Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/1f03c1ef-4fe3-3d85-93dd-431204439dc0.roa
File:                     1f03c1ef-4fe3-3d85-93dd-431204439dc0.roa (raw, json)
Hash identifier:          ctWJn6wmaidSHML7qymvcXpShCg1lBnbbOTKQRUtMK8=
Subject key identifier:   B2:3E:4F:71:85:43:88:D6:73:FF:71:5F:D5:D7:49:41:06:3A:D6:74
Certificate issuer:       /CN=89a397c2-4860-4547-8d71-faf2481535cf
Certificate serial:       010D0C9F43285847E62B701B0144A76D30623CC0
Authority key identifier: F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/1f03c1ef-4fe3-3d85-93dd-431204439dc0.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     401164
IP address blocks:        2602:f8a4::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:70:1b:01:44:a7:6d:30:62:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a397c2-4860-4547-8d71-faf2481535cf
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=e9e53b5b-bcb5-4fa8-850d-8bd43aa1e547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:c5:de:95:05:76:39:c4:3c:c3:5c:0d:5b:
                    b0:1a:78:e1:fe:26:25:aa:23:da:fb:9e:75:05:83:
                    fa:be:aa:d8:34:06:88:98:b6:ba:ea:b1:71:c1:0b:
                    e7:7e:4a:5c:3d:91:13:df:5a:b1:19:b9:fc:45:35:
                    cb:3b:32:3d:ae:19:3c:6f:68:4b:b6:cf:f3:43:0d:
                    37:07:35:26:4e:3c:93:61:53:42:d6:a6:c6:58:d9:
                    92:d5:3c:ff:8e:a2:28:60:e5:3d:36:0c:fc:9c:c7:
                    46:6e:fe:64:e9:c4:76:1f:8d:06:c9:03:a1:90:08:
                    a2:d8:5e:68:5a:c2:85:fb:00:92:b8:d2:72:43:35:
                    d9:69:6f:a2:fa:3c:16:e0:49:c8:0a:4f:51:1a:17:
                    01:93:a3:0a:6b:31:3e:9d:a8:cf:b4:1e:2d:fc:bf:
                    82:9f:8f:bf:d1:74:69:72:aa:35:ed:9d:98:36:af:
                    34:0e:99:d4:9d:78:81:99:01:08:11:e3:de:9a:5f:
                    65:53:79:62:7f:29:c4:9a:45:e5:e3:d4:9b:fd:63:
                    75:08:f1:5d:1c:dc:1c:71:1b:d9:0f:49:c0:b7:49:
                    9a:30:1e:62:cf:e5:01:74:5f:3b:27:1c:2c:96:2a:
                    e7:9c:4e:4c:68:05:b9:c2:a3:38:bc:b8:c3:5f:40:
                    20:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3E:4F:71:85:43:88:D6:73:FF:71:5F:D5:D7:49:41:06:3A:D6:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/1f03c1ef-4fe3-3d85-93dd-431204439dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl

            X509v3 Authority Key Identifier:
                keyid:F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:96:7f:cd:b3:83:a1:25:6f:93:f9:8f:35:92:da:c5:2c:aa:
         f2:3a:15:ad:ac:9b:9b:66:b1:73:0f:7c:e5:3c:ad:00:af:35:
         16:21:95:c4:56:96:b0:de:a1:60:7b:90:c0:5e:68:f9:01:2b:
         0e:55:46:a3:83:fd:e6:41:b3:0c:4d:1b:44:af:26:de:d8:a8:
         61:ac:44:25:44:e9:80:01:55:3a:cd:fd:91:bc:8a:23:6b:45:
         f3:1f:62:ca:2d:fe:d2:fe:29:7e:3f:64:3e:2d:ce:ba:cb:47:
         c8:bc:44:6b:b2:05:04:c6:64:15:46:14:b4:4c:f4:91:cc:99:
         ac:ee:b4:50:92:eb:41:07:ce:7e:89:b7:47:b1:ca:b1:32:09:
         da:30:d3:b0:8c:1a:35:ed:53:5b:08:0d:82:b8:94:f5:dc:76:
         55:54:5e:ab:5e:2e:95:d8:57:42:9c:d0:88:5d:ef:13:85:57:
         3f:13:a1:ab:14:ae:1c:75:20:02:22:02:2a:21:98:d0:8a:0e:
         8b:32:a0:67:a6:86:fa:ae:4f:70:09:8e:89:b3:6b:66:14:88:
         11:00:89:01:ec:74:ab:85:ee:19:4f:dc:50:6f:c2:7d:27:04:
         56:f1:1a:af:99:aa:97:45:a0:b5:58:b1:cd:bf:fb:3a:ad:ff:
         1c:81:91:77
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfmK3AbAUSnbTBiPMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODlhMzk3YzItNDg2MC00NTQ3LThkNzEtZmFmMjQ4MTUz
NWNmMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTllNTNiNWItYmNiNS00ZmE4LTg1MGQtOGJkNDNhYTFlNTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP/F3pUFdjnEPMNcDVuwGnjh/iYlqiPa+551
BYP6vqrYNAaImLa66rFxwQvnfkpcPZET31qxGbn8RTXLOzI9rhk8b2hLts/zQw03
BzUmTjyTYVNC1qbGWNmS1Tz/jqIoYOU9Ngz8nMdGbv5k6cR2H40GyQOhkAii2F5o
WsKF+wCSuNJyQzXZaW+i+jwW4EnICk9RGhcBk6MKazE+najPtB4t/L+Cn4+/0XRp
cqo17Z2YNq80DpnUnXiBmQEIEePeml9lU3lifynEmkXl49Sb/WN1CPFdHNwccRvZ
D0nAt0maMB5iz+UBdF87JxwslirnnE5MaAW5wqM4vLjDX0AgzQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLI+T3GFQ4jWc/9xX9XXSUEGOtZ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84OWEz
OTdjMi00ODYwLTQ1NDctOGQ3MS1mYWYyNDgxNTM1Y2YvMWYwM2MxZWYtNGZlMy0z
ZDg1LTkzZGQtNDMxMjA0NDM5ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODlhMzk3YzItNDg2MC00NTQ3LThk
NzEtZmFmMjQ4MTUzNWNmLzg5YTM5N2MyLTQ4NjAtNDU0Ny04ZDcxLWZhZjI0ODE1
MzVjZi5jcmwwHwYDVR0jBBgwFoAU8HXuQsnRPwQOkovH/F2W9wvrvq8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84OWEzOTdjMi00ODYwLTQ1NDctOGQ3MS1mYWYy
NDgxNTM1Y2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4pAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAlJZ/zbODoSVvk/mPNZLaxSyq8joVraybm2axcw985TytAK81FiGV
xFaWsN6hYHuQwF5o+QErDlVGo4P95kGzDE0bRK8m3tioYaxEJUTpgAFVOs39kbyK
I2tF8x9iyi3+0v4pfj9kPi3OustHyLxEa7IFBMZkFUYUtEz0kcyZrO60UJLrQQfO
fom3R7HKsTIJ2jDTsIwaNe1TWwgNgriU9dx2VVReq14uldhXQpzQiF3vE4VXPxOh
qxSuHHUgAiICKiGY0IoOizKgZ6aG+q5PcAmOibNrZhSIEQCJAex0q4XuGU/cUG/C
fScEVvEar5mql0WgtVixzb/7Oq3/HIGRdw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:40 2024 by rpki-client on console-fra.rpki-client.org