Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/c92537ce-9b75-38e9-9cc8-8ea48955f17e.roa
File:                     c92537ce-9b75-38e9-9cc8-8ea48955f17e.roa (raw, json)
Hash identifier:          Fb66/KQb/Ex2rQDhwSGRiGqBvM8RMBsc1PwrP+YE1Vc=
Subject key identifier:   98:F0:37:CE:1A:C0:2F:0E:6E:77:BC:90:68:8E:74:54:DF:BE:5B:9B
Certificate issuer:       /CN=fca4862e-7314-4415-a264-4e5dc31b73d8
Certificate serial:       010D0C9F4328584596334887049E251F7C9A0D80
Authority key identifier: F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/c92537ce-9b75-38e9-9cc8-8ea48955f17e.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     4185
IP address blocks:        2620:0:610::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Apr 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:48:87:04:9e:25:1f:7c:9a:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca4862e-7314-4415-a264-4e5dc31b73d8
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=6b005db9-f588-4307-9e70-df46ee41fee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:4a:dc:89:bc:80:0b:87:cc:ee:fc:e3:5b:
                    7e:e1:12:23:83:6f:82:47:44:03:91:88:ea:9c:cf:
                    67:c2:d2:0a:42:f0:58:61:d2:0b:3f:9b:ad:22:99:
                    6f:63:21:f8:ca:18:a5:fe:3f:d1:a7:54:2d:f4:69:
                    bb:b0:08:c3:aa:9b:d1:67:3d:c1:d2:fe:f6:65:2b:
                    e1:93:ae:bd:da:4c:70:69:48:af:79:af:c6:a7:6d:
                    0b:bc:17:42:9c:3e:0c:a3:7e:a5:e4:34:d3:f3:85:
                    34:63:db:86:1e:dd:16:98:10:f1:e8:d7:32:3a:75:
                    ca:b8:b0:97:a2:f0:c2:11:f5:f0:c0:32:ad:08:f3:
                    4b:e5:44:f0:10:c8:c1:35:2a:df:d0:eb:3c:02:5b:
                    f7:14:a2:d8:96:66:61:ae:82:04:58:78:59:33:d3:
                    4b:e0:8a:bd:15:7f:ea:2e:ab:c2:11:04:ba:69:c9:
                    fb:14:2b:b8:f6:f3:be:73:3c:ef:c8:67:1b:89:76:
                    04:00:e3:46:17:43:e7:fe:23:4f:06:db:d3:46:cd:
                    b3:c4:cf:8a:8e:21:8e:ba:5b:f0:ad:e0:97:0d:a8:
                    b9:f8:b4:dd:d6:92:56:63:9e:6e:f0:33:f4:d4:a2:
                    05:ef:18:01:31:93:63:1e:0c:30:34:5f:37:7c:65:
                    ab:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F0:37:CE:1A:C0:2F:0E:6E:77:BC:90:68:8E:74:54:DF:BE:5B:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/c92537ce-9b75-38e9-9cc8-8ea48955f17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl

            X509v3 Authority Key Identifier:
                keyid:F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:610::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:98:b0:bd:73:c3:0e:c5:d0:81:6e:68:b8:dd:0d:dd:f7:97:
         7a:99:83:ba:cd:e0:a8:53:3c:1b:20:72:81:c1:71:bc:c3:41:
         5f:1e:5a:9a:04:04:22:49:2d:c4:c9:01:00:32:ef:b3:c5:6c:
         3f:50:76:78:59:2d:cb:30:23:fa:12:64:58:3b:90:a1:e6:08:
         ba:67:3f:6c:82:d3:17:f7:da:c4:d6:3d:79:97:ed:ab:bf:c4:
         f7:8e:a2:69:d3:44:10:c0:d2:7e:4c:8b:9e:94:8e:bd:52:86:
         a9:26:ed:e4:05:d0:e1:07:1f:1a:bd:26:14:98:e0:20:68:46:
         cf:f7:1c:07:96:e9:b8:e9:26:e6:02:5e:97:da:fd:48:5c:4e:
         90:c9:43:d2:52:ff:d8:1b:ee:17:d6:63:b2:84:f4:78:22:fd:
         9f:31:61:17:5a:36:c3:db:b6:f7:04:ce:dc:9c:a9:6f:4d:19:
         39:9d:e7:f9:84:fb:ba:b5:19:4a:fe:ee:c9:3f:ea:25:8e:9e:
         2a:9f:17:79:3e:64:f6:00:6f:45:ec:c6:aa:ff:20:95:19:1e:
         25:37:60:71:92:f8:09:eb:60:f3:92:9a:6c:b5:2f:74:8e:e3:
         10:32:a0:fe:9c:bb:83:a6:ee:ad:2c:b3:88:24:59:7e:bd:9f:
         90:d1:85:dd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWWM0iHBJ4lH3yaDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmNhNDg2MmUtNzMxNC00NDE1LWEyNjQtNGU1ZGMzMWI3
M2Q4MB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk
NmIwMDVkYjktZjU4OC00MzA3LTllNzAtZGY0NmVlNDFmZWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnthK3Im8gAuHzO7841t+4RIjg2+CR0QDkYjq
nM9nwtIKQvBYYdILP5utIplvYyH4yhil/j/Rp1Qt9Gm7sAjDqpvRZz3B0v72ZSvh
k6692kxwaUivea/Gp20LvBdCnD4Mo36l5DTT84U0Y9uGHt0WmBDx6NcyOnXKuLCX
ovDCEfXwwDKtCPNL5UTwEMjBNSrf0Os8Alv3FKLYlmZhroIEWHhZM9NL4Iq9FX/q
LqvCEQS6acn7FCu49vO+czzvyGcbiXYEAONGF0Pn/iNPBtvTRs2zxM+KjiGOulvw
reCXDai5+LTd1pJWY55u8DP01KIF7xgBMZNjHgwwNF83fGWrOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJjwN84awC8Obne8kGiOdFTfvlubMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mY2E0
ODYyZS03MzE0LTQ0MTUtYTI2NC00ZTVkYzMxYjczZDgvYzkyNTM3Y2UtOWI3NS0z
OGU5LTljYzgtOGVhNDg5NTVmMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmNhNDg2MmUtNzMxNC00NDE1LWEy
NjQtNGU1ZGMzMWI3M2Q4L2ZjYTQ4NjJlLTczMTQtNDQxNS1hMjY0LTRlNWRjMzFi
NzNkOC5jcmwwHwYDVR0jBBgwFoAU8yr+8X1nEtpqUNKYHz4xR2GCleQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mY2E0ODYyZS03MzE0LTQ0MTUtYTI2NC00ZTVk
YzMxYjczZDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAAAYQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ+YsL1zww7F0IFuaLjdDd33l3qZg7rN4KhTPBsgcoHBcbzDQV8e
WpoEBCJJLcTJAQAy77PFbD9QdnhZLcswI/oSZFg7kKHmCLpnP2yC0xf32sTWPXmX
7au/xPeOomnTRBDA0n5Mi56Ujr1Shqkm7eQF0OEHHxq9JhSY4CBoRs/3HAeW6bjp
JuYCXpfa/UhcTpDJQ9JS/9gb7hfWY7KE9Hgi/Z8xYRdaNsPbtvcEztycqW9NGTmd
5/mE+7q1GUr+7sk/6iWOniqfF3k+ZPYAb0Xsxqr/IJUZHiU3YHGS+AnrYPOSmmy1
L3SO4xAyoP6cu4Om7q0ss4gkWX69n5DRhd0=
-----END CERTIFICATE-----
Generated at Sat Apr 20 14:29:07 2024 by rpki-client on console-fra.rpki-client.org