Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/3d7491f4-30bd-3b23-af68-882e43e294e5.roa
File:                     3d7491f4-30bd-3b23-af68-882e43e294e5.roa (raw, json)
Hash identifier:          bnqiIhuTFfsyQZPHvWQqMzhIjpHLS1Cf2wEg7r4lV90=
Subject key identifier:   8E:4C:4E:A8:CF:B8:6A:32:B0:3F:8A:0C:66:04:D3:C0:5A:37:80:FD
Certificate issuer:       /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial:       010D0C9F43285847967BC1A75031FBADCD3E6C80
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/3d7491f4-30bd-3b23-af68-882e43e294e5.roa
Signing time:             Sat 19 Oct 2024 01:00:33 +0000
ROA not before:           Sat 19 Oct 2024 01:00:33 +0000
ROA not after:            Fri 17 Jan 2025 02:00:33 +0000
asID:                     215304
IP address blocks:        2602:f864::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:96:7b:c1:a7:50:31:fb:ad:cd:3e:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Validity
            Not Before: Oct 19 01:00:33 2024 GMT
            Not After : Jan 17 02:00:33 2025 GMT
        Subject: CN=3cb66fbb-9101-4144-9fb4-d69c085b72ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6f:ae:b6:a3:31:e0:44:7c:fc:1b:b0:a7:70:
                    30:19:60:47:e7:a8:cd:ec:46:04:2b:4f:4d:9b:b2:
                    fa:0b:59:81:53:36:db:ec:77:c6:47:d7:61:a4:33:
                    51:2b:42:0f:00:a1:92:24:b1:85:b3:44:41:30:fd:
                    14:41:94:3c:bb:23:b7:a3:f0:e7:cf:ac:34:b8:dc:
                    68:33:8c:17:f5:96:45:09:ba:4f:05:bd:1b:46:66:
                    b3:90:c7:29:94:ec:24:1a:56:9b:62:5f:d9:34:e5:
                    75:2a:7c:fb:7d:55:83:f3:8d:51:a2:f8:86:68:e5:
                    a1:a3:e0:57:fb:25:ba:61:4b:1b:0f:d5:93:08:83:
                    42:65:3a:77:cd:0f:69:8d:9f:31:f1:9c:fb:6a:74:
                    1f:1e:df:e2:1a:8b:d9:52:a3:08:90:6b:35:f9:8c:
                    ff:f6:d3:7d:6d:a9:a2:e0:5a:cc:8e:de:cc:ea:37:
                    cf:9e:b4:54:ae:4a:0e:ca:1b:c7:a4:a3:4c:5b:4a:
                    24:71:01:48:a6:19:d4:91:1a:b8:f4:57:c9:f4:b9:
                    9c:aa:92:30:c5:c6:7c:36:1a:c8:38:8d:83:68:05:
                    5c:64:07:cd:ca:01:2f:e6:56:c2:09:fa:e9:b1:86:
                    c4:da:94:ca:29:51:70:b8:cb:a0:05:e8:c9:24:b9:
                    02:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4C:4E:A8:CF:B8:6A:32:B0:3F:8A:0C:66:04:D3:C0:5A:37:80:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/3d7491f4-30bd-3b23-af68-882e43e294e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl

            X509v3 Authority Key Identifier:
                keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f864::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:8d:9c:ac:4f:99:55:f3:43:0c:7b:f4:7b:d3:66:d1:0a:e1:
         e4:de:fb:a0:c6:88:54:70:bc:6f:fe:cb:17:f1:94:bb:96:76:
         68:b0:e4:6d:ae:e1:dc:fa:8b:89:96:5c:43:d6:3b:8c:75:54:
         b7:5f:ab:62:5f:e9:cd:33:7a:e5:96:88:6d:05:26:51:0a:07:
         cf:12:d6:3a:10:06:da:cb:0d:c2:15:b7:b3:8f:5d:68:b0:d2:
         2b:26:3a:54:e2:7a:eb:c4:bb:28:de:6c:76:4b:e8:95:3d:e0:
         04:dc:5b:4d:b0:f8:e9:7c:c2:95:0c:bd:1d:d5:02:51:97:5d:
         d7:25:2e:7e:b6:8a:17:9b:ed:1b:69:6b:93:77:0e:7e:32:49:
         9e:93:ac:ef:e7:be:47:7e:69:a9:bf:04:bc:4e:c6:d8:0f:da:
         df:9d:26:15:f3:28:ff:a0:4e:15:aa:24:c6:96:e7:14:d6:8a:
         19:d2:64:8c:27:30:93:4b:55:c6:42:c5:38:eb:ea:5c:db:e8:
         8d:97:67:72:e3:d5:1b:48:a7:b3:ea:a7:19:fc:0d:a4:2a:b6:
         0f:40:7f:b2:22:2a:56:93:cd:bc:de:0c:ac:7e:69:9f:c0:5a:
         80:65:a4:e9:50:f7:15:29:e7:10:30:d6:ab:36:83:ce:e6:fd:
         0d:94:e9:a3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEeWe8GnUDH7rc0+bIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI1MmM3OTYtNmFiMi00ZWI5LWJhYTAtMTQ0NWZjODBj
YTg0MB4XDTI0MTAxOTAxMDAzM1oXDTI1MDExNzAyMDAzM1owLzEtMCsGA1UEAxMk
M2NiNjZmYmItOTEwMS00MTQ0LTlmYjQtZDY5YzA4NWI3MmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W+utqMx4ER8/Buwp3AwGWBH56jN7EYEK09N
m7L6C1mBUzbb7HfGR9dhpDNRK0IPAKGSJLGFs0RBMP0UQZQ8uyO3o/Dnz6w0uNxo
M4wX9ZZFCbpPBb0bRmazkMcplOwkGlabYl/ZNOV1Knz7fVWD841RoviGaOWho+BX
+yW6YUsbD9WTCINCZTp3zQ9pjZ8x8Zz7anQfHt/iGovZUqMIkGs1+Yz/9tN9bami
4FrMjt7M6jfPnrRUrkoOyhvHpKNMW0okcQFIphnUkRq49FfJ9LmcqpIwxcZ8NhrI
OI2DaAVcZAfNygEv5lbCCfrpsYbE2pTKKVFwuMugBejJJLkCrwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFI5MTqjPuGoysD+KDGYE08BaN4D9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMjUy
Yzc5Ni02YWIyLTRlYjktYmFhMC0xNDQ1ZmM4MGNhODQvM2Q3NDkxZjQtMzBiZC0z
YjIzLWFmNjgtODgyZTQzZTI5NGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTI1MmM3OTYtNmFiMi00ZWI5LWJh
YTAtMTQ0NWZjODBjYTg0LzEyNTJjNzk2LTZhYjItNGViOS1iYWEwLTE0NDVmYzgw
Y2E4NC5jcmwwHwYDVR0jBBgwFoAUAv6NghE83dRBtQk6uiAx1BAps/EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMjUyYzc5Ni02YWIyLTRlYjktYmFhMC0xNDQ1
ZmM4MGNhODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL4ZAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdo2crE+ZVfNDDHv0e9Nm0Qrh5N77oMaIVHC8b/7LF/GUu5Z2aLDk
ba7h3PqLiZZcQ9Y7jHVUt1+rYl/pzTN65ZaIbQUmUQoHzxLWOhAG2ssNwhW3s49d
aLDSKyY6VOJ668S7KN5sdkvolT3gBNxbTbD46XzClQy9HdUCUZdd1yUufraKF5vt
G2lrk3cOfjJJnpOs7+e+R35pqb8EvE7G2A/a350mFfMo/6BOFaokxpbnFNaKGdJk
jCcwk0tVxkLFOOvqXNvojZdncuPVG0ins+qnGfwNpCq2D0B/siIqVpPNvN4MrH5p
n8BagGWk6VD3FSnnEDDWqzaDzub9DZTpow==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:35 2024 by rpki-client on console-fra.rpki-client.org