Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/e38f6ec9-0bc5-3381-991e-d21407696e1e.roa
File:                     e38f6ec9-0bc5-3381-991e-d21407696e1e.roa (raw, json)
Hash identifier:          iZDZj/+gPHaRelACEZtjA2UO0ge/vmAPQULeXOJmEMs=
Subject key identifier:   DF:1D:FD:49:4A:FF:39:6E:22:19:F6:40:1D:A9:C0:2F:D9:E3:79:72
Certificate issuer:       /CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd
Certificate serial:       010D0C9F432858459BC8A0D193B989C41EFD3240
Authority key identifier: CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/e38f6ec9-0bc5-3381-991e-d21407696e1e.roa
Signing time:             Sat 20 Apr 2024 13:00:34 +0000
ROA not before:           Sat 20 Apr 2024 13:00:34 +0000
ROA not after:            Fri 19 Jul 2024 13:00:34 +0000
asID:                     203690
IP address blocks:        2602:fc42:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9b:c8:a0:d1:93:b9:89:c4:1e:fd:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd
        Validity
            Not Before: Apr 20 13:00:34 2024 GMT
            Not After : Jul 19 13:00:34 2024 GMT
        Subject: CN=f5a44d0b-4887-4709-96b6-0364b875b29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e5:1e:63:ad:aa:6d:57:ec:4b:df:5e:21:e5:
                    7a:50:9b:a4:0f:ed:60:4f:9c:8e:c8:a2:34:7c:fd:
                    15:4a:e8:4b:f5:d2:1b:50:fb:65:be:97:9e:b7:d2:
                    f5:6b:4b:fd:2d:56:79:cf:29:c3:44:cb:71:f3:ca:
                    0a:ad:c4:a6:4e:18:19:a9:2e:84:64:07:2b:0d:30:
                    bf:af:1d:b3:9d:59:8a:e1:d9:89:a9:75:60:cc:a1:
                    af:4f:25:13:85:0e:7a:17:9a:22:6a:7c:f5:73:ec:
                    55:8a:cf:2e:10:6b:45:6b:15:51:5c:25:34:97:b6:
                    df:21:da:65:c1:f4:15:ff:79:97:92:1a:93:11:1b:
                    a3:88:35:96:90:31:f2:58:2d:09:71:dd:08:03:72:
                    ab:7b:6d:24:35:29:ec:d1:91:3d:49:2e:50:75:c1:
                    1c:a9:ee:80:03:d1:2a:98:14:9f:d9:64:80:a3:d6:
                    ef:68:16:f5:e8:5c:af:56:3a:77:dd:3a:55:fd:52:
                    d5:15:4e:a6:7f:18:7d:7a:f4:b2:6b:19:c7:aa:20:
                    56:8d:96:8d:d1:f4:7e:84:80:15:5a:d0:46:d5:7a:
                    dd:7d:ae:3b:36:69:67:46:79:9c:c3:98:73:30:37:
                    d0:16:b4:32:ae:bd:e2:4a:68:e6:2d:7a:19:75:46:
                    d2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1D:FD:49:4A:FF:39:6E:22:19:F6:40:1D:A9:C0:2F:D9:E3:79:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/e38f6ec9-0bc5-3381-991e-d21407696e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc42:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b8:31:9d:27:ff:68:89:d8:db:3e:db:fc:d1:0c:45:63:4c:
         56:5b:96:58:4b:a1:44:88:10:95:05:02:9d:e3:3e:0b:2a:b1:
         c2:56:06:c8:2f:91:c1:b0:79:56:79:06:2c:0a:54:ef:af:65:
         5e:5e:34:a2:c9:cc:0d:f2:ef:e6:b7:07:1f:40:db:3e:10:75:
         3e:b5:4e:a6:0a:9b:09:8d:3e:e0:fc:c7:50:88:00:9f:1e:e3:
         75:af:d6:f9:73:90:96:d8:d8:2b:b8:5c:06:89:98:18:f3:ec:
         e8:c4:44:65:2f:a2:e0:bc:17:c1:7e:26:9a:07:35:60:8c:da:
         70:1d:55:ce:94:d9:56:cf:30:07:98:f6:6c:85:9e:17:4b:f2:
         49:7c:b4:f2:20:78:39:c2:be:02:9f:8a:4a:9b:3d:e6:d4:02:
         91:07:6d:23:03:77:0e:f1:d1:c2:8a:dd:80:70:a2:d8:bb:1d:
         78:9a:4c:5f:f6:0c:5b:1c:10:a5:44:7b:cc:1f:df:67:6c:56:
         02:29:e0:d0:50:c7:b3:4d:fb:bc:77:8c:29:5b:f7:37:d8:a6:
         46:47:73:91:2f:9a:a0:f7:f2:f5:f8:5b:1c:27:0a:09:30:c7:
         33:21:4f:89:de:5a:4b:39:9b:de:40:57:96:c1:1d:96:17:d0:
         fc:c6:b8:8f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWbyKDRk7mJxB79MkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTI4NDc3NDctOGQ0Ni00ZGEyLWJiOWUtNGM3Mjg2MGU3
YmNkMB4XDTI0MDQyMDEzMDAzNFoXDTI0MDcxOTEzMDAzNFowLzEtMCsGA1UEAxMk
ZjVhNDRkMGItNDg4Ny00NzA5LTk2YjYtMDM2NGI4NzViMjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeUeY62qbVfsS99eIeV6UJukD+1gT5yOyKI0
fP0VSuhL9dIbUPtlvpeet9L1a0v9LVZ5zynDRMtx88oKrcSmThgZqS6EZAcrDTC/
rx2znVmK4dmJqXVgzKGvTyUThQ56F5oianz1c+xVis8uEGtFaxVRXCU0l7bfIdpl
wfQV/3mXkhqTERujiDWWkDHyWC0Jcd0IA3Kre20kNSns0ZE9SS5QdcEcqe6AA9Eq
mBSf2WSAo9bvaBb16FyvVjp33TpV/VLVFU6mfxh9evSyaxnHqiBWjZaN0fR+hIAV
WtBG1Xrdfa47NmlnRnmcw5hzMDfQFrQyrr3iSmjmLXoZdUbS+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN8d/UlK/zluIhn2QB2pwC/Z43lyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMjg0
Nzc0Ny04ZDQ2LTRkYTItYmI5ZS00YzcyODYwZTdiY2QvZTM4ZjZlYzktMGJjNS0z
MzgxLTk5MWUtZDIxNDA3Njk2ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTI4NDc3NDctOGQ0Ni00ZGEyLWJi
OWUtNGM3Mjg2MGU3YmNkL2EyODQ3NzQ3LThkNDYtNGRhMi1iYjllLTRjNzI4NjBl
N2JjZC5jcmwwHwYDVR0jBBgwFoAUzCE+WHT05+QXOfuLkf55uqkzjOwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMjg0Nzc0Ny04ZDQ2LTRkYTItYmI5ZS00Yzcy
ODYwZTdiY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8QgAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGC4MZ0n/2iJ2Ns+2/zRDEVjTFZbllhLoUSIEJUFAp3jPgsqscJW
BsgvkcGweVZ5BiwKVO+vZV5eNKLJzA3y7+a3Bx9A2z4QdT61TqYKmwmNPuD8x1CI
AJ8e43Wv1vlzkJbY2Cu4XAaJmBjz7OjERGUvouC8F8F+JpoHNWCM2nAdVc6U2VbP
MAeY9myFnhdL8kl8tPIgeDnCvgKfikqbPebUApEHbSMDdw7x0cKK3YBwoti7HXia
TF/2DFscEKVEe8wf32dsVgIp4NBQx7NN+7x3jClb9zfYpkZHc5EvmqD38vX4Wxwn
CgkwxzMhT4neWks5m95AV5bBHZYX0PzGuI8=
-----END CERTIFICATE-----
Generated at Tue May 21 02:08:20 2024 by rpki-client on console-ams.rpki-client.org