Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/0bbf9d71-8699-39f7-8db3-a034ef8819fd.roa
File:                     0bbf9d71-8699-39f7-8db3-a034ef8819fd.roa (raw, json)
Hash identifier:          VAbdRbrtwwfe2l9GnQwetjX0YcPxishS+sLLA5SBHv0=
Subject key identifier:   3E:1E:94:6E:AF:FD:B8:75:1D:55:9D:6A:F5:5B:C4:40:84:12:CD:AB
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F432858476E00FBCD5ADF81021A6F1680
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/0bbf9d71-8699-39f7-8db3-a034ef8819fd.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     210630
IP address blocks:        2602:fc24:16::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:fb:cd:5a:df:81:02:1a:6f:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=d1f04dcc-a68a-4b74-b8b6-6b2c5e599af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:41:39:fe:b0:37:3a:a3:00:e9:5a:15:0b:
                    7d:08:16:6f:99:41:ef:a7:d3:25:c6:09:31:2c:3e:
                    d8:69:75:92:9d:da:74:65:c4:ae:2f:e5:2e:85:0a:
                    f2:80:50:c7:94:19:d4:95:43:74:82:91:d9:ac:90:
                    95:7b:14:d8:62:a5:45:36:04:30:ff:6c:c0:87:0b:
                    a6:5a:6f:64:e8:6b:de:28:f9:ec:93:04:04:d4:33:
                    91:a7:4e:d7:4f:dc:2b:82:ed:f8:a6:07:40:9a:07:
                    cd:3c:b0:a7:20:2d:ad:7f:98:21:67:94:50:81:67:
                    80:22:20:97:36:38:b4:20:93:8e:4a:98:3f:02:df:
                    b6:ca:c0:3a:c5:52:2b:2f:34:c2:a2:4d:3e:2c:eb:
                    77:3d:b1:78:e5:b7:c0:93:29:77:a7:27:35:7f:e1:
                    f6:47:df:2e:25:bf:3a:24:53:d7:ab:e4:e2:0c:2f:
                    6c:1c:05:de:8b:69:98:b2:82:f6:c1:8d:21:73:dd:
                    e3:85:15:70:c1:ea:85:3d:b5:ff:d3:9f:4e:f7:70:
                    1b:8e:38:3f:45:b1:e1:6b:50:b1:d0:40:51:80:72:
                    2b:4d:7d:9b:0d:06:98:d3:ca:75:4c:93:0a:22:6e:
                    4a:0c:2d:50:3a:5f:aa:d2:8c:d5:c9:39:c7:94:50:
                    4b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1E:94:6E:AF:FD:B8:75:1D:55:9D:6A:F5:5B:C4:40:84:12:CD:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/0bbf9d71-8699-39f7-8db3-a034ef8819fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc24:16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b1:fa:f3:e3:0b:98:5e:30:25:b2:97:82:05:a2:3c:4a:3f:
         98:53:b5:ab:37:23:aa:75:a2:eb:3a:4d:d3:11:8c:e3:03:9f:
         93:94:e0:a2:aa:8a:37:88:75:78:c9:d3:43:b4:74:18:82:01:
         cc:74:de:36:dd:6a:c7:fb:41:e2:9f:f5:cb:74:b0:5a:d7:a4:
         44:eb:b8:15:23:7b:e6:d3:9e:74:db:14:b3:34:26:3f:65:47:
         5a:4a:60:ce:56:7f:63:42:20:40:df:c8:42:fc:cd:9b:dc:c1:
         82:aa:f9:28:11:a2:58:67:df:85:96:2e:e0:9d:8b:b9:84:8d:
         ec:90:8e:d2:b7:b2:51:27:bd:d3:b3:f1:b7:b3:f6:f3:ba:78:
         24:41:4c:a7:3a:34:e6:88:67:9c:b0:db:b5:ad:3c:58:ab:fa:
         69:90:de:ce:c5:1a:39:d7:62:07:cc:60:67:8f:ba:44:54:1b:
         41:57:40:73:a9:34:54:4d:c0:4d:ad:48:d8:ec:3b:c7:1d:f6:
         85:bf:57:4a:5f:db:a5:78:58:33:ee:85:f3:a1:31:45:b4:28:
         cc:e2:39:0c:6f:8a:e1:3b:d9:a4:8a:c2:33:cb:2d:94:2d:ec:
         1b:af:73:29:49:ad:7b:92:5b:76:85:c5:25:81:49:ec:ab:35:
         07:b7:d9:f8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEduAPvNWt+BAhpvFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFlZWVhNjAtZTEyZS00NTcwLWEzMTAtY2FjNmY1MGMy
YmVmMB4XDTI0MTAwNDEzMDA0MloXDTI1MDEwMjE0MDA0MlowLzEtMCsGA1UEAxMk
ZDFmMDRkY2MtYTY4YS00Yjc0LWI4YjYtNmIyYzVlNTk5YWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZNBOf6wNzqjAOlaFQt9CBZvmUHvp9Mlxgkx
LD7YaXWSndp0ZcSuL+UuhQrygFDHlBnUlUN0gpHZrJCVexTYYqVFNgQw/2zAhwum
Wm9k6GveKPnskwQE1DORp07XT9wrgu34pgdAmgfNPLCnIC2tf5ghZ5RQgWeAIiCX
Nji0IJOOSpg/At+2ysA6xVIrLzTCok0+LOt3PbF45bfAkyl3pyc1f+H2R98uJb86
JFPXq+TiDC9sHAXei2mYsoL2wY0hc93jhRVwweqFPbX/059O93Abjjg/RbHha1Cx
0EBRgHIrTX2bDQaY08p1TJMKIm5KDC1QOl+q0ozVyTnHlFBLmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD4elG6v/bh1HVWdavVbxECEEs2rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVl
ZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2ZjUwYzJiZWYvMGJiZjlkNzEtODY5OS0z
OWY3LThkYjMtYTAzNGVmODgxOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGFlZWVhNjAtZTEyZS00NTcwLWEz
MTAtY2FjNmY1MGMyYmVmLzRhZWVlYTYwLWUxMmUtNDU3MC1hMzEwLWNhYzZmNTBj
MmJlZi5jcmwwHwYDVR0jBBgwFoAUpJDk1gjBX1VkEHVwfcHmpS1DnY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVlZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2
ZjUwYzJiZWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8JAAW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADux+vPjC5heMCWyl4IFojxKP5hTtas3I6p1ous6TdMRjOMDn5OU
4KKqijeIdXjJ00O0dBiCAcx03jbdasf7QeKf9ct0sFrXpETruBUje+bTnnTbFLM0
Jj9lR1pKYM5Wf2NCIEDfyEL8zZvcwYKq+SgRolhn34WWLuCdi7mEjeyQjtK3slEn
vdOz8bez9vO6eCRBTKc6NOaIZ5yw27WtPFir+mmQ3s7FGjnXYgfMYGePukRUG0FX
QHOpNFRNwE2tSNjsO8cd9oW/V0pf26V4WDPuhfOhMUW0KMziOQxviuE72aSKwjPL
LZQt7BuvcylJrXuSW3aFxSWBSeyrNQe32fg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org