Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9f818511-3e38-3a87-853b-81a583a9f024.roa
File:                     9f818511-3e38-3a87-853b-81a583a9f024.roa (raw, json)
Hash identifier:          i4g9JnfeCfgcGBh1Q/skPJnCGwu+LGAZgp0nnMD1a5c=
Subject key identifier:   C6:60:D8:86:CB:BD:4F:D6:B6:52:75:57:87:21:87:A9:39:D0:7B:C3
Certificate issuer:       /CN=d575d3fa-017d-4991-9edf-39101e5d78b5
Certificate serial:       010D0C9F43285847CACBD9E240A924B6C48A1900
Authority key identifier: C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9f818511-3e38-3a87-853b-81a583a9f024.roa
Signing time:             Wed 06 Nov 2024 18:43:58 +0000
ROA not before:           Wed 06 Nov 2024 18:43:58 +0000
ROA not after:            Tue 04 Feb 2025 18:43:58 +0000
asID:                     401461
IP address blocks:        2602:f7b4::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:cb:d9:e2:40:a9:24:b6:c4:8a:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d575d3fa-017d-4991-9edf-39101e5d78b5
        Validity
            Not Before: Nov  6 18:43:58 2024 GMT
            Not After : Feb  4 18:43:58 2025 GMT
        Subject: CN=ea744ad6-56cb-466c-822f-ce407ba30562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:20:ca:a3:d6:b0:2a:9a:95:12:44:07:3e:
                    b1:39:23:c6:47:1c:88:38:fb:ec:31:09:e2:ea:cb:
                    a2:02:13:79:b8:dd:15:9b:6d:98:bd:c1:5f:8b:6d:
                    d3:80:2e:3a:a4:40:4b:11:57:8f:e4:95:1e:92:64:
                    64:73:ed:69:81:11:08:ed:7e:f1:f6:66:50:56:29:
                    d5:8c:3b:29:89:db:d6:ff:ce:64:68:44:ab:39:df:
                    44:e5:ba:c1:04:42:88:27:b0:fa:25:20:c2:fd:a6:
                    e8:1d:fc:14:aa:cc:bf:83:13:17:84:33:ba:9c:71:
                    0d:dd:bc:ec:76:38:0f:8b:bf:06:b4:b8:90:97:49:
                    31:77:52:04:a8:36:33:99:9b:bc:d7:ca:67:08:f2:
                    fd:f2:46:f9:5b:d9:75:ea:0d:df:c5:bb:4b:e5:61:
                    bc:50:78:bd:dd:a4:b5:07:15:85:89:17:c1:a0:0f:
                    e0:52:95:a3:d4:ca:91:2d:14:37:88:48:e7:b2:f2:
                    b0:75:68:1c:e2:43:0a:34:54:f1:63:f1:92:2a:29:
                    4d:1e:3f:47:4e:44:ba:11:0b:39:53:c0:9f:b8:f2:
                    38:1c:8f:2a:1f:93:90:3f:30:65:8a:0c:d0:f9:51:
                    aa:6d:13:20:97:0e:76:39:45:6b:e2:e5:75:d0:06:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:60:D8:86:CB:BD:4F:D6:B6:52:75:57:87:21:87:A9:39:D0:7B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9f818511-3e38-3a87-853b-81a583a9f024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl

            X509v3 Authority Key Identifier:
                keyid:C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7b4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:63:ea:e7:d5:6e:f1:51:65:65:e5:05:f4:02:0f:16:d5:d1:
         0f:1c:9d:73:c2:4e:f4:c3:86:7e:85:ed:da:39:ce:90:1b:4b:
         42:1a:78:9a:d3:3e:eb:e2:bc:65:58:21:b6:a0:c8:24:44:26:
         55:15:27:0e:c7:58:e8:9a:be:e1:36:ff:12:fe:b7:f0:8c:39:
         f7:dd:2b:8e:2f:9d:42:00:7e:61:cb:da:2e:06:13:ff:34:c5:
         2f:1c:d5:40:97:2e:07:74:51:1b:60:c0:61:ec:e7:e7:be:b1:
         8f:be:82:ce:cf:b9:73:ca:da:4a:a6:25:47:44:18:d9:8e:a9:
         22:a7:db:ac:9d:dc:3f:2c:71:a1:5b:94:fd:ef:fa:ff:61:0b:
         bf:a4:b9:c7:09:31:c6:ac:e3:1b:64:4c:06:3d:e9:30:a4:69:
         67:5b:ab:21:17:24:87:2f:dc:b5:65:61:69:23:0f:ea:ba:25:
         92:a0:27:9f:bc:f8:44:4e:04:e6:38:96:b3:3e:70:9f:ee:1c:
         3b:63:e4:df:d4:58:63:58:b3:dc:af:86:4e:60:ac:19:0d:02:
         c7:cb:5e:4d:5c:35:2c:68:20:fd:0a:66:94:eb:3c:a7:44:c1:
         0b:95:5d:7f:d3:4f:7c:f3:ed:36:5c:14:0f:9b:a6:83:14:59:
         07:91:89:43
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfKy9niQKkktsSKGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDU3NWQzZmEtMDE3ZC00OTkxLTllZGYtMzkxMDFlNWQ3
OGI1MB4XDTI0MTEwNjE4NDM1OFoXDTI1MDIwNDE4NDM1OFowLzEtMCsGA1UEAxMk
ZWE3NDRhZDYtNTZjYi00NjZjLTgyMmYtY2U0MDdiYTMwNTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmicgyqPWsCqalRJEBz6xOSPGRxyIOPvsMQni
6suiAhN5uN0Vm22YvcFfi23TgC46pEBLEVeP5JUekmRkc+1pgREI7X7x9mZQVinV
jDspidvW/85kaESrOd9E5brBBEKIJ7D6JSDC/aboHfwUqsy/gxMXhDO6nHEN3bzs
djgPi78GtLiQl0kxd1IEqDYzmZu818pnCPL98kb5W9l16g3fxbtL5WG8UHi93aS1
BxWFiRfBoA/gUpWj1MqRLRQ3iEjnsvKwdWgc4kMKNFTxY/GSKilNHj9HTkS6EQs5
U8CfuPI4HI8qH5OQPzBligzQ+VGqbRMglw52OUVr4uV10AaOsQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMZg2IbLvU/WtlJ1V4chh6k50HvDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTc1
ZDNmYS0wMTdkLTQ5OTEtOWVkZi0zOTEwMWU1ZDc4YjUvOWY4MTg1MTEtM2UzOC0z
YTg3LTg1M2ItODFhNTgzYTlmMDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU3NWQzZmEtMDE3ZC00OTkxLTll
ZGYtMzkxMDFlNWQ3OGI1L2Q1NzVkM2ZhLTAxN2QtNDk5MS05ZWRmLTM5MTAxZTVk
NzhiNS5jcmwwHwYDVR0jBBgwFoAUwkGOiLkb3QGcAwS1SgSyzPlOLfwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTc1ZDNmYS0wMTdkLTQ5OTEtOWVkZi0zOTEw
MWU1ZDc4YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3tAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASmPq59Vu8VFlZeUF9AIPFtXRDxydc8JO9MOGfoXt2jnOkBtLQhp4
mtM+6+K8ZVghtqDIJEQmVRUnDsdY6Jq+4Tb/Ev638Iw5990rji+dQgB+YcvaLgYT
/zTFLxzVQJcuB3RRG2DAYezn576xj76Czs+5c8raSqYlR0QY2Y6pIqfbrJ3cPyxx
oVuU/e/6/2ELv6S5xwkxxqzjG2RMBj3pMKRpZ1urIRckhy/ctWVhaSMP6rolkqAn
n7z4RE4E5jiWsz5wn+4cO2Pk39RYY1iz3K+GTmCsGQ0Cx8teTVw1LGgg/QpmlOs8
p0TBC5Vdf9NPfPPtNlwUD5umgxRZB5GJQw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:30 2024 by rpki-client on console-fra.rpki-client.org