Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa
File:                     7d68b9ce-b762-3e17-8013-4ff3f5937365.roa (raw, json)
Hash identifier:          r+uIdJoGqn3ZyxBXIwA06HxwSBj5NQF2FFgy0XnVxWw=
Subject key identifier:   AC:98:A6:BE:E4:1D:7A:7A:E5:C6:40:C0:80:80:58:1E:A5:8E:C5:FA
Certificate issuer:       /CN=ad03f8e2-2c6b-41ab-8a4f-a20f958719ec
Certificate serial:       010D0C9F432858479EDBD00A7D9B99739102F000
Authority key identifier: 5D:5F:F1:BE:36:F6:F7:F7:0E:7B:B6:2D:C5:C6:79:16:5E:87:55:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa
Signing time:             Tue 22 Oct 2024 01:00:31 +0000
ROA not before:           Tue 22 Oct 2024 01:00:31 +0000
ROA not after:            Mon 20 Jan 2025 02:00:31 +0000
asID:                     401268
IP address blocks:        2602:f86d::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:db:d0:0a:7d:9b:99:73:91:02:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad03f8e2-2c6b-41ab-8a4f-a20f958719ec
        Validity
            Not Before: Oct 22 01:00:31 2024 GMT
            Not After : Jan 20 02:00:31 2025 GMT
        Subject: CN=12d02468-2d4b-4a5d-98fa-702b9ac3e770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:f6:1c:71:c5:13:e4:8f:75:2a:2d:11:b2:
                    cc:13:99:b6:37:a1:c7:36:04:03:c3:68:04:cc:0e:
                    a7:c8:83:3a:7a:70:cb:6d:42:88:ea:b0:cb:38:a9:
                    cf:99:34:be:b5:bf:c8:01:6d:04:d5:dd:1d:0e:5c:
                    c0:5a:3d:67:a3:63:f0:28:39:73:91:94:25:a4:df:
                    6e:f7:1f:b9:a7:17:57:1b:00:47:e8:62:11:19:bf:
                    ce:c2:c0:89:26:0b:92:ac:1f:5b:f2:71:95:cd:9e:
                    06:87:a1:6b:e4:06:e7:b8:30:b0:07:08:56:88:10:
                    bd:5e:72:20:f0:94:16:f8:7d:7e:02:7e:ce:4c:b1:
                    01:d3:5b:18:61:d6:b4:8d:c3:8e:52:cd:5f:81:4e:
                    40:dc:11:70:8d:57:e8:78:80:2b:2f:a1:64:42:9e:
                    80:e8:a3:39:64:1a:98:f3:bd:60:a6:21:8f:69:54:
                    83:21:a8:fb:a5:88:50:80:66:f0:0e:d5:64:63:30:
                    66:ae:d0:63:7e:6a:d8:92:71:7d:1a:d9:82:e5:8e:
                    fb:08:44:f4:be:5e:05:75:47:44:bb:76:77:fb:c8:
                    0c:03:60:1a:25:a4:27:8a:b7:48:e9:a8:a6:5d:46:
                    0d:44:5c:19:f2:f0:cb:f1:df:82:57:7d:69:15:c3:
                    f3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:98:A6:BE:E4:1D:7A:7A:E5:C6:40:C0:80:80:58:1E:A5:8E:C5:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.crl

            X509v3 Authority Key Identifier:
                keyid:5D:5F:F1:BE:36:F6:F7:F7:0E:7B:B6:2D:C5:C6:79:16:5E:87:55:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f86d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:2c:13:d1:44:8d:4c:89:7d:0e:72:a2:b6:98:19:c6:85:ce:
         6f:98:1c:e7:82:9f:d4:b0:ca:92:b8:e2:76:ab:1e:5b:34:be:
         fd:0d:21:41:f8:e0:52:61:99:dd:8a:e2:56:de:bd:87:31:5c:
         65:8e:26:90:75:fc:1f:c0:bc:f2:b8:4d:68:d3:8e:9c:7b:dc:
         d4:eb:2a:6c:e8:0f:de:91:a2:83:5f:cf:11:ef:3d:38:18:c8:
         4c:7b:4c:ce:9e:41:22:e4:22:e3:b4:42:d9:26:35:e6:69:22:
         db:74:77:09:71:00:b1:9f:74:92:f5:80:40:55:7b:64:5d:80:
         d8:72:19:38:47:65:49:4b:80:3e:e7:1c:f3:75:bb:61:03:7c:
         b5:c9:7b:67:18:e0:3f:90:20:f0:f5:9f:b4:99:ac:1d:d7:22:
         57:97:ed:df:86:07:3c:43:61:26:c8:8d:0a:c2:81:9b:97:69:
         33:29:bd:26:82:e8:05:8c:b8:fe:91:1d:3f:a6:5f:e3:8d:cb:
         29:4c:2d:b5:61:26:ba:59:e3:73:d8:91:4c:5f:ea:bb:af:72:
         fb:ee:af:97:3b:02:65:f9:0a:d1:4b:ac:92:4c:36:c8:03:46:
         8d:77:ef:fd:65:03:21:96:87:64:f6:69:87:7e:d1:c2:90:49:
         bb:51:ef:45
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEee29AKfZuZc5EC8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQwM2Y4ZTItMmM2Yi00MWFiLThhNGYtYTIwZjk1ODcx
OWVjMB4XDTI0MTAyMjAxMDAzMVoXDTI1MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
MTJkMDI0NjgtMmQ0Yi00YTVkLTk4ZmEtNzAyYjlhYzNlNzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKj2HHHFE+SPdSotEbLME5m2N6HHNgQDw2gE
zA6nyIM6enDLbUKI6rDLOKnPmTS+tb/IAW0E1d0dDlzAWj1no2PwKDlzkZQlpN9u
9x+5pxdXGwBH6GIRGb/OwsCJJguSrB9b8nGVzZ4Gh6Fr5AbnuDCwBwhWiBC9XnIg
8JQW+H1+An7OTLEB01sYYda0jcOOUs1fgU5A3BFwjVfoeIArL6FkQp6A6KM5ZBqY
871gpiGPaVSDIaj7pYhQgGbwDtVkYzBmrtBjfmrYknF9GtmC5Y77CET0vl4FdUdE
u3Z3+8gMA2AaJaQnirdI6aimXUYNRFwZ8vDL8d+CV31pFcPzsQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKyYpr7kHXp65cZAwICAWB6ljsX6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZDAz
ZjhlMi0yYzZiLTQxYWItOGE0Zi1hMjBmOTU4NzE5ZWMvN2Q2OGI5Y2UtYjc2Mi0z
ZTE3LTgwMTMtNGZmM2Y1OTM3MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWQwM2Y4ZTItMmM2Yi00MWFiLThh
NGYtYTIwZjk1ODcxOWVjL2FkMDNmOGUyLTJjNmItNDFhYi04YTRmLWEyMGY5NTg3
MTllYy5jcmwwHwYDVR0jBBgwFoAUXV/xvjb29/cOe7YtxcZ5Fl6HVbwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hZDAzZjhlMi0yYzZiLTQxYWItOGE0Zi1hMjBm
OTU4NzE5ZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4bQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIiwT0USNTIl9DnKitpgZxoXOb5gc54Kf1LDKkrjidqseWzS+/Q0h
QfjgUmGZ3YriVt69hzFcZY4mkHX8H8C88rhNaNOOnHvc1OsqbOgP3pGig1/PEe89
OBjITHtMzp5BIuQi47RC2SY15mki23R3CXEAsZ90kvWAQFV7ZF2A2HIZOEdlSUuA
Pucc83W7YQN8tcl7ZxjgP5Ag8PWftJmsHdciV5ft34YHPENhJsiNCsKBm5dpMym9
JoLoBYy4/pEdP6Zf443LKUwttWEmulnjc9iRTF/qu69y++6vlzsCZfkK0Uuskkw2
yANGjXfv/WUDIZaHZPZph37RwpBJu1HvRQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:22 2024 by rpki-client on console-ams.rpki-client.org