Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/4d7ef875-df90-3438-b602-449c579d931e.roa
File:                     4d7ef875-df90-3438-b602-449c579d931e.roa (raw, json)
Hash identifier:          4HKEBiP4asV+sKHdAI6S17nOs2yutrN8ZBJyLFyNTHw=
Subject key identifier:   28:19:D8:E5:95:72:DD:E5:38:2F:A7:78:1A:2D:ED:4D:05:A3:0F:89
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F432858479AABF6F1E9B371C140ABD3C0
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/4d7ef875-df90-3438-b602-449c579d931e.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     399122
IP address blocks:        2602:fcd5:34::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:f6:f1:e9:b3:71:c1:40:ab:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=c3313c0a-17d5-41da-af4b-c0038fa4c517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:77:20:13:3f:65:0b:b6:e2:d3:90:49:c5:34:
                    7d:cf:a5:00:da:81:ad:e9:87:a6:e8:0c:1c:74:1b:
                    b1:25:e5:d2:79:18:57:55:4d:79:41:01:ea:e0:05:
                    f2:fd:9d:a1:f4:47:fd:7a:ea:21:61:49:fb:39:9d:
                    4a:53:4d:f1:b2:c3:77:c5:d9:6e:7a:7a:e9:4b:f3:
                    37:a4:03:f2:41:af:e6:11:2c:6f:43:a2:f5:32:0a:
                    62:86:fa:8d:24:c1:5e:57:3e:0c:9f:7f:37:14:1f:
                    7c:eb:a1:ae:37:c2:1e:47:7d:6f:88:03:95:25:c2:
                    e5:53:9a:09:f6:ff:c5:40:23:d2:b5:ab:bb:86:7e:
                    d3:0c:61:d7:75:07:22:2e:16:5a:ab:c9:c1:07:71:
                    51:dd:a5:20:27:8b:3f:9b:96:53:3d:72:8d:92:54:
                    94:9a:6f:99:2c:08:e9:ee:ba:fb:96:58:18:16:2b:
                    4b:37:7e:1d:25:64:9f:dc:be:3c:25:f6:32:d9:12:
                    75:7c:31:58:19:a3:ed:67:59:e4:48:88:21:d4:55:
                    b9:61:5d:bc:e1:69:44:63:e7:a7:c4:d4:4b:2a:d1:
                    a1:14:05:16:ed:4d:d6:52:26:14:f4:e9:f8:87:9b:
                    f8:d6:4d:2c:72:ff:15:55:be:c8:cb:d3:11:a2:a2:
                    05:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:19:D8:E5:95:72:DD:E5:38:2F:A7:78:1A:2D:ED:4D:05:A3:0F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/4d7ef875-df90-3438-b602-449c579d931e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:34::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:33:32:17:85:59:3a:38:83:28:cf:5c:82:a2:33:3a:1c:73:
         14:d0:f9:4c:74:0b:ee:be:9b:c4:82:3c:c6:a3:ff:ce:d8:54:
         a6:68:0e:b7:15:38:44:64:26:7b:84:d1:e2:a3:0d:25:4a:ce:
         61:bd:67:89:85:62:38:7f:44:09:b1:2b:d4:46:06:f1:25:d9:
         17:3f:41:4f:70:35:6c:5e:64:76:ad:4c:86:6e:d4:e8:93:0b:
         c3:ce:7f:e0:bb:32:ba:fd:da:ac:e4:88:ad:6c:33:2f:1f:1c:
         ac:ed:85:b3:e9:61:b1:d7:8b:d7:19:40:2b:df:7f:d6:19:63:
         1e:cb:0b:57:10:a4:50:3a:b5:11:03:e9:53:1c:d5:1a:75:6f:
         65:ac:af:04:a5:89:71:a8:29:f8:34:dd:1e:7b:5c:25:96:eb:
         71:4c:e8:83:e1:f2:26:e3:f1:3d:ea:c3:7d:7c:20:f0:a4:21:
         86:b0:c2:48:f3:63:01:c5:93:d3:6d:3e:5f:22:92:dc:f4:7d:
         f4:36:18:0c:cb:47:f7:6c:74:1c:86:6d:5c:6e:16:68:ac:7f:
         0e:a9:f9:17:ff:d7:00:37:11:fa:4f:15:65:d8:89:81:d2:73:
         a9:b5:da:f3:75:14:28:24:cf:f6:7d:54:ff:d0:be:72:51:a2:
         bd:4c:22:25
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeaq/bx6bNxwUCr08AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTYyNjE4NzgtNWVmNC00Zjk5LThkMDktYjZkMjQ5MzQ0
NGM1MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk
YzMzMTNjMGEtMTdkNS00MWRhLWFmNGItYzAwMzhmYTRjNTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHcgEz9lC7bi05BJxTR9z6UA2oGt6Yem6Awc
dBuxJeXSeRhXVU15QQHq4AXy/Z2h9Ef9euohYUn7OZ1KU03xssN3xdluenrpS/M3
pAPyQa/mESxvQ6L1MgpihvqNJMFeVz4Mn383FB9866GuN8IeR31viAOVJcLlU5oJ
9v/FQCPStau7hn7TDGHXdQciLhZaq8nBB3FR3aUgJ4s/m5ZTPXKNklSUmm+ZLAjp
7rr7llgYFitLN34dJWSf3L48JfYy2RJ1fDFYGaPtZ1nkSIgh1FW5YV284WlEY+en
xNRLKtGhFAUW7U3WUiYU9On4h5v41k0scv8VVb7Iy9MRoqIFjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCgZ2OWVct3lOC+neBot7U0Fow+JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2
MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQyNDkzNDQ0YzUvNGQ3ZWY4NzUtZGY5MC0z
NDM4LWI2MDItNDQ5YzU3OWQ5MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTYyNjE4NzgtNWVmNC00Zjk5LThk
MDktYjZkMjQ5MzQ0NGM1L2E2MjYxODc4LTVlZjQtNGY5OS04ZDA5LWI2ZDI0OTM0
NDRjNS5jcmwwHwYDVR0jBBgwFoAU5DgAsivRHURmtzlG/z1FUty+3BowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQy
NDkzNDQ0YzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL81QA0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHozMheFWTo4gyjPXIKiMzoccxTQ+Ux0C+6+m8SCPMaj/87YVKZo
DrcVOERkJnuE0eKjDSVKzmG9Z4mFYjh/RAmxK9RGBvEl2Rc/QU9wNWxeZHatTIZu
1OiTC8POf+C7Mrr92qzkiK1sMy8fHKzthbPpYbHXi9cZQCvff9YZYx7LC1cQpFA6
tRED6VMc1Rp1b2WsrwSliXGoKfg03R57XCWW63FM6IPh8ibj8T3qw318IPCkIYaw
wkjzYwHFk9NtPl8iktz0ffQ2GAzLR/dsdByGbVxuFmisfw6p+Rf/1wA3EfpPFWXY
iYHSc6m12vN1FCgkz/Z9VP/QvnJRor1MIiU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:40 2024 by rpki-client on console-fra.rpki-client.org