fN9TKVdrAQlehLR3d04=
Subject key identifier:   99:CB:59:11:6D:FF:EB:E2:B5:B7:FC:E7:48:6A:0C:42:0E:8D:20:54
Certificate issuer:       /CN=f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1
Certificate serial:       010D0C9F432858453B77FCD38BF2BF18045D27C0
Authority key identifier: 2F:BB:EC:46:D2:B7:C6:69:60:3D:26:B0:E2:7D:4E:46:9F:6E:00:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1/c3c6cf0a-4976-32e4-a53a-9597b4bbe863.roa
Signing time:             Sun 17 Mar 2024 01:00:26 +0000
ROA not before:           Sun 17 Mar 2024 01:00:26 +0000
ROA not after:            Sat 15 Jun 2024 01:00:26 +0000
asID:                     394999
IP address blocks:        2602:814:e000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:77:fc:d3:8b:f2:bf:18:04:5d:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1
        Validity
            Not Before: Mar 17 01:00:26 2024 GMT
            Not After : Jun 15 01:00:26 2024 GMT
        Subject: CN=d4a14a31-df01-46a5-bf25-5d2d9aae5273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:45:70:2a:87:e4:0a:d3:b8:a7:c3:7e:ff:be:
                    16:64:8e:fb:b5:6d:7d:59:9c:60:4d:f5:a5:29:5a:
                    64:d4:7d:9d:a0:3f:f1:83:95:0d:6d:73:3a:1b:b1:
                    f8:bb:b3:6b:79:c6:a3:fa:0f:e2:a9:77:c8:6b:15:
                    8e:ea:a2:72:a7:79:7a:de:51:9e:5c:81:cd:dc:72:
                    7d:6e:a3:a6:6d:b7:9a:88:81:a3:17:4a:1a:73:77:
                    89:e8:f9:ad:2f:55:e6:1f:95:9c:ff:81:48:01:3d:
                    c2:aa:66:85:5f:35:78:71:bf:88:de:6f:20:93:dd:
                    43:93:d6:c2:8e:b1:fa:ac:56:3b:04:f9:64:f1:07:
                    f8:30:4f:a4:35:9a:1e:3f:73:96:fc:d9:0c:f2:51:
                    37:dd:d3:13:65:5d:b1:16:8a:df:5e:2d:48:73:2b:
                    4d:4e:64:79:ac:99:54:2a:dd:ab:50:60:9e:5b:db:
                    8f:84:87:f5:9b:c9:0d:8a:e5:ea:58:0c:d0:e5:ac:
                    77:d5:fc:7b:68:41:37:af:f2:05:18:83:12:48:3b:
                    e8:8c:5e:eb:67:ee:ab:ed:88:23:82:17:5b:89:27:
                    b9:7f:4c:a9:4f:4c:46:b7:78:d2:28:27:43:bf:44:
                    f1:fb:46:5d:ad:45:d9:48:4a:91:6f:0e:48:f9:c7:
                    21:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CB:59:11:6D:FF:EB:E2:B5:B7:FC:E7:48:6A:0C:42:0E:8D:20:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1/c3c6cf0a-4976-32e4-a53a-9597b4bbe863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1.crl

            X509v3 Authority Key Identifier:
                keyid:2F:BB:EC:46:D2:B7:C6:69:60:3D:26:B0:E2:7D:4E:46:9F:6E:00:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:63:18:c8:e1:05:ac:36:d9:62:f5:21:79:57:53:e5:68:06:
         ce:c6:d1:79:2e:0d:7b:e7:59:ad:0e:a6:ad:3c:eb:7a:3e:07:
         68:2d:c2:b9:d1:38:06:16:42:72:9d:69:a6:77:e5:f1:6d:94:
         cc:79:e4:72:ff:25:f5:d4:8d:de:6c:8d:c5:f7:85:c3:e6:84:
         33:c2:0f:13:36:dd:a3:06:e3:85:0a:97:62:f6:eb:9f:c7:f3:
         cd:97:fd:be:a3:c6:76:b0:81:9c:53:97:f8:42:df:7b:8d:16:
         34:fa:4d:03:53:6e:2c:20:9c:27:54:80:10:01:e2:6b:5f:0e:
         92:5a:db:a0:83:db:17:7f:47:57:cb:c2:fe:4f:6c:52:eb:27:
         3e:b0:05:8c:7d:0e:55:ba:53:67:18:fa:65:ba:5c:df:85:11:
         b1:74:c3:e1:16:1f:c6:ef:e9:69:63:f1:e1:87:4f:b1:e8:26:
         41:22:d1:45:72:33:ff:59:ab:89:2d:51:ea:f6:5e:56:aa:b5:
         fb:2d:d8:73:5a:fa:b5:85:3b:d7:be:e3:37:c9:70:34:68:56:
         37:93:39:54:64:dd:56:36:fd:33:09:87:9d:67:4f:1c:22:ff:
         c3:ff:1b:d0:b0:52:0f:c5:ae:0d:85:f0:77:78:a7:1d:73:0a:
         8c:04:58:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEU7d/zTi/K/GARdJ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjViZDRmZTYtYWNhYS00YTkzLTlmZmQtZmFjY2VjZmRk
NWYxMB4XDTI0MDMxNzAxMDAyNloXDTI0MDYxNTAxMDAyNlowLzEtMCsGA1UEAxMk
ZDRhMTRhMzEtZGYwMS00NmE1LWJmMjUtNWQyZDlhYWU1MjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUVwKofkCtO4p8N+/74WZI77tW19WZxgTfWl
KVpk1H2doD/xg5UNbXM6G7H4u7Nrecaj+g/iqXfIaxWO6qJyp3l63lGeXIHN3HJ9
bqOmbbeaiIGjF0oac3eJ6PmtL1XmH5Wc/4FIAT3CqmaFXzV4cb+I3m8gk91Dk9bC
jrH6rFY7BPlk8Qf4ME+kNZoeP3OW/NkM8lE33dMTZV2xForfXi1IcytNTmR5rJlU
Kt2rUGCeW9uPhIf1m8kNiuXqWAzQ5ax31fx7aEE3r/IFGIMSSDvojF7rZ+6r7Ygj
ghdbiSe5f0ypT0xGt3jSKCdDv0Tx+0ZdrUXZSEqRbw5I+cchxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJnLWRFt/+vitbf850hqDEIOjSBUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNWJk
NGZlNi1hY2FhLTRhOTMtOWZmZC1mYWNjZWNmZGQ1ZjEvYzNjNmNmMGEtNDk3Ni0z
MmU0LWE1M2EtOTU5N2I0YmJlODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjViZDRmZTYtYWNhYS00YTkzLTlm
ZmQtZmFjY2VjZmRkNWYxL2Y1YmQ0ZmU2LWFjYWEtNGE5My05ZmZkLWZhY2NlY2Zk
ZDVmMS5jcmwwHwYDVR0jBBgwFoAUL7vsRtK3xmlgPSaw4n1ORp9uAKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNWJkNGZlNi1hY2FhLTRhOTMtOWZmZC1mYWNj
ZWNmZGQ1ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFOAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAERjGMjhBaw22WL1IXlXU+VoBs7G0XkuDXvnWa0Opq0863o+B2gt
wrnROAYWQnKdaaZ35fFtlMx55HL/JfXUjd5sjcX3hcPmhDPCDxM23aMG44UKl2L2
65/H882X/b6jxnawgZxTl/hC33uNFjT6TQNTbiwgnCdUgBAB4mtfDpJa26CD2xd/
R1fLwv5PbFLrJz6wBYx9DlW6U2cY+mW6XN+FEbF0w+EWH8bv6Wlj8eGHT7HoJkEi
0UVyM/9Zq4ktUer2Xlaqtfst2HNa+rWFO9e+4zfJcDRoVjeTOVRk3VY2/TMJh51n
Txwi/8P/G9CwUg/Frg2F8Hd4px1zCowEWBQ=
-----END CERTIFICATE-----
Generated at Mon May 20 14:55:30 2024 by rpki-client on console-ams.rpki-client.org