Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/4694d567-b90d-3acf-9655-996af58f9619.roa
File:                     4694d567-b90d-3acf-9655-996af58f9619.roa (raw, json)
Hash identifier:          k5EoAZXnho49MAeEMsrwLYQ4BSiPxghs1+ZCx9PkNnA=
Subject key identifier:   E7:FB:90:68:15:E3:A6:9B:24:D1:C1:07:E5:88:42:55:F4:0F:6D:DA
Certificate issuer:       /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
Certificate serial:       010D0C9F43285841E46DDBC8ED50C8F1C80A3D80
Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/4694d567-b90d-3acf-9655-996af58f9619.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sun 09 Jul 2023 05:43:22 +0000
asID:                     399214
IP address blocks:        2602:fb0a::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:db:c8:ed:50:c8:f1:c8:0a:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul  9 05:43:22 2023 GMT
        Subject: CN=390f8f53-2739-4aa4-8c36-d4cef447884f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fc:00:15:3e:79:dd:2d:8a:0a:7a:9b:22:50:
                    35:ce:3e:da:47:6c:56:d1:ce:0c:1e:06:fc:8d:51:
                    64:d7:e3:40:16:a0:e6:a1:b1:b4:f3:3c:bb:26:ff:
                    0e:15:61:29:48:20:e3:e7:27:54:fa:b0:4a:b0:ae:
                    63:7a:2a:7a:1d:a3:0d:da:72:b5:b4:d3:82:23:69:
                    1e:42:fd:a4:ab:94:29:fd:3c:36:c9:fb:64:79:06:
                    51:f3:05:30:f7:b1:c1:cf:91:ee:ca:ed:51:58:1c:
                    4b:28:c2:58:67:07:c7:76:49:fd:47:51:7f:c5:73:
                    37:6f:68:72:cd:8c:03:df:cf:6e:8c:26:1a:ea:b9:
                    9a:8c:0e:c5:e1:0a:10:b8:70:cf:33:6a:f7:2c:66:
                    ff:0b:fc:59:1e:85:f5:b8:43:09:88:8d:8d:d6:21:
                    91:c3:4f:94:e4:0b:c5:57:24:6e:13:17:ff:0f:71:
                    21:1f:c8:f4:16:da:e1:f9:23:71:60:88:37:dc:50:
                    a3:a6:c8:37:74:8c:99:5b:0c:52:d6:a6:c5:21:b6:
                    18:0e:8c:1d:fe:32:40:e4:25:64:b2:04:48:d8:8c:
                    63:ac:08:70:50:d6:69:3c:0a:41:d8:99:04:b6:8f:
                    84:28:e6:77:59:cb:df:16:d7:2d:97:d6:f0:21:1b:
                    20:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E7:FB:90:68:15:E3:A6:9B:24:D1:C1:07:E5:88:42:55:F4:0F:6D:DA
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/4694d567-b90d-3acf-9655-996af58f9619.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl

            X509v3 Authority Key Identifier: 
                keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb0a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0e:b2:38:f9:8d:20:a5:e2:46:15:f3:12:d4:0a:ff:b8:0d:
         0c:0a:b7:2d:11:3d:aa:96:dc:d5:49:07:b5:17:10:89:36:9f:
         b8:75:1a:5e:fb:54:61:05:0c:fc:e1:36:6f:bd:f1:d8:ee:84:
         71:b3:e6:a1:b9:6b:61:e4:06:19:6c:88:9a:97:96:35:2c:95:
         da:57:7c:91:f2:ec:50:2e:6e:fd:55:0e:e4:b7:10:50:53:a4:
         43:f4:02:37:90:d6:b6:04:60:55:d9:4e:b5:65:ef:28:7b:f3:
         3e:48:32:4a:22:69:fd:63:b8:55:e4:f6:f9:92:4e:80:50:b1:
         db:3e:6c:08:14:49:c7:74:db:b6:9f:49:17:31:9f:8b:d0:13:
         f8:93:89:4b:c1:47:fe:2b:51:a4:cf:6b:31:e3:d8:1e:ca:ae:
         7f:b4:9a:c2:d3:6a:5d:23:ab:b5:2c:a4:af:dc:c6:0b:b5:52:
         8f:2b:ba:59:07:6d:18:47:b9:13:81:bd:5f:d1:00:17:ba:5d:
         1b:f8:9f:f5:80:96:94:b1:f9:d5:0c:64:c9:e8:77:e4:fa:34:
         5b:af:f5:fb:54:00:f4:0e:4a:64:d6:fb:31:ed:f9:4b:8f:03:
         c9:b1:9d:4b:07:6c:d2:e1:c4:b3:f5:bc:2e:05:47:29:6d:3d:
         70:b0:c7:5b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEHkbdvI7VDI8cgKPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmYwZTdjZTktNTVkNC00MzgyLWI4OTQtYWFjYTg5ZjJk
ZmQxMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDcwOTA1NDMyMlowLzEtMCsGA1UEAxMk
MzkwZjhmNTMtMjczOS00YWE0LThjMzYtZDRjZWY0NDc4ODRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvwAFT553S2KCnqbIlA1zj7aR2xW0c4MHgb8
jVFk1+NAFqDmobG08zy7Jv8OFWEpSCDj5ydU+rBKsK5jeip6HaMN2nK1tNOCI2ke
Qv2kq5Qp/Tw2yftkeQZR8wUw97HBz5Huyu1RWBxLKMJYZwfHdkn9R1F/xXM3b2hy
zYwD389ujCYa6rmajA7F4QoQuHDPM2r3LGb/C/xZHoX1uEMJiI2N1iGRw0+U5AvF
VyRuExf/D3EhH8j0Ftrh+SNxYIg33FCjpsg3dIyZWwxS1qbFIbYYDowd/jJA5CVk
sgRI2IxjrAhwUNZpPApB2JkEto+EKOZ3WcvfFtctl9bwIRsg+wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOf7kGgV46abJNHBB+WIQlX0D23aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBl
N2NlOS01NWQ0LTQzODItYjg5NC1hYWNhODlmMmRmZDEvNDY5NGQ1NjctYjkwZC0z
YWNmLTk2NTUtOTk2YWY1OGY5NjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmYwZTdjZTktNTVkNC00MzgyLWI4
OTQtYWFjYTg5ZjJkZmQxLzJmMGU3Y2U5LTU1ZDQtNDM4Mi1iODk0LWFhY2E4OWYy
ZGZkMS5jcmwwHwYDVR0jBBgwFoAUxwyRk31taXdKMVntxuqEo/T3CpAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBlN2NlOS01NWQ0LTQzODItYjg5NC1hYWNh
ODlmMmRmZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7CgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAAQ6yOPmNIKXiRhXzEtQK/7gNDAq3LRE9qpbc1UkHtRcQiTafuHUa
XvtUYQUM/OE2b73x2O6EcbPmoblrYeQGGWyImpeWNSyV2ld8kfLsUC5u/VUO5LcQ
UFOkQ/QCN5DWtgRgVdlOtWXvKHvzPkgySiJp/WO4VeT2+ZJOgFCx2z5sCBRJx3Tb
tp9JFzGfi9AT+JOJS8FH/itRpM9rMePYHsquf7SawtNqXSOrtSykr9zGC7VSjyu6
WQdtGEe5E4G9X9EAF7pdG/if9YCWlLH51Qxkyeh35Po0W6/1+1QA9A5KZNb7Me35
S48DybGdSwds0uHEs/W8LgVHKW09cLDHWw==
-----END CERTIFICATE-----
Generated at Mon May 15 18:57:12 2023 by rpki-client on console-ams.rpki-client.org