Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067/0743c53f-1570-3903-8618-732692568a04.roa
File:                     0743c53f-1570-3903-8618-732692568a04.roa (raw, json)
Hash identifier:          b9I4ZlzmENPCZQQITwOCn1JZREyK8+zDl8hydsQ+rX0=
Subject key identifier:   2A:B2:CB:2D:45:DD:42:CA:2D:46:A1:03:B5:27:B6:E2:D1:68:04:00
Certificate issuer:       /CN=20b01b41-6f04-43fa-8e06-b61037281067
Certificate serial:       010D0C9F43285847C1DF55572E93C0574FAB8C80
Authority key identifier: 0B:8E:F8:08:14:38:52:A8:6C:23:E8:4E:12:68:C7:82:EB:83:EE:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067/0743c53f-1570-3903-8618-732692568a04.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     400818
IP address blocks:        2602:fabb::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067/20b01b41-6f04-43fa-8e06-b61037281067.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067/20b01b41-6f04-43fa-8e06-b61037281067.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:55:57:2e:93:c0:57:4f:ab:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20b01b41-6f04-43fa-8e06-b61037281067
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=fba8c481-28e3-4398-81cd-4499f8d24a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:ca:59:c5:97:1f:f4:4e:47:00:e1:46:1b:
                    fb:11:ca:dd:bf:36:89:18:52:9c:23:6a:79:92:e4:
                    e5:00:c9:86:e5:ed:c5:7c:2e:26:4e:b2:aa:3d:10:
                    15:05:1c:79:08:74:c1:1b:2e:a7:d6:a4:4e:75:2c:
                    24:22:77:61:4c:21:8e:54:d1:d2:95:14:a0:46:52:
                    8c:1d:f2:57:58:4c:0e:c9:29:58:2d:21:15:40:1d:
                    f6:3f:ad:dc:aa:5f:aa:dc:49:d5:7b:84:90:a7:6b:
                    dd:1e:7d:71:c5:06:87:7e:5c:fb:8b:c3:22:69:57:
                    09:10:38:be:9b:66:60:b0:0c:69:16:26:18:31:94:
                    17:b5:35:6d:aa:60:c4:6f:24:61:f7:e3:29:fb:eb:
                    02:1c:b2:f5:1c:69:3e:38:56:e2:5f:ab:9c:e0:b5:
                    58:34:1c:cd:6b:cf:59:a1:c2:e0:ad:cb:8a:95:8d:
                    c8:50:97:88:cc:49:0e:9e:c7:59:ec:0d:91:05:56:
                    eb:97:94:8f:ac:73:7d:ee:2f:c7:a1:75:d5:e8:f9:
                    45:dd:87:b9:c9:41:54:cb:76:27:d4:a0:bc:50:78:
                    59:33:47:14:e0:88:6d:55:ca:0a:51:27:0a:20:a3:
                    81:e8:c4:78:e0:4d:9d:9d:b3:c0:02:46:d4:84:02:
                    9d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B2:CB:2D:45:DD:42:CA:2D:46:A1:03:B5:27:B6:E2:D1:68:04:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067/0743c53f-1570-3903-8618-732692568a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067/20b01b41-6f04-43fa-8e06-b61037281067.crl

            X509v3 Authority Key Identifier:
                keyid:0B:8E:F8:08:14:38:52:A8:6C:23:E8:4E:12:68:C7:82:EB:83:EE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fabb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a1:2d:1b:2c:43:b3:db:20:8b:a8:9c:22:b8:91:d2:ff:09:
         2e:e1:6b:42:c4:f6:9e:f9:a9:48:99:56:43:ba:58:8e:5e:9f:
         01:92:c7:d4:fd:b1:2f:75:f1:6b:64:d8:80:dd:1c:c2:f2:a9:
         80:c0:ef:95:b4:77:b8:69:c8:64:8c:33:93:56:df:c8:98:c1:
         c9:cd:27:e5:37:f2:c4:62:21:e4:f6:6b:55:f5:bc:55:7f:95:
         01:d5:cb:e2:6c:b7:75:9a:9f:eb:08:5e:51:9d:c3:30:fa:b6:
         d1:f5:33:36:08:1a:10:d9:f1:d7:44:e8:cc:33:39:c8:d8:90:
         f2:d2:62:28:7e:cf:44:d3:ce:f1:9e:d6:ec:0e:18:bd:a9:bf:
         6a:26:df:bb:fd:25:45:9a:75:8d:0c:54:cb:86:c4:58:9b:c8:
         d4:50:98:c4:f6:77:54:41:db:c9:f7:1a:f0:d1:5e:ee:34:29:
         0f:38:12:30:2e:e5:25:1b:3d:97:6b:46:74:71:97:1e:76:fd:
         98:cf:77:9c:f3:ca:45:87:ce:a7:f6:57:ec:d2:15:7f:e4:7a:
         94:2a:1f:ab:5c:03:52:4a:eb:24:4f:b2:29:b2:c3:5e:c0:e9:
         84:1c:45:91:d1:77:dc:be:41:7e:a6:85:28:43:62:3f:67:4a:
         b0:27:b3:5c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfB31VXLpPAV0+rjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBiMDFiNDEtNmYwNC00M2ZhLThlMDYtYjYxMDM3Mjgx
MDY3MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk
ZmJhOGM0ODEtMjhlMy00Mzk4LTgxY2QtNDQ5OWY4ZDI0YTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIPKWcWXH/RORwDhRhv7EcrdvzaJGFKcI2p5
kuTlAMmG5e3FfC4mTrKqPRAVBRx5CHTBGy6n1qROdSwkIndhTCGOVNHSlRSgRlKM
HfJXWEwOySlYLSEVQB32P63cql+q3EnVe4SQp2vdHn1xxQaHflz7i8MiaVcJEDi+
m2ZgsAxpFiYYMZQXtTVtqmDEbyRh9+Mp++sCHLL1HGk+OFbiX6uc4LVYNBzNa89Z
ocLgrcuKlY3IUJeIzEkOnsdZ7A2RBVbrl5SPrHN97i/HoXXV6PlF3Ye5yUFUy3Yn
1KC8UHhZM0cU4IhtVcoKUScKIKOB6MR44E2dnbPAAkbUhAKdewIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCqyyy1F3ULKLUahA7UntuLRaAQAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGIw
MWI0MS02ZjA0LTQzZmEtOGUwNi1iNjEwMzcyODEwNjcvMDc0M2M1M2YtMTU3MC0z
OTAzLTg2MTgtNzMyNjkyNTY4YTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBiMDFiNDEtNmYwNC00M2ZhLThl
MDYtYjYxMDM3MjgxMDY3LzIwYjAxYjQxLTZmMDQtNDNmYS04ZTA2LWI2MTAzNzI4
MTA2Ny5jcmwwHwYDVR0jBBgwFoAUC474CBQ4UqhsI+hOEmjHguuD7hAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGIwMWI0MS02ZjA0LTQzZmEtOGUwNi1iNjEw
MzcyODEwNjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6uwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAAqEtGyxDs9sgi6icIriR0v8JLuFrQsT2nvmpSJlWQ7pYjl6fAZLH
1P2xL3Xxa2TYgN0cwvKpgMDvlbR3uGnIZIwzk1bfyJjByc0n5TfyxGIh5PZrVfW8
VX+VAdXL4my3dZqf6wheUZ3DMPq20fUzNggaENnx10TozDM5yNiQ8tJiKH7PRNPO
8Z7W7A4Yvam/aibfu/0lRZp1jQxUy4bEWJvI1FCYxPZ3VEHbyfca8NFe7jQpDzgS
MC7lJRs9l2tGdHGXHnb9mM93nPPKRYfOp/ZX7NIVf+R6lCofq1wDUkrrJE+yKbLD
XsDphBxFkdF33L5BfqaFKENiP2dKsCezXA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:27 2024 by rpki-client on console-ams.rpki-client.org