Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/aacebf46-b625-3dda-b6c2-cfcda969f9aa.roa
File:                     aacebf46-b625-3dda-b6c2-cfcda969f9aa.roa (raw, json)
Hash identifier:          R6CewfxV7Tb9Yggg1NqZ3JVMxozwuq9CxoZvPYkqZo0=
Subject key identifier:   A3:EA:37:35:CF:2C:D3:2B:42:BE:B4:EF:E3:B7:C6:75:A3:CA:F3:DE
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F432858471775B59BFD8F9042E0115200
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/aacebf46-b625-3dda-b6c2-cfcda969f9aa.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     399122
IP address blocks:        2602:fcd5:22::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:b5:9b:fd:8f:90:42:e0:11:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=3c83d14a-4777-4ae0-b44b-467750634c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:d2:4b:44:c9:64:18:02:44:eb:c4:f7:58:
                    11:10:2e:c0:2d:f6:ca:25:6e:ef:7a:5d:7b:38:9a:
                    5e:15:20:3b:14:7e:c0:c5:ad:b2:ef:0b:95:df:44:
                    db:dc:04:9f:3e:75:63:91:59:ba:ce:d0:8f:8c:45:
                    f0:03:20:df:bf:f5:0a:61:16:e7:94:20:16:d4:e9:
                    a1:39:7a:6b:3f:69:e2:10:56:9a:5f:c6:98:a1:5a:
                    ca:3a:3e:d1:ae:03:2f:fc:cb:0d:55:7b:76:13:5f:
                    7c:9e:bf:f7:85:77:f2:5a:6d:24:fe:a7:7f:06:1e:
                    f8:49:83:94:7a:6f:e4:63:df:a9:96:c7:3c:72:e4:
                    d0:ea:0e:e3:56:34:98:42:70:c6:66:0a:a7:c2:b9:
                    ef:1e:ed:ef:bf:f6:0c:59:e3:f6:c7:9f:33:4b:31:
                    0d:07:a0:9b:16:c8:fe:66:22:c5:b4:d1:61:a7:70:
                    62:fe:da:de:36:a0:a3:d9:a9:ff:9c:14:dc:0a:1a:
                    fc:36:77:29:1b:6a:b2:bb:47:2f:f9:81:dd:27:40:
                    df:0f:18:ec:7a:e1:93:c6:f3:8d:29:71:2b:11:8b:
                    ac:a0:6a:ea:70:31:35:6b:bc:99:2c:23:65:45:1f:
                    8a:1b:ee:d6:cb:ff:b1:26:7a:ed:ba:99:7b:4e:e7:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EA:37:35:CF:2C:D3:2B:42:BE:B4:EF:E3:B7:C6:75:A3:CA:F3:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/aacebf46-b625-3dda-b6c2-cfcda969f9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:22::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:e9:ce:99:94:66:c2:15:ef:7d:d0:a5:6f:b5:ba:ca:22:e0:
         56:56:a0:d3:df:9e:cf:ce:c4:b4:50:2c:5d:43:2c:01:e3:74:
         48:dd:71:cc:fc:c1:48:38:a4:09:ac:28:d4:c4:5e:6a:b4:5e:
         e3:14:ff:02:32:43:95:5a:15:e1:3a:b1:bc:98:31:10:a5:33:
         92:3b:27:95:43:c1:9d:24:d1:3e:c2:fb:5c:3d:6a:97:5a:b7:
         d0:00:7e:0b:62:64:46:5e:2f:6c:2f:a0:2d:dc:ae:7d:e7:de:
         48:01:d2:59:6f:de:1d:83:f7:4a:57:27:f7:71:dd:1b:c1:cf:
         8b:f2:44:41:61:69:c6:87:2d:c4:0d:b1:31:a1:1c:9f:60:8a:
         37:0f:be:30:7e:f0:60:76:05:a5:f0:73:43:fa:a5:28:5d:9e:
         e7:e5:de:96:d7:dc:3f:ec:1b:98:1a:06:f2:9d:9e:bc:7c:a7:
         b1:4a:e3:c8:68:62:81:e9:e4:9c:e0:b4:f8:75:9a:d4:bc:8a:
         2f:82:36:a8:c9:92:7c:49:4b:2b:85:f7:55:ba:d6:e0:3d:9a:
         f3:14:b5:02:10:15:c2:39:3c:a3:4f:4b:5d:30:06:be:33:84:
         d6:87:45:ad:45:cf:f5:d4:20:03:7f:81:5b:7a:4a:53:72:4d:
         f5:dd:76:29
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcXdbWb/Y+QQuARUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTYyNjE4NzgtNWVmNC00Zjk5LThkMDktYjZkMjQ5MzQ0
NGM1MB4XDTI0MDkwMzEzMDA0MloXDTI0MTIwMjE0MDA0MlowLzEtMCsGA1UEAxMk
M2M4M2QxNGEtNDc3Ny00YWUwLWI0NGItNDY3NzUwNjM0YzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2rSS0TJZBgCROvE91gREC7ALfbKJW7vel17
OJpeFSA7FH7Axa2y7wuV30Tb3ASfPnVjkVm6ztCPjEXwAyDfv/UKYRbnlCAW1Omh
OXprP2niEFaaX8aYoVrKOj7RrgMv/MsNVXt2E198nr/3hXfyWm0k/qd/Bh74SYOU
em/kY9+plsc8cuTQ6g7jVjSYQnDGZgqnwrnvHu3vv/YMWeP2x58zSzENB6CbFsj+
ZiLFtNFhp3Bi/treNqCj2an/nBTcChr8NncpG2qyu0cv+YHdJ0DfDxjseuGTxvON
KXErEYusoGrqcDE1a7yZLCNlRR+KG+7Wy/+xJnrtupl7TueDkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKPqNzXPLNMrQr607+O3xnWjyvPeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2
MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQyNDkzNDQ0YzUvYWFjZWJmNDYtYjYyNS0z
ZGRhLWI2YzItY2ZjZGE5NjlmOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTYyNjE4NzgtNWVmNC00Zjk5LThk
MDktYjZkMjQ5MzQ0NGM1L2E2MjYxODc4LTVlZjQtNGY5OS04ZDA5LWI2ZDI0OTM0
NDRjNS5jcmwwHwYDVR0jBBgwFoAU5DgAsivRHURmtzlG/z1FUty+3BowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQy
NDkzNDQ0YzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL81QAi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG3pzpmUZsIV733QpW+1usoi4FZWoNPfns/OxLRQLF1DLAHjdEjd
ccz8wUg4pAmsKNTEXmq0XuMU/wIyQ5VaFeE6sbyYMRClM5I7J5VDwZ0k0T7C+1w9
apdat9AAfgtiZEZeL2wvoC3crn3n3kgB0llv3h2D90pXJ/dx3RvBz4vyREFhacaH
LcQNsTGhHJ9gijcPvjB+8GB2BaXwc0P6pShdnufl3pbX3D/sG5gaBvKdnrx8p7FK
48hoYoHp5JzgtPh1mtS8ii+CNqjJknxJSyuF91W61uA9mvMUtQIQFcI5PKNPS10w
Br4zhNaHRa1Fz/XUIAN/gVt6SlNyTfXddik=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:22 2024 by rpki-client on console-ams.rpki-client.org