Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/f07237e4-3046-3be1-abea-fc0b7e22198d.roa
File:                     f07237e4-3046-3be1-abea-fc0b7e22198d.roa (raw, json)
Hash identifier:          AkwaioL6lG1//syp+MVyeoepvU38TMwmV7WLQwkNT+4=
Subject key identifier:   09:CC:C2:04:07:E0:6F:42:42:24:DD:29:A6:B7:C6:57:FB:5D:69:8B
Certificate issuer:       /CN=8309265c-1311-43ce-adf7-732012b108fd
Certificate serial:       010D0C9F43285844F7300A62FB73041BF7D26440
Authority key identifier: 65:2E:14:B7:F5:C4:AD:CA:C2:6E:F6:9F:9F:60:EA:FA:23:26:CC:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/f07237e4-3046-3be1-abea-fc0b7e22198d.roa
Signing time:             Wed 21 Feb 2024 14:00:32 +0000
ROA not before:           Wed 21 Feb 2024 14:00:32 +0000
ROA not after:            Tue 21 May 2024 13:00:32 +0000
asID:                     397720
IP address blocks:        2602:fdc2:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f7:30:0a:62:fb:73:04:1b:f7:d2:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8309265c-1311-43ce-adf7-732012b108fd
        Validity
            Not Before: Feb 21 14:00:32 2024 GMT
            Not After : May 21 13:00:32 2024 GMT
        Subject: CN=8c9c690e-a2c6-46a7-9b45-5b296846cde6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:30:ca:ef:8d:ee:2c:de:96:7b:73:ce:c5:48:
                    48:2d:9a:f7:0e:c1:1f:61:01:c7:ca:6a:ff:07:32:
                    44:60:4f:00:71:2a:84:c2:cd:62:f2:64:e4:df:58:
                    7e:52:cd:85:d8:fa:c2:e8:be:c4:49:36:f6:b3:23:
                    16:09:4a:9f:d4:de:19:7f:e9:ea:4b:e4:8e:e5:2d:
                    85:37:64:38:70:4d:03:e1:be:f0:02:71:82:9b:0e:
                    c1:fb:e2:5d:06:a4:d3:d5:e7:a9:9b:30:db:ee:3d:
                    9c:6a:07:77:3a:b5:a1:de:74:99:5f:83:fc:cf:07:
                    2a:9c:38:3b:52:a5:60:5c:f2:a6:82:a0:a0:ac:93:
                    8f:e7:e4:5a:45:8a:45:f7:f0:a1:27:4a:f1:29:ab:
                    b8:9d:5b:23:f9:ea:eb:87:b2:aa:02:0c:66:28:44:
                    2f:b6:69:25:ea:58:3c:65:9a:15:84:a8:3e:70:56:
                    92:66:bf:cd:c2:e7:2d:b9:4b:06:ea:6d:27:c6:1d:
                    00:48:7f:d5:b3:8a:9f:cd:94:5e:b8:dd:ea:0b:6f:
                    85:30:28:b8:75:bf:16:6e:2b:c8:c4:ec:8c:b6:8e:
                    84:8f:5d:58:71:6c:03:c7:68:d2:e0:ce:b8:14:b9:
                    77:21:79:27:0b:d7:19:d5:6f:9c:ee:af:92:fa:aa:
                    8c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CC:C2:04:07:E0:6F:42:42:24:DD:29:A6:B7:C6:57:FB:5D:69:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/f07237e4-3046-3be1-abea-fc0b7e22198d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.crl

            X509v3 Authority Key Identifier:
                keyid:65:2E:14:B7:F5:C4:AD:CA:C2:6E:F6:9F:9F:60:EA:FA:23:26:CC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdc2:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c5:ea:07:9a:10:7d:fd:1b:21:03:df:c0:04:71:82:12:09:
         c6:7e:bd:d3:1f:ce:fd:01:8f:c8:ba:5f:ed:02:3b:b4:56:ba:
         43:08:a7:50:70:63:5a:d8:b1:d3:32:da:0d:13:7c:8e:7a:26:
         94:e4:7e:c2:81:1f:d2:37:e5:d0:dd:ba:5c:ba:4b:94:8a:2d:
         6a:25:cf:91:2d:d9:e9:eb:c0:95:25:12:af:1d:77:3b:57:74:
         f5:e8:16:77:e8:4a:c3:5f:fb:fa:56:6d:d1:71:db:22:8c:93:
         62:1b:f2:f8:0e:75:ed:f9:c9:d5:80:d9:5c:21:d5:d0:30:9b:
         c9:01:2a:cf:49:81:b2:00:af:f6:8d:d7:86:2a:5b:8d:5a:41:
         a6:98:8b:30:82:22:a7:7a:af:e9:5e:89:64:f7:2a:d9:06:e8:
         34:9f:38:8f:75:9a:cc:91:60:a6:b1:5d:17:cb:5a:62:92:0a:
         ac:9b:77:78:1f:ed:f4:f3:1d:52:a6:08:e0:ce:9f:b8:7c:96:
         2d:c3:63:63:a6:34:cb:63:54:5c:08:06:80:4c:73:ae:db:3f:
         cf:27:60:87:e9:30:57:97:7b:2f:90:86:2d:2f:eb:35:d2:44:
         33:1e:46:c3:b4:2a:5a:15:c3:f5:d8:9c:d7:62:8b:45:39:7d:
         a9:c0:14:36
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET3MApi+3MEG/fSZEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMwOTI2NWMtMTMxMS00M2NlLWFkZjctNzMyMDEyYjEw
OGZkMB4XDTI0MDIyMTE0MDAzMloXDTI0MDUyMTEzMDAzMlowLzEtMCsGA1UEAxMk
OGM5YzY5MGUtYTJjNi00NmE3LTliNDUtNWIyOTY4NDZjZGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjDK743uLN6We3POxUhILZr3DsEfYQHHymr/
BzJEYE8AcSqEws1i8mTk31h+Us2F2PrC6L7ESTb2syMWCUqf1N4Zf+nqS+SO5S2F
N2Q4cE0D4b7wAnGCmw7B++JdBqTT1eepmzDb7j2cagd3OrWh3nSZX4P8zwcqnDg7
UqVgXPKmgqCgrJOP5+RaRYpF9/ChJ0rxKau4nVsj+errh7KqAgxmKEQvtmkl6lg8
ZZoVhKg+cFaSZr/NwuctuUsG6m0nxh0ASH/Vs4qfzZReuN3qC2+FMCi4db8WbivI
xOyMto6Ej11YcWwDx2jS4M64FLl3IXknC9cZ1W+c7q+S+qqMSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAnMwgQH4G9CQiTdKaa3xlf7XWmLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzA5
MjY1Yy0xMzExLTQzY2UtYWRmNy03MzIwMTJiMTA4ZmQvZjA3MjM3ZTQtMzA0Ni0z
YmUxLWFiZWEtZmMwYjdlMjIxOThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMwOTI2NWMtMTMxMS00M2NlLWFk
ZjctNzMyMDEyYjEwOGZkLzgzMDkyNjVjLTEzMTEtNDNjZS1hZGY3LTczMjAxMmIx
MDhmZC5jcmwwHwYDVR0jBBgwFoAUZS4Ut/XErcrCbvafn2Dq+iMmzAIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzA5MjY1Yy0xMzExLTQzY2UtYWRmNy03MzIw
MTJiMTA4ZmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9wgAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA3F6geaEH39GyED38AEcYISCcZ+vdMfzv0Bj8i6X+0CO7RWukMI
p1BwY1rYsdMy2g0TfI56JpTkfsKBH9I35dDduly6S5SKLWolz5Et2enrwJUlEq8d
dztXdPXoFnfoSsNf+/pWbdFx2yKMk2Ib8vgOde35ydWA2Vwh1dAwm8kBKs9JgbIA
r/aN14YqW41aQaaYizCCIqd6r+leiWT3KtkG6DSfOI91msyRYKaxXRfLWmKSCqyb
d3gf7fTzHVKmCODOn7h8li3DY2OmNMtjVFwIBoBMc67bP88nYIfpMFeXey+Qhi0v
6zXSRDMeRsO0KloVw/XYnNdii0U5fanAFDY=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:43:41 2024 by rpki-client on console-fra.rpki-client.org