Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa
File:                     aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa (raw, json)
Hash identifier:          xKw1F+yMlfXoUqXEAMhjRXIUcroQJX/WbSJWyPzXMC8=
Subject key identifier:   B5:ED:EB:83:6B:D1:95:EE:2D:32:9F:A7:93:4F:07:F5:D2:BE:86:5B
Certificate issuer:       /CN=4e424533-541a-4c27-93d7-8d76453fe152
Certificate serial:       010D0C9F4328584777C641D34B9E61E95F511C80
Authority key identifier: CB:F0:85:73:F9:51:8E:80:A5:B6:D5:EC:C0:F6:5F:D2:39:0F:41:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     401036
IP address blocks:        2602:f90e::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:41:d3:4b:9e:61:e9:5f:51:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e424533-541a-4c27-93d7-8d76453fe152
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=fad075ea-0445-41fb-a131-11638e7ec961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:07:4a:75:1e:c4:b0:46:e0:7b:0a:16:e7:eb:
                    fa:df:c4:a9:bb:1b:b4:95:9f:87:d1:4e:14:2b:53:
                    3e:17:d6:25:ee:97:80:95:80:6a:21:a3:0b:9b:17:
                    d7:5f:d3:9b:19:2c:bc:3f:47:08:75:1d:73:e4:89:
                    98:5a:dc:aa:dd:64:84:22:8c:b7:39:08:e1:63:4c:
                    66:63:7e:5a:57:1f:26:7a:77:e7:6f:b3:0a:44:b0:
                    ba:6e:51:56:f2:e0:d2:e5:6e:5e:ff:41:bb:65:13:
                    19:84:8b:5b:ad:ef:19:75:f6:46:27:3e:91:23:01:
                    e8:f0:b9:42:03:81:f2:19:ec:04:b1:84:2e:71:72:
                    db:d1:61:92:bb:49:2e:b0:4d:f7:e3:b3:9d:23:ad:
                    de:75:0d:7b:c5:f0:bd:bc:b1:6c:f1:0e:06:d7:d0:
                    a8:a0:81:22:21:a2:70:69:cf:f6:e8:03:8e:b6:1c:
                    83:64:be:06:bf:a7:4a:56:3f:64:d5:e2:a5:33:e6:
                    bf:02:df:11:fa:3a:6f:e8:49:3c:a6:21:48:bd:1e:
                    d1:f9:40:58:08:3c:52:4a:f9:e9:0a:f1:a0:d5:df:
                    27:45:ae:21:48:15:c6:38:e0:13:11:4d:0e:ab:3e:
                    2e:11:b1:cc:4a:25:1a:34:72:bc:92:9b:36:c1:cd:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:ED:EB:83:6B:D1:95:EE:2D:32:9F:A7:93:4F:07:F5:D2:BE:86:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.crl

            X509v3 Authority Key Identifier:
                keyid:CB:F0:85:73:F9:51:8E:80:A5:B6:D5:EC:C0:F6:5F:D2:39:0F:41:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:91:f6:f7:59:f2:f4:7e:5d:2f:b7:ed:af:ae:e3:ee:20:01:
         b2:4f:6c:5f:1b:e0:01:d2:cc:e2:42:01:ea:d9:a7:09:cd:e8:
         f1:14:61:24:8f:57:44:3a:34:f0:b3:88:85:88:2f:69:a7:01:
         99:01:a9:38:a6:7e:49:54:ca:e2:d6:46:e7:b1:f4:18:1a:7a:
         97:05:3b:b4:3d:16:99:9b:26:4e:4c:f7:03:ee:fa:91:99:26:
         27:eb:74:a3:8e:5e:92:17:37:71:c4:21:f4:0e:33:94:7f:f6:
         1c:d3:be:18:20:30:61:e2:d5:ea:dd:78:a9:b2:da:60:d1:44:
         d6:47:5c:0f:36:93:f8:d3:e8:65:32:58:3f:e6:07:b8:32:86:
         9f:b4:4f:97:2b:3b:9e:0e:f7:b2:05:fb:54:b7:0f:e4:6c:0f:
         d6:69:08:e2:1c:3a:a1:a0:a8:00:a0:17:03:e2:c2:6e:a0:5a:
         6b:4a:35:f2:c7:89:1e:c9:a2:87:4e:b1:ad:bf:07:66:60:df:
         e0:9d:b0:0a:71:84:33:c5:83:1e:57:bc:80:70:5f:ee:4b:f7:
         c2:45:c3:2b:de:b2:c2:3d:69:b9:41:11:b9:e7:3a:d6:2e:1d:
         3b:0b:e9:9d:85:d3:50:7c:be:37:c0:85:58:e3:35:8f:68:51:
         d7:30:50:ca
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEd3xkHTS55h6V9RHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU0MjQ1MzMtNTQxYS00YzI3LTkzZDctOGQ3NjQ1M2Zl
MTUyMB4XDTI0MTAwODAxMDAzMVoXDTI1MDEwNjAyMDAzMVowLzEtMCsGA1UEAxMk
ZmFkMDc1ZWEtMDQ0NS00MWZiLWExMzEtMTE2MzhlN2VjOTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQdKdR7EsEbgewoW5+v638Spuxu0lZ+H0U4U
K1M+F9Yl7peAlYBqIaMLmxfXX9ObGSy8P0cIdR1z5ImYWtyq3WSEIoy3OQjhY0xm
Y35aVx8menfnb7MKRLC6blFW8uDS5W5e/0G7ZRMZhItbre8ZdfZGJz6RIwHo8LlC
A4HyGewEsYQucXLb0WGSu0kusE3347OdI63edQ17xfC9vLFs8Q4G19CooIEiIaJw
ac/26AOOthyDZL4Gv6dKVj9k1eKlM+a/At8R+jpv6Ek8piFIvR7R+UBYCDxSSvnp
CvGg1d8nRa4hSBXGOOATEU0Oqz4uEbHMSiUaNHK8kps2wc2e3wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLXt64Nr0ZXuLTKfp5NPB/XSvoZbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ZTQy
NDUzMy01NDFhLTRjMjctOTNkNy04ZDc2NDUzZmUxNTIvYWEzYjFmNGUtNWEyNC0z
MWI2LWJlOTQtZWY3ZjYzNzMxYWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGU0MjQ1MzMtNTQxYS00YzI3LTkz
ZDctOGQ3NjQ1M2ZlMTUyLzRlNDI0NTMzLTU0MWEtNGMyNy05M2Q3LThkNzY0NTNm
ZTE1Mi5jcmwwHwYDVR0jBBgwFoAUy/CFc/lRjoClttXswPZf0jkPQWQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80ZTQyNDUzMy01NDFhLTRjMjctOTNkNy04ZDc2
NDUzZmUxNTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5DgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPJH291ny9H5dL7ftr67j7iABsk9sXxvgAdLM4kIB6tmnCc3o8RRh
JI9XRDo08LOIhYgvaacBmQGpOKZ+SVTK4tZG57H0GBp6lwU7tD0WmZsmTkz3A+76
kZkmJ+t0o45ekhc3ccQh9A4zlH/2HNO+GCAwYeLV6t14qbLaYNFE1kdcDzaT+NPo
ZTJYP+YHuDKGn7RPlys7ng73sgX7VLcP5GwP1mkI4hw6oaCoAKAXA+LCbqBaa0o1
8seJHsmih06xrb8HZmDf4J2wCnGEM8WDHle8gHBf7kv3wkXDK96ywj1puUERuec6
1i4dOwvpnYXTUHy+N8CFWOM1j2hR1zBQyg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:08 2024 by rpki-client on console-ams.rpki-client.org