Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/ea9ac587-40dc-3bcf-bcb1-e3bba8988d7b.roa
File:                     ea9ac587-40dc-3bcf-bcb1-e3bba8988d7b.roa (raw, json)
Hash identifier:          KipEysTYx0KkezWdYtv7KK27PwSYsXxJoWnzLtdGPXg=
Subject key identifier:   38:5D:64:D0:99:7F:C3:A3:9A:53:86:86:83:EE:C4:0A:83:9F:50:DD
Certificate issuer:       /CN=df5adac7-ed86-4b24-911d-716f2c94711d
Certificate serial:       010D0C9F43285847D9A760B15F627092155A1DC0
Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/ea9ac587-40dc-3bcf-bcb1-e3bba8988d7b.roa
Signing time:             Tue 12 Nov 2024 02:27:36 +0000
ROA not before:           Tue 12 Nov 2024 02:27:36 +0000
ROA not after:            Mon 10 Feb 2025 02:27:36 +0000
asID:                     44324
IP address blocks:        2602:f92a::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:a7:60:b1:5f:62:70:92:15:5a:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d
        Validity
            Not Before: Nov 12 02:27:36 2024 GMT
            Not After : Feb 10 02:27:36 2025 GMT
        Subject: CN=308df864-7953-4225-8e5d-89aab7513cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7c:6d:64:3f:a0:5a:ff:c0:cb:24:d6:93:c2:
                    8d:fb:e1:63:18:ae:2b:56:5a:a5:94:1d:0b:5d:3c:
                    3c:c1:68:d4:75:0b:43:e6:3f:fb:94:7f:6a:b7:3e:
                    03:25:2b:53:6b:fb:02:65:d6:7b:25:1c:55:00:92:
                    af:2f:eb:2a:fc:9e:98:98:dd:aa:36:eb:3b:c0:c3:
                    b9:a6:f9:56:df:98:e5:ad:df:a2:ec:fe:6c:0c:18:
                    50:15:81:e0:65:20:9f:62:68:dc:ac:bd:82:47:45:
                    43:1a:90:36:3f:35:4e:78:80:0f:f1:92:29:ef:56:
                    22:cd:47:e2:76:b8:7e:f6:13:da:5a:12:c7:7e:51:
                    4d:27:4f:4a:0b:a0:a5:6a:8e:34:c4:8a:fa:eb:2d:
                    19:14:92:d1:d8:d3:3f:8c:57:11:7a:50:a7:2f:0c:
                    ed:de:3f:b1:78:cf:ab:d3:25:76:02:c0:1f:6a:52:
                    2c:3f:e0:9a:a5:a0:ac:fe:e1:65:9e:b8:25:67:9c:
                    33:c1:ef:c1:7c:9f:b6:91:af:1c:e6:27:87:b2:1b:
                    21:32:12:54:fb:81:42:eb:97:08:56:08:0b:32:41:
                    bb:1f:31:46:05:60:f1:72:45:63:d0:2a:72:a7:b8:
                    2a:e8:c0:5f:0b:e3:79:40:95:73:7d:7c:ac:4b:21:
                    06:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5D:64:D0:99:7F:C3:A3:9A:53:86:86:83:EE:C4:0A:83:9F:50:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/ea9ac587-40dc-3bcf-bcb1-e3bba8988d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl

            X509v3 Authority Key Identifier:
                keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:28:88:e7:72:87:59:75:35:d4:4c:b0:98:64:d0:e2:04:a7:
         19:96:88:c7:31:41:0d:bd:40:22:37:fd:e6:77:17:b1:ee:0d:
         88:fd:d3:cc:25:c0:2b:78:fc:a7:ec:b9:5c:5e:a3:d8:25:4b:
         83:a7:92:39:f4:0e:5f:02:32:b3:dd:bf:4d:85:81:33:96:29:
         90:55:ba:d1:bf:4f:a0:9c:2f:e8:bc:ad:f8:2b:ba:22:9a:84:
         2d:b3:be:7d:14:71:f6:1f:58:88:4c:c9:65:24:16:59:45:79:
         ca:35:0f:99:19:36:c9:90:33:a2:8c:73:8a:a4:a2:93:80:6e:
         8b:e6:c2:d9:6d:ce:57:88:cb:fc:f0:b1:91:96:80:25:d2:b7:
         34:8a:81:41:54:d0:75:91:bd:38:be:e6:10:78:fb:6d:5b:ca:
         5f:e9:d8:08:e0:2c:16:83:11:b2:55:bd:7a:1c:67:9a:2c:e5:
         d9:21:37:3d:a4:a1:d8:10:e8:80:b1:a0:0f:5a:7d:d0:c2:9e:
         1b:c1:58:28:4a:26:80:f2:4d:0f:06:d5:c6:54:0c:a5:ff:87:
         f1:14:6b:6b:8f:df:a7:33:da:b5:4e:8d:40:c5:29:f7:51:38:
         65:c4:cd:20:b8:eb:f4:de:bc:7d:b0:ff:5b:c4:67:5d:e7:64:
         22:5f:60:3f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfZp2CxX2JwkhVaHcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3
MTFkMB4XDTI0MTExMjAyMjczNloXDTI1MDIxMDAyMjczNlowLzEtMCsGA1UEAxMk
MzA4ZGY4NjQtNzk1My00MjI1LThlNWQtODlhYWI3NTEzY2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHxtZD+gWv/AyyTWk8KN++FjGK4rVlqllB0L
XTw8wWjUdQtD5j/7lH9qtz4DJStTa/sCZdZ7JRxVAJKvL+sq/J6YmN2qNus7wMO5
pvlW35jlrd+i7P5sDBhQFYHgZSCfYmjcrL2CR0VDGpA2PzVOeIAP8ZIp71YizUfi
drh+9hPaWhLHflFNJ09KC6Clao40xIr66y0ZFJLR2NM/jFcRelCnLwzt3j+xeM+r
0yV2AsAfalIsP+CapaCs/uFlnrglZ5wzwe/BfJ+2ka8c5ieHshshMhJU+4FC65cI
VggLMkG7HzFGBWDxckVj0Cpyp7gq6MBfC+N5QJVzfXysSyEGXwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDhdZNCZf8OjmlOGhoPuxAqDn1DdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh
ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvZWE5YWM1ODctNDBkYy0z
YmNmLWJjYjEtZTNiYmE4OTg4ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx
MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0
NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm
MmM5NDcxMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5KgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAESiI53KHWXU11EywmGTQ4gSnGZaIxzFBDb1AIjf95ncXse4NiP3T
zCXAK3j8p+y5XF6j2CVLg6eSOfQOXwIys92/TYWBM5YpkFW60b9PoJwv6Lyt+Cu6
IpqELbO+fRRx9h9YiEzJZSQWWUV5yjUPmRk2yZAzooxziqSik4Bui+bC2W3OV4jL
/PCxkZaAJdK3NIqBQVTQdZG9OL7mEHj7bVvKX+nYCOAsFoMRslW9ehxnmizl2SE3
PaSh2BDogLGgD1p90MKeG8FYKEomgPJNDwbVxlQMpf+H8RRra4/fpzPatU6NQMUp
91E4ZcTNILjr9N68fbD/W8RnXedkIl9gPw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:47:50 2024 by rpki-client on console-ams.rpki-client.org