Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc/2e7598c0-8adf-3844-b011-6ef0da77f405.roa
File:                     2e7598c0-8adf-3844-b011-6ef0da77f405.roa (raw, json)
Hash identifier:          +nLoVXtU2xXsWBkfbz7NPkIFjMW2MGbh9auPLHKXnuo=
Subject key identifier:   63:49:5A:38:C5:A5:A2:30:D0:9B:83:A4:65:A1:08:50:D5:EC:E9:C4
Certificate issuer:       /CN=4e0c28eb-c1fc-43af-a023-404fb2afe4bc
Certificate serial:       010D0C9F43285847E35F74862E349113373C73E0
Authority key identifier: 0F:01:54:65:9A:B8:5B:70:F6:CC:00:94:F3:24:38:E6:F2:58:50:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc/2e7598c0-8adf-3844-b011-6ef0da77f405.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     398567
IP address blocks:        2602:fd2d::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc/4e0c28eb-c1fc-43af-a023-404fb2afe4bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc/4e0c28eb-c1fc-43af-a023-404fb2afe4bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:74:86:2e:34:91:13:37:3c:73:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0c28eb-c1fc-43af-a023-404fb2afe4bc
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=9520c661-f891-421a-a87a-943394f92b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:30:12:07:f1:97:2e:b9:d6:56:f5:ce:cd:
                    1a:fc:19:c4:72:22:b7:5d:87:fc:6a:67:67:57:85:
                    60:47:62:65:50:10:98:42:13:cd:c7:ec:7c:ad:13:
                    fb:30:15:6b:5a:37:ae:df:62:3a:aa:30:82:55:43:
                    55:5e:48:b3:fa:9b:47:36:d7:50:98:e5:04:c0:b7:
                    ac:cb:2b:71:c2:f1:bb:62:77:28:59:66:30:ff:ab:
                    ab:8e:f2:74:c5:70:77:64:1d:75:2f:31:61:cc:36:
                    eb:24:93:c9:d2:b8:1d:f6:06:2e:a7:59:99:53:62:
                    6c:cc:55:1d:e1:f8:23:17:15:e3:73:d7:a5:ac:ae:
                    44:4e:14:e4:55:35:a0:c4:82:a5:ce:18:7f:ae:83:
                    e7:d4:e1:ea:4a:60:9b:c6:c2:8b:a4:98:5c:e2:f0:
                    1c:7a:93:dc:82:b6:fe:7c:fa:da:07:28:bb:6d:6f:
                    00:ff:4d:d8:fc:61:e4:22:88:f6:e7:b6:a1:ff:07:
                    c2:25:50:8a:be:4f:8f:40:9d:d2:87:cd:c0:03:99:
                    b2:18:01:db:f5:39:7f:28:01:d6:ef:7d:cd:29:9f:
                    08:39:54:94:c9:e8:bf:34:04:d4:ca:be:b5:4a:0e:
                    bb:a8:91:1c:a8:ff:30:31:f5:9e:fe:3b:cc:6e:55:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:49:5A:38:C5:A5:A2:30:D0:9B:83:A4:65:A1:08:50:D5:EC:E9:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc/2e7598c0-8adf-3844-b011-6ef0da77f405.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc/4e0c28eb-c1fc-43af-a023-404fb2afe4bc.crl

            X509v3 Authority Key Identifier:
                keyid:0F:01:54:65:9A:B8:5B:70:F6:CC:00:94:F3:24:38:E6:F2:58:50:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd2d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c4:f7:81:cc:65:a0:5c:d9:da:5e:7d:eb:02:ff:8b:ae:05:
         ee:e9:dc:67:c6:0a:29:7e:05:54:a0:d3:98:0c:3b:a5:67:e6:
         67:b1:57:08:b7:fb:10:56:2d:6c:21:71:88:32:67:0d:6e:61:
         10:83:7d:07:7d:a8:1f:c8:23:12:fb:0c:51:27:79:fb:d7:57:
         ae:bc:10:5c:54:82:7e:97:b9:45:20:b5:29:7c:25:6f:e7:b3:
         ec:da:91:7e:d0:31:d4:05:05:3b:0a:e3:a8:7e:10:c4:b5:12:
         64:3e:e4:ce:02:c5:6b:99:e7:bc:60:59:ca:7e:96:46:ea:4a:
         6a:93:42:59:bf:13:2d:85:44:15:a4:42:ff:c2:3d:34:8e:d3:
         36:40:1f:5d:4f:b6:11:0a:d2:c9:28:f9:d3:e5:b8:74:5d:30:
         4e:4b:70:71:a0:94:19:30:a4:c7:d8:27:39:5c:9f:d1:5b:1a:
         0d:e2:3f:ae:da:61:8a:9d:12:c3:93:b8:88:4c:c9:5a:90:1a:
         b8:8f:02:0a:e7:8c:2e:1c:11:3e:28:ed:97:80:7d:3e:11:d4:
         71:d9:f5:50:26:f1:5c:a3:5d:5e:26:b9:53:20:7e:91:97:1b:
         2e:f3:ad:81:a3:2f:c5:ac:d1:98:64:43:da:1c:54:0f:99:ac:
         72:d5:dd:f9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfjX3SGLjSREzc8c+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwYzI4ZWItYzFmYy00M2FmLWEwMjMtNDA0ZmIyYWZl
NGJjMB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk
OTUyMGM2NjEtZjg5MS00MjFhLWE4N2EtOTQzMzk0ZjkyYjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY8wEgfxly651lb1zs0a/BnEciK3XYf8amdn
V4VgR2JlUBCYQhPNx+x8rRP7MBVrWjeu32I6qjCCVUNVXkiz+ptHNtdQmOUEwLes
yytxwvG7YncoWWYw/6urjvJ0xXB3ZB11LzFhzDbrJJPJ0rgd9gYup1mZU2JszFUd
4fgjFxXjc9elrK5EThTkVTWgxIKlzhh/roPn1OHqSmCbxsKLpJhc4vAcepPcgrb+
fPraByi7bW8A/03Y/GHkIoj257ah/wfCJVCKvk+PQJ3Sh83AA5myGAHb9Tl/KAHW
733NKZ8IOVSUyei/NATUyr61Sg67qJEcqP8wMfWe/jvMblUIywIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGNJWjjFpaIw0JuDpGWhCFDV7OnEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZTBj
MjhlYi1jMWZjLTQzYWYtYTAyMy00MDRmYjJhZmU0YmMvMmU3NTk4YzAtOGFkZi0z
ODQ0LWIwMTEtNmVmMGRhNzdmNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGUwYzI4ZWItYzFmYy00M2FmLWEw
MjMtNDA0ZmIyYWZlNGJjLzRlMGMyOGViLWMxZmMtNDNhZi1hMDIzLTQwNGZiMmFm
ZTRiYy5jcmwwHwYDVR0jBBgwFoAUDwFUZZq4W3D2zACU8yQ45vJYUFMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZTBjMjhlYi1jMWZjLTQzYWYtYTAyMy00MDRm
YjJhZmU0YmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9LQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACsT3gcxloFzZ2l596wL/i64F7uncZ8YKKX4FVKDTmAw7pWfmZ7FX
CLf7EFYtbCFxiDJnDW5hEIN9B32oH8gjEvsMUSd5+9dXrrwQXFSCfpe5RSC1KXwl
b+ez7NqRftAx1AUFOwrjqH4QxLUSZD7kzgLFa5nnvGBZyn6WRupKapNCWb8TLYVE
FaRC/8I9NI7TNkAfXU+2EQrSySj50+W4dF0wTktwcaCUGTCkx9gnOVyf0VsaDeI/
rtphip0Sw5O4iEzJWpAauI8CCueMLhwRPijtl4B9PhHUcdn1UCbxXKNdXia5UyB+
kZcbLvOtgaMvxazRmGRD2hxUD5msctXd+Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:14 2024 by rpki-client on console-fra.rpki-client.org