Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/a7e2d24b-d9df-36b8-8c10-fed8f75fe5d1.roa
File:                     a7e2d24b-d9df-36b8-8c10-fed8f75fe5d1.roa (raw, json)
Hash identifier:          9uFRDVzu4YiXJEYSASNLAeSLEnUf+CjIOdK4IOfX854=
Subject key identifier:   B2:57:8B:FA:1B:8D:A9:F0:B0:5D:42:0C:9C:3B:CB:B4:D1:00:70:F7
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F43285845ADEE0B83389CD5A6C0B500C0
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/a7e2d24b-d9df-36b8-8c10-fed8f75fe5d1.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2602:80a:200b::/48 maxlen: 48
                          2602:80a:200c::/48 maxlen: 48
                          2602:80a:200d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:0b:83:38:9c:d5:a6:c0:b5:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=a22e0645-a3b6-423a-b835-03d5a2ccafac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:81:1a:bf:85:2c:05:f3:ee:80:61:e4:a3:c2:
                    02:e9:4f:a8:f7:0a:3e:ce:36:0b:1a:13:3f:ef:34:
                    a3:36:fd:10:ca:fc:92:d0:58:7f:dc:5c:b3:36:c5:
                    d7:97:ad:47:b5:b1:15:16:98:6a:6b:72:ca:80:37:
                    5e:45:45:5f:e1:21:94:a0:db:92:06:a4:0e:82:a1:
                    50:e6:8c:b8:08:07:e2:16:de:f9:e4:d7:b0:ba:d1:
                    fd:fa:14:2c:26:4f:81:b3:93:49:96:88:d9:db:d7:
                    70:f4:fd:c8:07:32:c9:5f:ca:cb:21:40:8c:60:9c:
                    57:89:d4:95:da:9b:9f:35:60:b9:c4:ae:6f:d7:37:
                    bd:b2:51:02:fb:98:b9:27:1f:58:45:22:67:20:ec:
                    70:96:03:f1:a7:05:25:3c:70:0c:fe:7b:6e:95:f4:
                    0c:e8:9e:d5:af:7f:e7:59:bc:20:6f:c3:2d:bf:a0:
                    fa:82:26:78:e0:ca:93:24:4c:b9:58:3e:04:1f:98:
                    0a:c4:30:af:42:2b:fa:95:b5:2b:de:29:5d:1c:30:
                    dd:a6:7c:28:dd:18:04:66:49:c8:7c:69:fd:56:c3:
                    16:76:e7:6a:f4:8c:b9:33:19:6f:c5:fa:ac:ef:a7:
                    ad:57:a8:b4:0c:02:ef:be:25:ab:6c:3a:be:cb:5d:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:57:8B:FA:1B:8D:A9:F0:B0:5D:42:0C:9C:3B:CB:B4:D1:00:70:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/a7e2d24b-d9df-36b8-8c10-fed8f75fe5d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:200b::-2602:80a:200d:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ff:ee:bf:6e:6b:43:c5:7e:e6:96:cb:dd:c3:eb:a1:8a:cd:
         66:6f:86:17:c5:1e:31:0c:0b:23:b5:5f:db:80:72:b8:3d:73:
         5a:42:b6:d0:77:df:4c:5a:1c:ca:04:20:6a:41:d6:8d:c2:eb:
         15:2e:b8:a8:f6:8c:79:3d:e9:c0:91:53:3e:4f:a1:38:e3:ad:
         25:42:b5:84:13:14:1a:04:10:2b:5b:64:e2:c3:73:0a:a8:97:
         11:6b:d5:2f:9b:d4:da:6e:19:45:1d:5e:3c:64:84:ea:62:dd:
         0a:6c:8e:9a:c3:d6:3b:5b:89:71:f7:97:9b:08:de:08:56:ef:
         bd:5f:5c:b5:ce:48:fb:8d:6c:5e:fe:43:df:ac:04:c9:99:71:
         48:6e:94:a6:b2:50:4b:73:7a:de:94:85:62:6a:31:52:a5:21:
         50:a8:7e:23:5c:fc:0c:a2:0a:02:be:48:54:d2:d3:ca:93:bd:
         2e:8a:f2:80:6c:79:cd:e0:9d:a1:3e:ee:9b:49:87:36:85:fc:
         65:ce:4a:96:e2:e1:ef:45:98:5b:9b:8c:da:72:4a:8b:b3:22:
         dc:af:52:9c:a0:94:28:ff:22:44:7d:1e:7c:ba:a6:5b:15:59:
         45:7b:5e:6b:c6:b0:ef:49:cb:7f:00:1a:64:3c:63:bd:a5:4b:
         6b:80:40:a6
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEWt7guDOJzVpsC1AMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTkxOGVlNTYtMzQzYy00MGRjLWIwMWQtZmI1ZWZkNTFl
MjZhMB4XDTI0MDQyNzAxMDAyNloXDTI0MDcyNjAxMDAyNlowLzEtMCsGA1UEAxMk
YTIyZTA2NDUtYTNiNi00MjNhLWI4MzUtMDNkNWEyY2NhZmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYEav4UsBfPugGHko8IC6U+o9wo+zjYLGhM/
7zSjNv0QyvyS0Fh/3FyzNsXXl61HtbEVFphqa3LKgDdeRUVf4SGUoNuSBqQOgqFQ
5oy4CAfiFt755NewutH9+hQsJk+Bs5NJlojZ29dw9P3IBzLJX8rLIUCMYJxXidSV
2pufNWC5xK5v1ze9slEC+5i5Jx9YRSJnIOxwlgPxpwUlPHAM/ntulfQM6J7Vr3/n
Wbwgb8Mtv6D6giZ44MqTJEy5WD4EH5gKxDCvQiv6lbUr3ildHDDdpnwo3RgEZknI
fGn9VsMWdudq9Iy5Mxlvxfqs76etV6i0DALvviWrbDq+y13rVwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFLJXi/objanwsF1CDJw7y7TRAHD3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xOTE4
ZWU1Ni0zNDNjLTQwZGMtYjAxZC1mYjVlZmQ1MWUyNmEvYTdlMmQyNGItZDlkZi0z
NmI4LThjMTAtZmVkOGY3NWZlNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTkxOGVlNTYtMzQzYy00MGRjLWIw
MWQtZmI1ZWZkNTFlMjZhLzE5MThlZTU2LTM0M2MtNDBkYy1iMDFkLWZiNWVmZDUx
ZTI2YS5jcmwwHwYDVR0jBBgwFoAUFzlJxoOm8qM5Fg81AM2BgXVrf+MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xOTE4ZWU1Ni0zNDNjLTQwZGMtYjAxZC1mYjVl
ZmQ1MWUyNmEuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmAggK
IAsDBwEmAggKIAwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAB//uv25rQ8V+5pbL3cProYrNZm+GF8UeMQwL
I7Vf24ByuD1zWkK20HffTFocygQgakHWjcLrFS64qPaMeT3pwJFTPk+hOOOtJUK1
hBMUGgQQK1tk4sNzCqiXEWvVL5vU2m4ZRR1ePGSE6mLdCmyOmsPWO1uJcfeXmwje
CFbvvV9ctc5I+41sXv5D36wEyZlxSG6UprJQS3N63pSFYmoxUqUhUKh+I1z8DKIK
Ar5IVNLTypO9LorygGx5zeCdoT7um0mHNoX8Zc5KluLh70WYW5uM2nJKi7Mi3K9S
nKCUKP8iRH0efLqmWxVZRXtea8aw70nLfwAaZDxjvaVLa4BApg==
-----END CERTIFICATE-----
Generated at Fri May 3 03:24:47 2024 by rpki-client on console-ams.rpki-client.org