Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f9c1e2-52bb-4203-8401-c0bc0b65723c/850fe28e-a7ae-3bcc-a6c8-6c6e78b888ea.roa
File:                     850fe28e-a7ae-3bcc-a6c8-6c6e78b888ea.roa (raw, json)
Hash identifier:          4gP85Okuqt2rd6BmZN98yXNFabXBpMWRM4Lkc7VL+wU=
Subject key identifier:   AA:96:D2:57:07:D8:EB:0C:B3:01:27:18:AB:EB:66:9D:9E:33:32:4E
Certificate issuer:       /CN=17f9c1e2-52bb-4203-8401-c0bc0b65723c
Certificate serial:       010D0C9F43285847BC4A44FDF702E92716C3ED80
Authority key identifier: 5D:E4:06:F7:F9:02:96:C0:92:0D:3C:F2:D8:22:6E:48:80:1B:D2:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f9c1e2-52bb-4203-8401-c0bc0b65723c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f9c1e2-52bb-4203-8401-c0bc0b65723c/850fe28e-a7ae-3bcc-a6c8-6c6e78b888ea.roa
Signing time:             Fri 01 Nov 2024 14:01:34 +0000
ROA not before:           Fri 01 Nov 2024 14:01:34 +0000
ROA not after:            Thu 30 Jan 2025 15:01:34 +0000
asID:                     22599
IP address blocks:        2602:f7b6:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f9c1e2-52bb-4203-8401-c0bc0b65723c/17f9c1e2-52bb-4203-8401-c0bc0b65723c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f9c1e2-52bb-4203-8401-c0bc0b65723c/17f9c1e2-52bb-4203-8401-c0bc0b65723c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f9c1e2-52bb-4203-8401-c0bc0b65723c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:4a:44:fd:f7:02:e9:27:16:c3:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17f9c1e2-52bb-4203-8401-c0bc0b65723c
        Validity
            Not Before: Nov  1 14:01:34 2024 GMT
            Not After : Jan 30 15:01:34 2025 GMT
        Subject: CN=7baafa34-5228-4812-a722-0b5ab1a5e409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:83:e2:13:e4:c9:53:d3:0e:f6:e8:40:b0:
                    09:11:0a:85:b4:9c:d2:b4:3e:28:aa:5b:76:93:5a:
                    b1:b7:1d:65:6b:f2:dd:03:61:38:ef:35:83:ea:69:
                    1f:c7:83:e6:e3:0c:c6:e0:81:12:19:f1:18:eb:e4:
                    20:ea:e9:9b:6b:87:87:7a:05:34:80:31:27:d6:3f:
                    5c:ca:07:58:91:13:77:bc:dd:a8:2f:9f:15:79:8c:
                    bc:f5:2f:23:33:72:ae:17:9a:86:94:79:ee:a2:05:
                    76:e5:cb:0e:cd:83:45:d2:a2:a0:d9:d2:c1:3c:e7:
                    0c:89:9e:0d:7d:5a:f0:d0:77:23:85:28:6d:98:f5:
                    5d:10:14:e3:bd:52:6a:9c:8b:7e:d3:70:f4:c6:dd:
                    f1:c4:a3:81:4a:33:56:3e:57:57:5d:c8:e2:01:8f:
                    1b:28:f8:a7:dd:37:6e:51:28:3b:74:f3:93:64:04:
                    96:73:9f:94:da:25:c9:94:59:08:8d:e0:f3:0a:bb:
                    5f:d7:99:d3:98:91:c8:b7:8f:d8:bf:18:51:e6:ed:
                    82:3e:08:2b:70:08:eb:4f:86:2a:f6:a1:39:ee:ab:
                    eb:ae:b5:29:51:fe:49:87:b1:f9:a7:9e:5e:47:ba:
                    7c:d2:ce:4c:f1:48:4f:63:09:c2:65:24:a7:85:23:
                    4b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:96:D2:57:07:D8:EB:0C:B3:01:27:18:AB:EB:66:9D:9E:33:32:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f9c1e2-52bb-4203-8401-c0bc0b65723c/850fe28e-a7ae-3bcc-a6c8-6c6e78b888ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f9c1e2-52bb-4203-8401-c0bc0b65723c/17f9c1e2-52bb-4203-8401-c0bc0b65723c.crl

            X509v3 Authority Key Identifier:
                keyid:5D:E4:06:F7:F9:02:96:C0:92:0D:3C:F2:D8:22:6E:48:80:1B:D2:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f9c1e2-52bb-4203-8401-c0bc0b65723c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7b6:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bc:b4:bf:f3:9d:65:be:db:96:20:50:31:e3:da:4f:a9:34:
         bb:e8:f2:fb:81:a7:7a:d9:0c:c6:c0:a0:cf:e6:dc:ea:59:0f:
         78:74:b7:26:6e:59:02:02:e9:db:10:53:32:bb:61:15:c9:31:
         18:f0:80:49:c8:b2:9f:8a:d3:00:5a:84:a7:e0:20:2b:14:41:
         29:12:16:c7:e9:27:0f:92:8e:41:64:49:ce:e7:be:19:74:a1:
         b5:d0:c5:3e:ad:a5:7f:53:99:37:db:62:76:eb:8a:2d:72:ff:
         9f:cb:ea:1f:f2:2b:43:04:2c:08:16:57:a2:90:4b:8a:31:76:
         af:14:a9:ab:d7:2b:4e:db:a0:3e:b8:04:53:c2:a3:f7:f8:4d:
         33:09:39:5a:c1:a0:1d:59:88:8c:dc:62:ca:16:6d:b6:90:97:
         18:09:ff:d2:7c:5c:de:23:97:5d:e8:15:ef:a5:9d:d5:35:54:
         01:5f:04:8c:48:2c:2a:5f:72:78:ee:6f:f8:6b:84:26:49:c2:
         e9:10:88:59:c5:3e:95:6e:a5:7c:e8:18:9c:50:a8:b4:06:a9:
         e9:22:f5:3e:2f:24:a6:ea:30:9a:24:c5:a8:fb:39:60:64:b9:
         a8:73:8c:0d:ef:06:2d:27:2f:90:07:21:1b:a9:33:d6:1d:ea:
         5d:2b:05:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe8SkT99wLpJxbD7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTdmOWMxZTItNTJiYi00MjAzLTg0MDEtYzBiYzBiNjU3
MjNjMB4XDTI0MTEwMTE0MDEzNFoXDTI1MDEzMDE1MDEzNFowLzEtMCsGA1UEAxMk
N2JhYWZhMzQtNTIyOC00ODEyLWE3MjItMGI1YWIxYTVlNDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD+D4hPkyVPTDvboQLAJEQqFtJzStD4oqlt2
k1qxtx1la/LdA2E47zWD6mkfx4Pm4wzG4IESGfEY6+Qg6umba4eHegU0gDEn1j9c
ygdYkRN3vN2oL58VeYy89S8jM3KuF5qGlHnuogV25csOzYNF0qKg2dLBPOcMiZ4N
fVrw0HcjhShtmPVdEBTjvVJqnIt+03D0xt3xxKOBSjNWPldXXcjiAY8bKPin3Tdu
USg7dPOTZASWc5+U2iXJlFkIjeDzCrtf15nTmJHIt4/YvxhR5u2CPggrcAjrT4Yq
9qE57qvrrrUpUf5Jh7H5p55eR7p80s5M8UhPYwnCZSSnhSNLjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKqW0lcH2OsMswEnGKvrZp2eMzJOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xN2Y5
YzFlMi01MmJiLTQyMDMtODQwMS1jMGJjMGI2NTcyM2MvODUwZmUyOGUtYTdhZS0z
YmNjLWE2YzgtNmM2ZTc4Yjg4OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTdmOWMxZTItNTJiYi00MjAzLTg0
MDEtYzBiYzBiNjU3MjNjLzE3ZjljMWUyLTUyYmItNDIwMy04NDAxLWMwYmMwYjY1
NzIzYy5jcmwwHwYDVR0jBBgwFoAUXeQG9/kClsCSDTzy2CJuSIAb0jYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xN2Y5YzFlMi01MmJiLTQyMDMtODQwMS1jMGJj
MGI2NTcyM2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3tgAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEy8tL/znWW+25YgUDHj2k+pNLvo8vuBp3rZDMbAoM/m3OpZD3h0
tyZuWQIC6dsQUzK7YRXJMRjwgEnIsp+K0wBahKfgICsUQSkSFsfpJw+SjkFkSc7n
vhl0obXQxT6tpX9TmTfbYnbrii1y/5/L6h/yK0MELAgWV6KQS4oxdq8UqavXK07b
oD64BFPCo/f4TTMJOVrBoB1ZiIzcYsoWbbaQlxgJ/9J8XN4jl13oFe+lndU1VAFf
BIxILCpfcnjub/hrhCZJwukQiFnFPpVupXzoGJxQqLQGqeki9T4vJKbqMJokxaj7
OWBkuahzjA3vBi0nL5AHIRupM9Yd6l0rBRM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:18 2024 by rpki-client on console-ams.rpki-client.org