Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa
File:                     1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa (raw, json)
Hash identifier:          IwCgA3W86RfMGX1KoJt/t3XAMikICKak1ekZUkm70aQ=
Subject key identifier:   4D:48:DB:A3:14:D2:8A:13:49:03:22:F5:D3:F8:AB:6F:29:8E:77:F6
Certificate issuer:       /CN=d9914204-e089-4759-b838-5325dc4683dd
Certificate serial:       010D0C9F43285847C82940080342AA85F0B1D380
Authority key identifier: 3C:1C:70:92:5F:C0:CC:04:8D:10:BB:B4:41:F2:2C:DA:78:2F:0A:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa
Signing time:             Tue 05 Nov 2024 20:04:44 +0000
ROA not before:           Tue 05 Nov 2024 20:04:44 +0000
ROA not after:            Mon 03 Feb 2025 20:04:44 +0000
asID:                     54686
IP address blocks:        2602:f9b8::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/d9914204-e089-4759-b838-5325dc4683dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/d9914204-e089-4759-b838-5325dc4683dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:29:40:08:03:42:aa:85:f0:b1:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9914204-e089-4759-b838-5325dc4683dd
        Validity
            Not Before: Nov  5 20:04:44 2024 GMT
            Not After : Feb  3 20:04:44 2025 GMT
        Subject: CN=7d0da31f-4def-4e63-9541-1284c6325315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:01:24:f8:12:67:f4:8c:74:af:4d:28:04:
                    d5:bb:67:96:44:5d:17:84:e4:68:84:65:a1:10:b8:
                    bf:b8:ce:34:e1:67:f2:0e:40:cf:e9:be:3e:39:b5:
                    93:fc:87:d3:30:32:1a:41:5e:20:f0:c3:8c:dd:a3:
                    69:27:02:03:d8:67:20:9e:40:44:b1:4c:e2:dc:58:
                    3c:ec:23:72:04:25:79:9a:a1:f7:5a:cc:28:b7:1e:
                    ac:42:3a:14:4e:39:7e:8f:56:4c:55:fb:9f:c4:61:
                    42:e6:bf:57:24:6d:4a:fa:81:b6:67:29:fa:30:53:
                    0f:f5:ff:79:8d:dd:09:c6:ce:09:0a:a3:68:69:b6:
                    a4:31:56:78:76:f8:f9:5d:1c:dd:f2:54:de:cf:d1:
                    e2:27:e2:aa:ba:2c:7e:69:33:cd:da:5d:ca:cb:e4:
                    7a:3b:4d:00:51:f9:f6:ca:89:05:da:21:13:24:ec:
                    9c:7a:e8:dc:18:0c:74:0a:0c:79:9d:67:fb:3c:89:
                    3b:56:9d:aa:3d:4a:1f:b4:fd:b7:99:5d:8d:59:38:
                    ed:60:e4:91:54:66:70:c0:17:bd:28:34:50:8a:45:
                    e6:9f:10:85:03:ae:ce:3e:87:ba:9b:f9:43:28:f1:
                    6f:f6:ac:fb:2a:cc:c9:66:d3:a1:68:7e:ab:9f:1e:
                    1b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:48:DB:A3:14:D2:8A:13:49:03:22:F5:D3:F8:AB:6F:29:8E:77:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/d9914204-e089-4759-b838-5325dc4683dd.crl

            X509v3 Authority Key Identifier:
                keyid:3C:1C:70:92:5F:C0:CC:04:8D:10:BB:B4:41:F2:2C:DA:78:2F:0A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9b8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:51:e5:6e:4b:74:ff:3d:6b:96:08:bd:1a:d2:fa:06:33:cd:
         c4:66:0a:e9:66:a1:f1:95:1d:4a:86:13:d9:cc:e2:be:aa:3e:
         9d:d7:87:99:09:ea:6f:66:a5:ad:94:73:6b:87:f4:e4:92:9b:
         7d:8e:5a:2e:42:8b:13:71:da:81:7e:4c:62:38:d8:22:22:1e:
         ea:77:3f:3a:7d:f4:bd:0a:3b:64:fa:35:6a:5a:37:c0:c3:eb:
         f9:d5:98:d0:67:07:d2:ce:f9:de:7d:f1:21:10:a4:c9:97:d1:
         50:c3:e8:ee:3e:ec:65:6e:cd:70:18:51:9e:93:15:10:71:30:
         43:1e:89:ae:af:6a:3b:f3:78:9d:b7:8e:05:85:be:d3:b4:9e:
         c1:08:82:0a:a8:ac:f9:45:5d:09:2e:b1:70:38:4e:16:31:d7:
         ae:46:ab:6f:f6:9b:70:1f:94:33:d5:01:b0:e0:df:24:5e:97:
         63:8f:ef:0d:69:b5:18:a2:a2:4c:6e:89:37:64:20:16:cb:2e:
         d5:e6:dc:7f:e8:e3:75:e3:ea:27:a7:1c:84:f7:46:08:54:ed:
         b6:81:1f:f1:05:22:bd:ae:be:96:7e:6b:f0:e0:df:0a:3f:3f:
         48:b2:36:9e:2b:0c:b8:4f:b9:9e:a4:eb:36:35:ea:35:a2:62:
         e5:67:09:66
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfIKUAIA0KqhfCx04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDk5MTQyMDQtZTA4OS00NzU5LWI4MzgtNTMyNWRjNDY4
M2RkMB4XDTI0MTEwNTIwMDQ0NFoXDTI1MDIwMzIwMDQ0NFowLzEtMCsGA1UEAxMk
N2QwZGEzMWYtNGRlZi00ZTYzLTk1NDEtMTI4NGM2MzI1MzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjcBJPgSZ/SMdK9NKATVu2eWRF0XhORohGWh
ELi/uM404WfyDkDP6b4+ObWT/IfTMDIaQV4g8MOM3aNpJwID2GcgnkBEsUzi3Fg8
7CNyBCV5mqH3Wswotx6sQjoUTjl+j1ZMVfufxGFC5r9XJG1K+oG2Zyn6MFMP9f95
jd0Jxs4JCqNoabakMVZ4dvj5XRzd8lTez9HiJ+Kquix+aTPN2l3Ky+R6O00AUfn2
yokF2iETJOyceujcGAx0Cgx5nWf7PIk7Vp2qPUoftP23mV2NWTjtYOSRVGZwwBe9
KDRQikXmnxCFA67OPoe6m/lDKPFv9qz7KszJZtOhaH6rnx4bbQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE1I26MU0ooTSQMi9dP4q28pjnf2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kOTkx
NDIwNC1lMDg5LTQ3NTktYjgzOC01MzI1ZGM0NjgzZGQvMWY2NmE5OGUtMDU1ZS0z
YjM5LWE4NzQtNGM4ZGVlMmY2MWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDk5MTQyMDQtZTA4OS00NzU5LWI4
MzgtNTMyNWRjNDY4M2RkL2Q5OTE0MjA0LWUwODktNDc1OS1iODM4LTUzMjVkYzQ2
ODNkZC5jcmwwHwYDVR0jBBgwFoAUPBxwkl/AzASNELu0QfIs2ngvCv8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kOTkxNDIwNC1lMDg5LTQ3NTktYjgzOC01MzI1
ZGM0NjgzZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5uAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZVHlbkt0/z1rlgi9GtL6BjPNxGYK6Wah8ZUdSoYT2czivqo+ndeH
mQnqb2alrZRza4f05JKbfY5aLkKLE3HagX5MYjjYIiIe6nc/On30vQo7ZPo1alo3
wMPr+dWY0GcH0s753n3xIRCkyZfRUMPo7j7sZW7NcBhRnpMVEHEwQx6Jrq9qO/N4
nbeOBYW+07SewQiCCqis+UVdCS6xcDhOFjHXrkarb/abcB+UM9UBsODfJF6XY4/v
DWm1GKKiTG6JN2QgFssu1ebcf+jjdePqJ6cchPdGCFTttoEf8QUiva6+ln5r8ODf
Cj8/SLI2nisMuE+5nqTrNjXqNaJi5WcJZg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:25 2024 by rpki-client on console-ams.rpki-client.org