Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/0454ffd6-368c-3998-b5bc-582cda1db8b6.roa
File:                     0454ffd6-368c-3998-b5bc-582cda1db8b6.roa (raw, json)
Hash identifier:          sUPfHvTdWcN0FVVu+zOohTMhSmqRmeAakaY2SFBrtMI=
Subject key identifier:   CF:E2:90:2D:CD:98:45:BD:2E:30:06:A9:2C:17:14:48:ED:CA:F2:8D
Certificate issuer:       /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
Certificate serial:       010D0C9F432858449C74CACB4CA1AFB6D08EA180
Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/0454ffd6-368c-3998-b5bc-582cda1db8b6.roa
Signing time:             Sat 20 Jan 2024 02:00:27 +0000
ROA not before:           Sat 20 Jan 2024 02:00:27 +0000
ROA not after:            Fri 19 Apr 2024 01:00:27 +0000
asID:                     399214
IP address blocks:        2602:809:6000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:9c:74:ca:cb:4c:a1:af:b6:d0:8e:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
        Validity
            Not Before: Jan 20 02:00:27 2024 GMT
            Not After : Apr 19 01:00:27 2024 GMT
        Subject: CN=1d490908-8932-4fbd-8082-747865ef714d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b1:09:ee:18:f9:75:1b:3b:51:6d:f7:6b:72:
                    73:af:30:2a:27:01:19:93:4c:ea:f7:10:3f:b5:5f:
                    b1:63:54:39:27:d9:b7:b7:0e:0b:8d:40:0a:8d:14:
                    95:44:62:f2:63:6c:cb:ee:66:bd:b7:e2:5e:49:1f:
                    1e:d5:5e:5f:42:ce:1d:8b:70:f5:af:b9:73:a5:93:
                    cb:fa:8f:5a:f9:e9:cf:1b:02:2c:ec:a8:15:b6:fa:
                    3d:7a:0f:44:3a:af:ac:d5:57:94:92:de:4b:67:9a:
                    ab:c8:a0:96:06:be:29:1a:9f:06:8d:5b:68:ba:33:
                    16:11:8f:8a:8e:9d:ed:00:20:0e:85:b1:e8:e1:10:
                    87:a2:06:3d:f3:87:24:5a:79:19:85:cd:6f:73:ab:
                    0e:6d:1a:fc:b4:29:35:3e:4c:32:57:13:3e:f5:f5:
                    3c:6f:d6:e9:66:22:c6:da:69:a9:53:12:ac:f6:ed:
                    45:55:6e:e5:77:0b:de:c6:10:eb:19:81:3e:16:42:
                    1a:09:9a:f6:9b:58:42:63:9c:8d:32:4e:26:38:c2:
                    d1:b1:06:f2:74:c9:fc:16:82:75:66:ef:6a:65:f9:
                    d8:08:f7:b0:29:10:7e:80:7e:38:f1:ca:c1:c0:a8:
                    65:b4:15:83:a9:e2:6c:ce:ba:1e:0f:ca:8a:db:6f:
                    e2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E2:90:2D:CD:98:45:BD:2E:30:06:A9:2C:17:14:48:ED:CA:F2:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/0454ffd6-368c-3998-b5bc-582cda1db8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl

            X509v3 Authority Key Identifier:
                keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:809:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:21:1f:7b:3d:98:77:89:bd:2a:03:e4:35:6c:51:ab:28:
         d6:3d:61:06:13:21:8a:c7:c8:79:f9:83:c8:a8:e0:04:e3:85:
         bd:b2:c8:8a:91:a8:9b:dc:97:15:6f:39:80:d5:70:18:09:5e:
         5b:1e:2b:db:46:8a:ab:24:34:ff:e9:c5:b4:69:07:a2:86:e0:
         54:78:dc:62:40:6b:bf:fd:fe:67:40:88:ba:70:2e:fe:a9:53:
         6c:ae:12:b3:7f:01:dd:71:29:89:ba:9c:66:9d:72:b7:3d:ef:
         e1:73:e8:b8:88:ce:bb:62:6b:a6:03:70:d8:87:10:07:19:70:
         4f:39:d4:a4:8e:a7:87:53:19:d3:8a:1b:b8:49:5a:b1:5c:1a:
         3b:e4:0c:c6:e1:35:4d:be:fd:1f:fd:06:6c:98:28:01:d4:72:
         bb:fe:c6:76:6d:88:62:d2:22:dc:87:f1:4b:a0:88:0b:b6:fe:
         45:da:d5:0f:e8:c0:92:38:fe:34:27:8a:21:71:82:25:dd:38:
         80:d2:8f:89:53:5d:43:3d:2c:59:fd:59:31:33:ea:2b:30:df:
         17:4c:64:bb:45:fa:ce:bc:46:80:98:25:dc:fe:11:2a:fe:9d:
         46:be:75:16:b9:86:57:4a:d8:a6:ff:7c:4c:d1:b1:25:ff:35:
         07:df:a2:6c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEScdMrLTKGvttCOoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmYwZTdjZTktNTVkNC00MzgyLWI4OTQtYWFjYTg5ZjJk
ZmQxMB4XDTI0MDEyMDAyMDAyN1oXDTI0MDQxOTAxMDAyN1owLzEtMCsGA1UEAxMk
MWQ0OTA5MDgtODkzMi00ZmJkLTgwODItNzQ3ODY1ZWY3MTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rEJ7hj5dRs7UW33a3JzrzAqJwEZk0zq9xA/
tV+xY1Q5J9m3tw4LjUAKjRSVRGLyY2zL7ma9t+JeSR8e1V5fQs4di3D1r7lzpZPL
+o9a+enPGwIs7KgVtvo9eg9EOq+s1VeUkt5LZ5qryKCWBr4pGp8GjVtoujMWEY+K
jp3tACAOhbHo4RCHogY984ckWnkZhc1vc6sObRr8tCk1PkwyVxM+9fU8b9bpZiLG
2mmpUxKs9u1FVW7ldwvexhDrGYE+FkIaCZr2m1hCY5yNMk4mOMLRsQbydMn8FoJ1
Zu9qZfnYCPewKRB+gH448crBwKhltBWDqeJszroeD8qK22/iwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM/ikC3NmEW9LjAGqSwXFEjtyvKNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBl
N2NlOS01NWQ0LTQzODItYjg5NC1hYWNhODlmMmRmZDEvMDQ1NGZmZDYtMzY4Yy0z
OTk4LWI1YmMtNTgyY2RhMWRiOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmYwZTdjZTktNTVkNC00MzgyLWI4
OTQtYWFjYTg5ZjJkZmQxLzJmMGU3Y2U5LTU1ZDQtNDM4Mi1iODk0LWFhY2E4OWYy
ZGZkMS5jcmwwHwYDVR0jBBgwFoAUxwyRk31taXdKMVntxuqEo/T3CpAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBlN2NlOS01NWQ0LTQzODItYjg5NC1hYWNh
ODlmMmRmZDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIICWAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADr2IR97PZh3ib0qA+Q1bFGrKNY9YQYTIYrHyHn5g8io4ATjhb2y
yIqRqJvclxVvOYDVcBgJXlseK9tGiqskNP/pxbRpB6KG4FR43GJAa7/9/mdAiLpw
Lv6pU2yuErN/Ad1xKYm6nGadcrc97+Fz6LiIzrtia6YDcNiHEAcZcE851KSOp4dT
GdOKG7hJWrFcGjvkDMbhNU2+/R/9BmyYKAHUcrv+xnZtiGLSItyH8UugiAu2/kXa
1Q/owJI4/jQniiFxgiXdOIDSj4lTXUM9LFn9WTEz6isw3xdMZLtF+s68RoCYJdz+
ESr+nUa+dRa5hldK2Kb/fEzRsSX/NQffomw=
-----END CERTIFICATE-----
Generated at Thu Mar 28 02:05:14 2024 by rpki-client on console-fra.rpki-client.org