Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6875592a-4b89-3c2f-ab48-57b15a46a2ab.roa
File:                     6875592a-4b89-3c2f-ab48-57b15a46a2ab.roa (raw, json)
Hash identifier:          UYgGqD/i2EtD4q6ZfPP1LcCeZAbep856nNL+OJ2WCsg=
Subject key identifier:   4A:2E:A6:67:A5:45:3D:B4:E9:40:11:66:21:D8:30:2B:5E:18:DD:B1
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584598FDFD135A053B14949B19C0
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6875592a-4b89-3c2f-ab48-57b15a46a2ab.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     398324
IP address blocks:        2602:80d:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fd:fd:13:5a:05:3b:14:94:9b:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=0cb9f4aa-6882-4561-98a7-d9f4dac8ee75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5e:74:b3:8a:56:61:ad:09:0a:df:d5:97:08:
                    ca:1f:f4:f8:b3:02:db:01:74:8d:2a:89:7a:90:48:
                    f3:b3:56:3d:8e:75:c5:6e:ec:58:2c:6e:7a:4b:31:
                    38:fb:03:50:7b:0c:af:08:73:c1:c8:b6:85:1f:52:
                    65:af:a4:66:02:8f:39:48:d6:ed:43:46:d8:d1:22:
                    b2:58:e4:96:f1:1c:88:86:2f:20:af:bc:67:1c:76:
                    f3:d8:a5:0c:87:8f:6a:33:c2:73:f2:b7:7e:e2:f6:
                    51:62:6e:1f:d9:d7:32:a5:dd:4c:da:50:48:e3:85:
                    3f:f3:db:5c:0b:02:bb:2c:d2:68:f0:b7:7d:dc:28:
                    f2:27:7c:d1:1b:5f:64:4b:a6:1c:5c:4a:29:9d:8c:
                    83:3f:ca:bf:9b:3b:30:4b:9c:1d:ed:ef:88:03:e1:
                    03:55:26:0a:e3:31:fa:29:c5:96:e2:df:93:fb:26:
                    e8:2d:5f:6e:20:c7:e9:cf:7f:ed:e6:82:da:1f:04:
                    95:ea:e7:f4:fc:3d:bc:f3:78:6f:86:41:3b:60:94:
                    15:e3:b1:0d:76:cf:98:81:44:95:28:3e:f5:cc:bc:
                    f4:25:ca:46:27:f4:fb:ef:66:d3:9d:c2:32:25:74:
                    c8:01:89:65:ea:01:f8:0a:ed:39:88:00:5a:e4:41:
                    3d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2E:A6:67:A5:45:3D:B4:E9:40:11:66:21:D8:30:2B:5E:18:DD:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6875592a-4b89-3c2f-ab48-57b15a46a2ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80d:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:de:8d:e8:72:48:45:08:ab:d4:17:86:8e:2d:11:ae:44:d9:
         35:aa:a0:85:1c:f2:6a:a4:b8:d2:6a:a1:92:4c:9a:95:47:79:
         76:a2:f3:53:50:bb:bd:a3:f9:88:1f:92:54:9f:81:98:45:1a:
         85:91:30:d2:e8:39:a7:f0:c1:8e:b4:b6:d5:59:a4:88:68:f3:
         fe:1a:9f:e0:fb:32:e5:7d:b9:69:42:f5:01:ec:e1:bf:34:b6:
         8b:0c:c8:a4:9b:53:58:c6:83:a1:ed:bb:cc:a6:21:5e:a5:1c:
         0a:5c:cd:1d:64:71:66:63:eb:82:f8:06:55:2f:b3:46:50:5a:
         bb:5e:1f:56:e1:93:84:6b:08:20:06:b4:48:ac:fd:c7:d4:72:
         5b:d1:2c:80:1e:ec:6b:a4:cc:de:82:6d:e7:5e:29:69:b1:69:
         32:8a:42:8b:3d:17:85:eb:04:9c:9b:2f:07:61:14:e4:85:99:
         2f:f2:69:ca:6f:2e:eb:a7:6d:13:c1:f2:bd:33:31:33:c6:dd:
         d5:b8:cf:cb:77:6e:eb:d0:b0:96:45:63:aa:a8:5e:71:b9:e1:
         7c:d4:31:c2:26:8b:33:c9:eb:2b:d8:f3:42:dd:95:9e:bf:2c:
         60:43:0b:9c:17:31:49:3e:32:b9:cb:c2:6b:de:11:52:b4:c2:
         d5:37:e0:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWY/f0TWgU7FJSbGcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM2ODg0ZDYtYjExZS00MjgwLTljNGMtODE3NzI4N2Q5
ODY5MB4XDTI0MDQxOTEzMDAzNloXDTI0MDcxODEzMDAzNlowLzEtMCsGA1UEAxMk
MGNiOWY0YWEtNjg4Mi00NTYxLTk4YTctZDlmNGRhYzhlZTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh150s4pWYa0JCt/VlwjKH/T4swLbAXSNKol6
kEjzs1Y9jnXFbuxYLG56SzE4+wNQewyvCHPByLaFH1Jlr6RmAo85SNbtQ0bY0SKy
WOSW8RyIhi8gr7xnHHbz2KUMh49qM8Jz8rd+4vZRYm4f2dcypd1M2lBI44U/89tc
CwK7LNJo8Ld93CjyJ3zRG19kS6YcXEopnYyDP8q/mzswS5wd7e+IA+EDVSYK4zH6
KcWW4t+T+yboLV9uIMfpz3/t5oLaHwSV6uf0/D2883hvhkE7YJQV47ENds+YgUSV
KD71zLz0JcpGJ/T772bTncIyJXTIAYll6gH4Cu05iABa5EE94QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEoupmelRT206UARZiHYMCteGN2xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4
ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3Mjg3ZDk4NjkvNjg3NTU5MmEtNGI4OS0z
YzJmLWFiNDgtNTdiMTVhNDZhMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmM2ODg0ZDYtYjExZS00MjgwLTlj
NGMtODE3NzI4N2Q5ODY5L2JjNjg4NGQ2LWIxMWUtNDI4MC05YzRjLTgxNzcyODdk
OTg2OS5jcmwwHwYDVR0jBBgwFoAUFcjuvBdfaxDD3HrPV9TR85APDocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3
Mjg3ZDk4NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDRAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACbejehySEUIq9QXho4tEa5E2TWqoIUc8mqkuNJqoZJMmpVHeXai
81NQu72j+YgfklSfgZhFGoWRMNLoOafwwY60ttVZpIho8/4an+D7MuV9uWlC9QHs
4b80tosMyKSbU1jGg6Htu8ymIV6lHApczR1kcWZj64L4BlUvs0ZQWrteH1bhk4Rr
CCAGtEis/cfUclvRLIAe7GukzN6CbedeKWmxaTKKQos9F4XrBJybLwdhFOSFmS/y
acpvLuunbRPB8r0zMTPG3dW4z8t3buvQsJZFY6qoXnG54XzUMcImizPJ6yvY80Ld
lZ6/LGBDC5wXMUk+MrnLwmveEVK0wtU34MQ=
-----END CERTIFICATE-----
Generated at Thu May 2 04:27:25 2024 by rpki-client on console-fra.rpki-client.org