Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa
File:                     44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa (raw, json)
Hash identifier:          GyezgNKB0VkGgxuLknGdTjBVbQEL4nBs8fPCKRHDTZQ=
Subject key identifier:   50:A4:2F:A8:A0:16:15:9F:7F:E9:70:AF:ED:7B:B6:84:25:E6:0A:82
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F43285847F84F80B321AD2B241D2A9780
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     12198
IP address blocks:        2602:f919:900::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:80:b3:21:ad:2b:24:1d:2a:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=ed3afbaa-fadd-44c8-b5a0-fb5e4ebd4e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:ab:1f:a3:11:7a:eb:47:44:4c:58:30:3a:
                    57:5d:db:ac:1b:a9:b5:0d:d2:da:b1:df:1d:3a:94:
                    84:e4:48:43:0e:68:8e:89:9d:f7:c6:89:ed:47:b8:
                    21:ab:a0:04:80:a6:8d:79:4a:52:2f:06:48:60:74:
                    18:c6:e1:bd:32:d6:ea:37:fa:ad:0a:c8:c5:d3:74:
                    1f:98:49:5d:c9:e6:f2:a6:72:fb:f5:0b:2e:c9:6a:
                    8f:9a:86:3d:d3:c7:76:76:9d:22:b3:1c:ac:9c:cc:
                    eb:1b:68:17:70:83:71:25:f5:b0:f3:fe:61:08:24:
                    ca:c1:bb:55:10:f2:9d:66:9b:ab:52:3c:d0:c7:8a:
                    f8:75:96:9e:3c:17:b8:cf:6a:5b:f0:a4:c6:50:e9:
                    83:0d:c7:03:a8:66:32:53:5b:11:d8:45:5d:39:7b:
                    a6:5b:af:a5:bb:2d:1f:52:7e:64:13:3d:11:36:d0:
                    d3:57:22:03:92:d7:6b:71:ad:33:8d:bb:c0:4e:f5:
                    10:5b:1e:94:2d:54:02:87:34:25:c5:4f:da:8e:df:
                    ff:9e:da:4c:90:5a:06:d8:60:96:a2:1e:07:45:5c:
                    e5:a0:ee:ec:70:dc:6c:d9:df:41:18:73:15:38:af:
                    77:0a:79:72:00:99:0a:a7:1e:7f:8d:db:fd:74:c8:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A4:2F:A8:A0:16:15:9F:7F:E9:70:AF:ED:7B:B6:84:25:E6:0A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:21:9d:f6:ce:45:de:3e:0a:11:9d:c2:77:aa:d0:f8:bb:21:
         98:d3:42:26:35:ec:98:20:20:30:8f:bc:d8:17:3d:db:93:2f:
         0d:0f:d7:1f:f8:7f:7f:2e:cc:c7:d6:7d:23:99:16:e0:25:91:
         24:00:1d:e5:5a:f4:3d:69:77:68:a9:10:f3:16:cd:28:be:ca:
         7a:89:d9:7f:69:84:26:ab:49:53:fd:16:a1:20:71:3b:44:10:
         9c:3d:21:dc:d6:31:5a:44:f4:13:d2:1f:ce:90:f8:6f:9b:8e:
         b8:e5:68:01:58:a2:c8:15:7f:6f:1d:84:45:57:a1:73:64:20:
         7a:3b:1f:58:67:36:a8:ad:8b:0d:6b:03:80:6f:9e:7b:ad:fc:
         0c:44:e3:82:f9:1d:b4:26:8d:08:6b:fa:24:88:cf:d6:19:a0:
         ee:ff:89:dc:4a:ba:1c:fc:2d:07:39:ac:93:f4:1c:c8:cd:2d:
         60:c5:01:b1:79:75:c3:bd:db:d8:e1:c1:c8:aa:e3:82:0d:23:
         93:50:f1:fe:fe:ca:4c:e6:d5:95:e9:07:53:56:05:84:24:4f:
         1c:59:39:68:1f:d2:44:ae:f2:8e:cd:f4:c7:76:fd:e6:db:f5:
         d5:00:00:93:2a:d3:36:a9:c3:99:31:d1:24:23:da:9a:ec:c4:
         55:09:ac:97
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEf4T4CzIa0rJB0ql4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDg0OGNjOWItZTQ2Zi00ODVlLWIzZjItNGYzOTNiNWQ5
MmQ2MB4XDTI0MTEyMzAyMDAyOFoXDTI1MDIyMTAyMDAyOFowLzEtMCsGA1UEAxMk
ZWQzYWZiYWEtZmFkZC00NGM4LWI1YTAtZmI1ZTRlYmQ0ZTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS+rH6MReutHRExYMDpXXdusG6m1DdLasd8d
OpSE5EhDDmiOiZ33xontR7ghq6AEgKaNeUpSLwZIYHQYxuG9MtbqN/qtCsjF03Qf
mEldyebypnL79QsuyWqPmoY908d2dp0isxysnMzrG2gXcINxJfWw8/5hCCTKwbtV
EPKdZpurUjzQx4r4dZaePBe4z2pb8KTGUOmDDccDqGYyU1sR2EVdOXumW6+luy0f
Un5kEz0RNtDTVyIDktdrca0zjbvATvUQWx6ULVQChzQlxU/ajt//ntpMkFoG2GCW
oh4HRVzloO7scNxs2d9BGHMVOK93CnlyAJkKpx5/jdv9dMjLlQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFCkL6igFhWff+lwr+17toQl5gqCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ODQ4
Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5M2I1ZDkyZDYvNDRhMmM1YzItNjVmOS0z
NmY2LThmYTMtYTcxNDU3YmMxMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDg0OGNjOWItZTQ2Zi00ODVlLWIz
ZjItNGYzOTNiNWQ5MmQ2LzQ4NDhjYzliLWU0NmYtNDg1ZS1iM2YyLTRmMzkzYjVk
OTJkNi5jcmwwHwYDVR0jBBgwFoAUtipAlYdVr48BpEATPSLyFSu2jeswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80ODQ4Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5
M2I1ZDkyZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5GQkw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAeiGd9s5F3j4KEZ3Cd6rQ+LshmNNCJjXsmCAgMI+82Bc925MvDQ/X
H/h/fy7Mx9Z9I5kW4CWRJAAd5Vr0PWl3aKkQ8xbNKL7KeonZf2mEJqtJU/0WoSBx
O0QQnD0h3NYxWkT0E9IfzpD4b5uOuOVoAViiyBV/bx2ERVehc2QgejsfWGc2qK2L
DWsDgG+ee638DETjgvkdtCaNCGv6JIjP1hmg7v+J3Eq6HPwtBzmsk/QcyM0tYMUB
sXl1w73b2OHByKrjgg0jk1Dx/v7KTObVlekHU1YFhCRPHFk5aB/SRK7yjs30x3b9
5tv11QAAkyrTNqnDmTHRJCPamuzEVQmslw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:40 2024 by rpki-client on console-fra.rpki-client.org