Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/815eb95f-c55c-393b-9d70-b5f74aa47bab.roa
File:                     815eb95f-c55c-393b-9d70-b5f74aa47bab.roa (raw, json)
Hash identifier:          aOjEWdVgtpbHC6a9Ewxuxb56elvKipMwvkaFykVMGbA=
Subject key identifier:   B4:FD:1F:9D:71:15:F1:67:FE:BE:65:18:4B:D8:1F:A5:25:7A:DA:39
Certificate issuer:       /CN=94fbb148-8b1b-4a17-86b2-afd0462d82ff
Certificate serial:       010D0C9F43285847ED24E00F784734A73BF93700
Authority key identifier: 33:CA:F4:30:B0:F1:54:CA:73:7F:9E:49:FC:51:9E:A0:D5:D3:05:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/815eb95f-c55c-393b-9d70-b5f74aa47bab.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     197841
IP address blocks:        2602:f822::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:e0:0f:78:47:34:a7:3b:f9:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94fbb148-8b1b-4a17-86b2-afd0462d82ff
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=e07cf08d-049d-457a-b3c5-82e83774350e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:9a:3c:6a:1a:b4:18:f8:e2:a5:ab:15:b0:5e:
                    d5:66:5f:f1:fe:32:de:11:16:77:9a:1e:21:3c:5a:
                    f9:97:ae:b1:f0:2a:8f:65:73:1a:90:72:15:3c:78:
                    3c:1e:73:8e:b9:bb:65:23:03:a8:48:e3:10:a1:41:
                    d5:4a:f7:2b:6a:e2:b9:b7:e6:e5:5c:d6:a9:33:0f:
                    bb:1a:4e:03:56:9c:0c:7c:ec:d9:54:1a:78:fe:1e:
                    3a:a0:5a:31:72:24:f0:77:c0:be:e6:e8:fe:22:78:
                    83:4c:c4:29:b0:b5:57:65:4d:71:dc:ae:70:99:a9:
                    10:5b:49:2e:90:ce:9f:a2:8b:66:5c:00:87:e5:26:
                    76:4a:1a:86:7b:df:27:ec:93:7a:fb:a4:fb:93:19:
                    c5:6c:c7:07:ea:a8:a9:1c:74:48:05:8d:b0:35:ca:
                    52:25:a6:bf:0d:e4:5f:f0:3a:2c:71:f3:42:65:5d:
                    65:63:ac:ac:90:97:ea:8f:63:ec:ef:19:5e:98:f2:
                    62:4e:10:b0:5e:a8:aa:24:52:ac:02:37:3b:7b:dd:
                    b7:de:e1:ab:b8:c3:fe:6f:34:f9:c5:88:8c:0e:83:
                    a4:5c:33:1f:db:3a:27:d4:68:c1:7f:e9:1f:f2:71:
                    af:b6:67:7f:ac:ac:6a:f8:a9:f4:1c:11:6d:07:bd:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FD:1F:9D:71:15:F1:67:FE:BE:65:18:4B:D8:1F:A5:25:7A:DA:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/815eb95f-c55c-393b-9d70-b5f74aa47bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.crl

            X509v3 Authority Key Identifier:
                keyid:33:CA:F4:30:B0:F1:54:CA:73:7F:9E:49:FC:51:9E:A0:D5:D3:05:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f822::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:dc:1a:61:be:70:35:89:f7:33:4a:f8:c6:83:2f:b7:1e:0f:
         61:80:11:fb:30:1d:66:a3:77:e0:b0:a9:12:e5:e9:a8:6f:53:
         68:6c:d6:ce:de:20:95:58:45:19:a8:43:d9:52:16:49:40:90:
         bd:3c:5a:df:91:2e:bb:34:69:c5:b8:74:6b:8a:fb:98:24:b2:
         01:76:19:8e:04:fb:d1:82:23:8a:11:d9:fd:70:27:2e:5e:66:
         61:12:e1:cb:1e:15:22:a5:ac:c2:69:ab:98:1b:06:3b:d2:b5:
         00:77:c4:b7:d5:c0:c2:df:cc:c7:58:78:22:a9:a1:61:c4:e0:
         98:82:72:f9:fb:81:17:cc:ce:6d:7a:f7:9a:09:2c:37:1f:36:
         3a:78:6d:bb:c5:ed:c8:fd:dd:f3:cb:7f:03:79:0f:a8:82:d2:
         8c:e0:d8:29:24:1f:cf:7c:c5:d1:e7:fb:09:c4:61:72:c5:98:
         60:be:db:0d:96:8c:9c:49:6e:96:c9:af:c6:39:13:0b:33:20:
         56:cb:8b:19:bb:fd:4f:19:6c:ff:23:56:a4:6a:7c:dd:85:70:
         7f:54:61:9d:25:8d:33:9a:7d:23:7a:e5:ad:33:a2:48:56:f6:
         ea:dd:f3:c4:9b:fc:64:f9:57:6b:1b:53:ba:9b:89:09:09:97:
         42:bb:79:a5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEftJOAPeEc0pzv5NwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTRmYmIxNDgtOGIxYi00YTE3LTg2YjItYWZkMDQ2MmQ4
MmZmMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk
ZTA3Y2YwOGQtMDQ5ZC00NTdhLWIzYzUtODJlODM3NzQzNTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Jo8ahq0GPjipasVsF7VZl/x/jLeERZ3mh4h
PFr5l66x8CqPZXMakHIVPHg8HnOOubtlIwOoSOMQoUHVSvcrauK5t+blXNapMw+7
Gk4DVpwMfOzZVBp4/h46oFoxciTwd8C+5uj+IniDTMQpsLVXZU1x3K5wmakQW0ku
kM6footmXACH5SZ2ShqGe98n7JN6+6T7kxnFbMcH6qipHHRIBY2wNcpSJaa/DeRf
8DoscfNCZV1lY6yskJfqj2Ps7xlemPJiThCwXqiqJFKsAjc7e9233uGruMP+bzT5
xYiMDoOkXDMf2zon1GjBf+kf8nGvtmd/rKxq+Kn0HBFtB71rtwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLT9H51xFfFn/r5lGEvYH6Uleto5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85NGZi
YjE0OC04YjFiLTRhMTctODZiMi1hZmQwNDYyZDgyZmYvODE1ZWI5NWYtYzU1Yy0z
OTNiLTlkNzAtYjVmNzRhYTQ3YmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTRmYmIxNDgtOGIxYi00YTE3LTg2
YjItYWZkMDQ2MmQ4MmZmLzk0ZmJiMTQ4LThiMWItNGExNy04NmIyLWFmZDA0NjJk
ODJmZi5jcmwwHwYDVR0jBBgwFoAUM8r0MLDxVMpzf55J/FGeoNXTBZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85NGZiYjE0OC04YjFiLTRhMTctODZiMi1hZmQw
NDYyZDgyZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4IgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAj9waYb5wNYn3M0r4xoMvtx4PYYAR+zAdZqN34LCpEuXpqG9TaGzW
zt4glVhFGahD2VIWSUCQvTxa35EuuzRpxbh0a4r7mCSyAXYZjgT70YIjihHZ/XAn
Ll5mYRLhyx4VIqWswmmrmBsGO9K1AHfEt9XAwt/Mx1h4IqmhYcTgmIJy+fuBF8zO
bXr3mgksNx82Onhtu8XtyP3d88t/A3kPqILSjODYKSQfz3zF0ef7CcRhcsWYYL7b
DZaMnElulsmvxjkTCzMgVsuLGbv9Txls/yNWpGp83YVwf1RhnSWNM5p9I3rlrTOi
SFb26t3zxJv8ZPlXaxtTupuJCQmXQrt5pQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:30 2024 by rpki-client on console-fra.rpki-client.org