Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/95fb1646-090a-3974-b3f1-33b1886bdfcf.roa
File:                     95fb1646-090a-3974-b3f1-33b1886bdfcf.roa (raw, json)
Hash identifier:          dsXwE1fsdIi4RewfdYjFOvDwuS/iJvqoz4tPJRrhNac=
Subject key identifier:   DC:EA:F2:CC:85:F1:68:FD:48:1F:91:57:C7:8D:C7:78:D0:2F:50:01
Certificate issuer:       /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial:       010D0C9F43285845777DB5DC6AB72304002EFBC0
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/95fb1646-090a-3974-b3f1-33b1886bdfcf.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     0
IP address blocks:        2602:fd10:100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:b5:dc:6a:b7:23:04:00:2e:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=061ce1b9-3b40-459f-beda-ca0f177444a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:d0:31:e3:e7:6c:28:a5:54:e2:69:bd:69:
                    b9:dd:f7:9f:15:ae:98:6a:b1:4c:b3:73:36:a4:96:
                    e6:7a:0b:31:5d:b6:4d:e9:99:01:eb:af:08:9a:3e:
                    f5:00:0f:b8:7d:15:63:b5:94:8f:fd:93:d1:e7:4d:
                    ed:5f:25:ae:81:59:1d:ac:97:24:b2:e2:17:44:37:
                    eb:81:e3:66:5e:f3:b8:4b:1a:9e:f5:ef:cc:8d:ef:
                    b9:ea:33:04:7f:f1:bd:7a:4b:71:05:c5:b1:19:1b:
                    f6:c8:d6:1b:e6:e3:3f:7c:5b:4c:19:8c:90:1d:2b:
                    e8:06:e3:80:1b:8a:2f:13:f8:6e:c8:2f:72:ff:8d:
                    a9:40:57:29:29:2f:12:d3:ad:70:0e:73:63:77:32:
                    60:12:c2:70:20:36:13:32:a0:89:2c:81:1d:9e:4b:
                    a4:53:76:8c:2d:bc:49:68:de:f7:9b:a0:5e:53:9e:
                    da:24:1f:7f:c9:e6:56:9f:58:2f:b2:f6:0c:76:7b:
                    6a:01:64:74:d2:31:b1:64:ad:b1:c9:9b:f0:e6:75:
                    37:8a:24:5f:bf:5f:e5:ad:0f:a9:10:f1:a7:89:47:
                    b4:c2:2f:a7:a6:35:68:df:82:8e:e1:de:89:c2:a7:
                    f1:b6:79:6b:26:7c:40:66:17:80:f9:ec:1a:b6:f7:
                    bc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EA:F2:CC:85:F1:68:FD:48:1F:91:57:C7:8D:C7:78:D0:2F:50:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/95fb1646-090a-3974-b3f1-33b1886bdfcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl

            X509v3 Authority Key Identifier:
                keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:62:45:3a:92:35:42:54:3b:01:90:62:f3:89:dd:dd:a5:bc:
         f6:3a:e9:93:ac:77:bb:31:8a:99:c9:c3:88:13:68:29:0c:7c:
         37:6d:35:b2:c9:89:72:4c:82:eb:80:7c:b0:d4:d2:91:52:39:
         17:b6:fb:f5:18:d2:50:73:9e:62:d6:47:aa:3f:2e:d0:b4:ff:
         3e:e3:f2:dd:78:8c:ac:37:28:0c:ae:5f:15:ff:67:1b:10:ea:
         79:37:92:ec:82:69:a9:2b:31:da:7b:71:9b:26:0e:b9:81:64:
         e1:1d:4f:7b:6f:aa:cb:7c:cf:7b:eb:78:c5:b6:8b:37:f5:18:
         a4:f4:12:3e:fc:32:80:a6:63:cc:43:e5:3f:93:0d:d1:86:62:
         b6:8b:62:db:06:db:6c:4c:2e:dc:57:c4:07:d9:17:e9:0c:f6:
         8e:18:67:9f:1c:b6:4e:66:67:a3:bc:b9:c4:f1:b1:7b:59:75:
         96:b7:16:2c:84:1e:91:ea:e2:50:31:30:34:db:f7:91:8a:46:
         79:37:dd:3c:e8:1a:73:84:74:fa:83:42:89:8b:b7:b7:e7:6b:
         ef:cc:bf:2d:f1:63:af:4e:3d:25:a5:5a:ff:8f:b6:51:c5:b3:
         f9:cf:c2:1c:36:d6:59:67:c9:84:63:40:ef:eb:55:91:2b:8b:
         9a:58:8c:90
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEV3fbXcarcjBAAu+8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWVmNzllYjQtNTQ0ZS00NTA0LTlhNmYtZDFkZGZmNWJj
ZDQ1MB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
MDYxY2UxYjktM2I0MC00NTlmLWJlZGEtY2EwZjE3NzQ0NGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrvQMePnbCilVOJpvWm53fefFa6YarFMs3M2
pJbmegsxXbZN6ZkB668Imj71AA+4fRVjtZSP/ZPR503tXyWugVkdrJcksuIXRDfr
geNmXvO4Sxqe9e/Mje+56jMEf/G9ektxBcWxGRv2yNYb5uM/fFtMGYyQHSvoBuOA
G4ovE/huyC9y/42pQFcpKS8S061wDnNjdzJgEsJwIDYTMqCJLIEdnkukU3aMLbxJ
aN73m6BeU57aJB9/yeZWn1gvsvYMdntqAWR00jGxZK2xyZvw5nU3iiRfv1/lrQ+p
EPGniUe0wi+npjVo34KO4d6JwqfxtnlrJnxAZheA+ewatve8VQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNzq8syF8Wj9SB+RV8eNx3jQL1ABMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWY3
OWViNC01NDRlLTQ1MDQtOWE2Zi1kMWRkZmY1YmNkNDUvOTVmYjE2NDYtMDkwYS0z
OTc0LWIzZjEtMzNiMTg4NmJkZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVmNzllYjQtNTQ0ZS00NTA0LTlh
NmYtZDFkZGZmNWJjZDQ1LzVlZjc5ZWI0LTU0NGUtNDUwNC05YTZmLWQxZGRmZjVi
Y2Q0NS5jcmwwHwYDVR0jBBgwFoAUdbJ68zRm1GIG+j8mmgiipCB91QIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWY3OWViNC01NDRlLTQ1MDQtOWE2Zi1kMWRk
ZmY1YmNkNDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9EAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAG2JFOpI1QlQ7AZBi84nd3aW89jrpk6x3uzGKmcnDiBNoKQx8N201
ssmJckyC64B8sNTSkVI5F7b79RjSUHOeYtZHqj8u0LT/PuPy3XiMrDcoDK5fFf9n
GxDqeTeS7IJpqSsx2ntxmyYOuYFk4R1Pe2+qy3zPe+t4xbaLN/UYpPQSPvwygKZj
zEPlP5MN0YZitoti2wbbbEwu3FfEB9kX6Qz2jhhnnxy2TmZno7y5xPGxe1l1lrcW
LIQekeriUDEwNNv3kYpGeTfdPOgac4R0+oNCiYu3t+dr78y/LfFjr049JaVa/4+2
UcWz+c/CHDbWWWfJhGNA7+tVkSuLmliMkA==
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:43:40 2024 by rpki-client on console-fra.rpki-client.org