Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/680a6712-e585-31ba-aba5-8fd9451f0560.roa
File:                     680a6712-e585-31ba-aba5-8fd9451f0560.roa (raw, json)
Hash identifier:          R+s5mUQ5UQ6f9p2b/9EkD6Cv5v7T+ulCifSJlZpFSHE=
Subject key identifier:   93:0B:A7:A4:E7:C0:D5:DD:38:56:78:FF:E4:D2:21:52:9B:DB:06:61
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F432858474DCA8C0FAEB1991D1CA3F380
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/680a6712-e585-31ba-aba5-8fd9451f0560.roa
Signing time:             Mon 23 Sep 2024 00:05:18 +0000
ROA not before:           Mon 23 Sep 2024 00:05:18 +0000
ROA not after:            Sun 22 Dec 2024 01:05:18 +0000
asID:                     214258
IP address blocks:        2602:fbe8:f2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:ca:8c:0f:ae:b1:99:1d:1c:a3:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: Sep 23 00:05:18 2024 GMT
            Not After : Dec 22 01:05:18 2024 GMT
        Subject: CN=c3832df3-214c-4597-96c7-59f1a346e4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:e7:e8:88:70:97:35:47:e3:24:a8:32:94:
                    0e:38:c0:8f:fe:d5:ae:6f:37:ae:b8:df:44:87:f1:
                    e4:b2:6f:5c:44:7b:ae:8f:de:94:4e:9e:ca:65:9a:
                    50:79:d9:b0:7d:b9:56:6e:ca:94:d4:c7:e0:80:48:
                    0f:d5:45:45:d8:16:ea:20:19:5e:0b:a6:4f:b8:e4:
                    75:41:48:ec:e4:5e:31:f6:d6:8a:09:77:33:0c:19:
                    9d:4c:11:b6:6c:c3:48:02:bd:e6:98:41:2c:f3:6b:
                    9b:b2:fb:23:23:28:2d:59:71:0c:05:41:ff:c3:cd:
                    2d:7e:93:f0:cc:67:2a:df:df:5e:18:ff:00:0c:95:
                    61:c1:71:58:6e:53:04:3a:f9:fb:3b:d2:75:64:7a:
                    5f:b2:66:b4:99:6e:23:aa:1b:d7:b8:e9:6f:90:bf:
                    ef:49:59:1b:84:7c:96:4e:ad:43:c6:33:35:e7:a3:
                    ed:5a:01:ee:4c:9d:00:45:04:df:1d:75:a7:d2:90:
                    9f:09:83:16:d9:f9:0a:4c:39:59:13:c6:af:a1:a9:
                    dd:c3:35:6a:43:2b:d2:5e:70:7e:1a:ab:5a:dd:cc:
                    7c:d6:2d:7d:10:62:27:c6:a5:ee:71:37:10:2b:8f:
                    ef:4a:6d:fb:d3:51:de:98:0c:56:d5:26:1f:da:f5:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0B:A7:A4:E7:C0:D5:DD:38:56:78:FF:E4:D2:21:52:9B:DB:06:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/680a6712-e585-31ba-aba5-8fd9451f0560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbe8:f2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:64:94:eb:ed:66:03:5e:b0:53:af:b0:5f:50:f3:f6:8d:ec:
         be:7d:38:f0:5c:ae:d8:d5:50:f2:82:e7:53:ee:67:e7:d3:78:
         27:41:83:4a:ba:10:d0:49:60:8d:81:f0:ce:a0:d8:ba:c2:c7:
         a5:76:1f:0d:68:d0:62:14:21:04:d2:51:d8:2b:c5:c0:ae:6f:
         e2:5a:ed:42:93:f0:7b:4a:6b:62:87:c9:9d:cf:92:b8:01:f9:
         bd:7f:ef:c6:bd:33:03:62:89:58:af:f2:73:d6:1c:96:65:f2:
         f4:e8:9b:5e:da:f7:81:06:c9:37:69:1b:6b:3e:0e:c2:e9:ae:
         05:a1:ed:20:9e:8f:84:95:c2:45:32:0b:08:dc:4b:9c:3a:a8:
         3e:62:e0:f4:fc:3e:1e:09:64:21:58:8c:47:91:04:37:e0:d7:
         77:df:fb:0d:5f:ee:d9:61:3e:70:ae:2a:e0:00:ca:e9:41:a8:
         58:9c:c6:6c:fe:b0:b7:d0:dd:6b:f5:ce:30:61:e5:7a:fe:41:
         33:d5:1b:e2:55:ba:06:02:19:5d:83:b2:6a:07:54:c4:3b:4a:
         7c:34:80:36:e9:54:49:dd:44:87:2c:dd:49:1d:74:fc:78:1b:
         06:24:d4:4f:d0:f0:df:2b:6e:24:fa:ab:23:0d:fc:9d:14:2f:
         0c:d2:88:2e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdNyowPrrGZHRyj84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTAzZGJjY2UtYmIyYS00MDNlLWFkMjUtNjc5ODFlYTFk
ZTIxMB4XDTI0MDkyMzAwMDUxOFoXDTI0MTIyMjAxMDUxOFowLzEtMCsGA1UEAxMk
YzM4MzJkZjMtMjE0Yy00NTk3LTk2YzctNTlmMWEzNDZlNGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K7n6IhwlzVH4ySoMpQOOMCP/tWubzeuuN9E
h/Hksm9cRHuuj96UTp7KZZpQedmwfblWbsqU1MfggEgP1UVF2BbqIBleC6ZPuOR1
QUjs5F4x9taKCXczDBmdTBG2bMNIAr3mmEEs82ubsvsjIygtWXEMBUH/w80tfpPw
zGcq399eGP8ADJVhwXFYblMEOvn7O9J1ZHpfsma0mW4jqhvXuOlvkL/vSVkbhHyW
Tq1DxjM156PtWgHuTJ0ARQTfHXWn0pCfCYMW2fkKTDlZE8avoandwzVqQyvSXnB+
Gqta3cx81i19EGInxqXucTcQK4/vSm3701HemAxW1SYf2vXZ8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJMLp6TnwNXdOFZ4/+TSIVKb2wZhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85MDNk
YmNjZS1iYjJhLTQwM2UtYWQyNS02Nzk4MWVhMWRlMjEvNjgwYTY3MTItZTU4NS0z
MWJhLWFiYTUtOGZkOTQ1MWYwNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTAzZGJjY2UtYmIyYS00MDNlLWFk
MjUtNjc5ODFlYTFkZTIxLzkwM2RiY2NlLWJiMmEtNDAzZS1hZDI1LTY3OTgxZWEx
ZGUyMS5jcmwwHwYDVR0jBBgwFoAUtdTji+hhvNy218k9W6s+zWZMaW4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MDNkYmNjZS1iYjJhLTQwM2UtYWQyNS02Nzk4
MWVhMWRlMjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL76ADy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADFklOvtZgNesFOvsF9Q8/aN7L59OPBcrtjVUPKC51PuZ+fTeCdB
g0q6ENBJYI2B8M6g2LrCx6V2Hw1o0GIUIQTSUdgrxcCub+Ja7UKT8HtKa2KHyZ3P
krgB+b1/78a9MwNiiViv8nPWHJZl8vTom17a94EGyTdpG2s+DsLprgWh7SCej4SV
wkUyCwjcS5w6qD5i4PT8Ph4JZCFYjEeRBDfg13ff+w1f7tlhPnCuKuAAyulBqFic
xmz+sLfQ3Wv1zjBh5Xr+QTPVG+JVugYCGV2DsmoHVMQ7Snw0gDbpVEndRIcs3Ukd
dPx4GwYk1E/Q8N8rbiT6qyMN/J0ULwzSiC4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:17 2024 by rpki-client on console-fra.rpki-client.org