Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/e4ec66db-7d95-3f81-9019-080395a450c0.roa
File:                     e4ec66db-7d95-3f81-9019-080395a450c0.roa (raw, json)
Hash identifier:          5mSBwgBOPRKSAwDVGd8xwdOHj0TcsMnuFes+bFDhabc=
Subject key identifier:   ED:16:66:AA:A9:3F:86:5D:E3:FF:D8:70:A0:0E:32:4C:C4:33:FA:25
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F432858474585ED3E58028745CCAB2380
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/e4ec66db-7d95-3f81-9019-080395a450c0.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     398427
IP address blocks:        2602:fd35:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:ed:3e:58:02:87:45:cc:ab:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=927a02c2-9018-45f7-8390-4e11a639addc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:6f:09:a1:ba:ad:37:81:10:77:b0:4e:73:
                    e8:cb:ed:61:b2:e8:44:11:56:19:ac:06:77:8d:79:
                    b3:cd:62:65:f4:ab:d5:08:d2:5c:55:c9:91:2f:fe:
                    a2:c8:a3:ac:86:43:84:27:04:67:33:bd:52:58:93:
                    63:18:10:d4:36:c7:cb:5a:cb:74:37:38:f3:8e:e8:
                    c4:31:a4:41:fc:ca:e9:ab:55:ca:9e:bd:6f:9e:38:
                    ce:a0:ce:f9:d8:7e:7e:ea:fe:ce:48:c1:a4:96:0d:
                    a7:d1:06:a2:3b:07:59:76:98:cd:c7:f7:f8:25:10:
                    34:19:73:51:64:f5:dd:6b:20:83:bd:0b:28:65:eb:
                    94:4e:9d:72:b0:d3:f1:36:c6:1d:ba:58:48:a9:08:
                    35:6c:d7:b2:54:be:92:aa:53:5c:6a:38:53:01:97:
                    d4:f5:65:58:6b:fb:ab:ee:31:0e:f1:ce:80:80:60:
                    c5:ee:76:9d:c3:29:cd:7b:11:0c:c7:2c:d3:9b:c3:
                    9b:13:b4:4b:ed:ba:8e:dc:e0:37:67:14:7e:7d:16:
                    78:6e:fd:b4:77:fa:7f:6f:2c:f6:08:02:33:82:6b:
                    1f:62:01:1c:fb:db:2a:a4:a1:01:86:31:1a:85:45:
                    b4:ca:1b:e7:cd:49:82:56:21:09:6f:22:39:23:34:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:16:66:AA:A9:3F:86:5D:E3:FF:D8:70:A0:0E:32:4C:C4:33:FA:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/e4ec66db-7d95-3f81-9019-080395a450c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd35:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:16:74:00:58:e3:7b:bb:c6:3b:f6:97:4f:8c:d8:0b:af:e4:
         14:c9:4e:52:d2:f0:66:3a:41:c5:9c:38:7a:1a:ea:ef:fd:03:
         74:44:46:70:47:51:a2:97:27:ef:e6:02:34:56:3f:da:e5:95:
         d2:25:2b:e0:4c:44:89:b6:25:52:30:b1:f5:46:1e:5b:a2:ea:
         28:eb:0c:06:3d:25:6b:27:b3:02:22:5e:5e:72:1d:f0:d9:f5:
         c5:6a:c4:8d:1e:02:45:57:51:4e:74:31:43:18:7f:68:9f:07:
         5e:9b:dc:d1:37:66:34:36:cb:5a:d8:c3:2f:05:c5:ba:c8:d1:
         5c:50:fe:1e:80:0e:b9:03:e0:77:aa:51:3e:6c:25:4b:d2:8f:
         06:55:74:58:1e:6a:8d:00:13:95:09:e5:73:97:54:9c:12:78:
         31:b2:49:58:d2:b6:2e:2e:29:ff:ab:86:71:4c:59:3d:e1:35:
         74:93:d2:05:e9:d7:cc:e2:84:c0:ed:9a:37:97:28:ec:6e:0b:
         74:fc:84:18:fc:50:41:7c:bf:63:f6:b8:83:73:eb:95:4f:99:
         f8:2f:60:4a:74:40:34:6e:fd:71:9a:e7:01:03:9f:f3:47:2c:
         c3:6a:8c:08:16:fc:e5:78:60:d5:3e:e4:c9:11:c4:13:2d:dc:
         fd:13:e4:26
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEdFhe0+WAKHRcyrI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5
OTVkMB4XDTI0MDkyMDAxMDAzMVoXDTI0MTIxOTAyMDAzMVowLzEtMCsGA1UEAxMk
OTI3YTAyYzItOTAxOC00NWY3LTgzOTAtNGUxMWE2MzlhZGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpRvCaG6rTeBEHewTnPoy+1hsuhEEVYZrAZ3
jXmzzWJl9KvVCNJcVcmRL/6iyKOshkOEJwRnM71SWJNjGBDUNsfLWst0NzjzjujE
MaRB/Mrpq1XKnr1vnjjOoM752H5+6v7OSMGklg2n0QaiOwdZdpjNx/f4JRA0GXNR
ZPXdayCDvQsoZeuUTp1ysNPxNsYdulhIqQg1bNeyVL6SqlNcajhTAZfU9WVYa/ur
7jEO8c6AgGDF7nadwynNexEMxyzTm8ObE7RL7bqO3OA3ZxR+fRZ4bv20d/p/byz2
CAIzgmsfYgEc+9sqpKEBhjEahUW0yhvnzUmCViEJbyI5IzRz2QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFO0WZqqpP4Zd4//YcKAOMkzEM/olMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj
NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvZTRlYzY2ZGItN2Q5NS0z
ZjgxLTkwMTktMDgwMzk1YTQ1MGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy
MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5
OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0
MTk1OTk5NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9NQIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAgBZ0AFjje7vGO/aXT4zYC6/kFMlOUtLwZjpBxZw4ehrq7/0DdERG
cEdRopcn7+YCNFY/2uWV0iUr4ExEibYlUjCx9UYeW6LqKOsMBj0layezAiJeXnId
8Nn1xWrEjR4CRVdRTnQxQxh/aJ8HXpvc0TdmNDbLWtjDLwXFusjRXFD+HoAOuQPg
d6pRPmwlS9KPBlV0WB5qjQATlQnlc5dUnBJ4MbJJWNK2Li4p/6uGcUxZPeE1dJPS
BenXzOKEwO2aN5co7G4LdPyEGPxQQXy/Y/a4g3PrlU+Z+C9gSnRANG79cZrnAQOf
80csw2qMCBb85Xhg1T7kyRHEEy3c/RPkJg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:50 2024 by rpki-client on console-fra.rpki-client.org