Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/f6d0917c-6631-3577-983a-59e495210036.roa
File:                     f6d0917c-6631-3577-983a-59e495210036.roa (raw, json)
Hash identifier:          4bISPmMS+UQ1eau7irPk5WNSTgtgkPTLjvaXIyz+P58=
Subject key identifier:   44:08:8B:1C:FB:F6:D0:14:16:E6:7F:E0:E9:9E:0E:84:A4:A0:B0:D1
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F43285845C2DE3837574892348BCB96C0
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/f6d0917c-6631-3577-983a-59e495210036.roa
Signing time:             Sat 04 May 2024 13:00:35 +0000
ROA not before:           Sat 04 May 2024 13:00:35 +0000
ROA not after:            Fri 02 Aug 2024 13:00:35 +0000
asID:                     210630
IP address blocks:        2602:fc24:19::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c2:de:38:37:57:48:92:34:8b:cb:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: May  4 13:00:35 2024 GMT
            Not After : Aug  2 13:00:35 2024 GMT
        Subject: CN=a574ee1a-8eab-4f6e-8a50-6bbd4a9055fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:23:44:5d:3c:df:9d:31:76:32:1f:1e:29:06:
                    e9:a5:07:ff:5c:b7:9e:9a:82:c8:f6:f5:95:26:9a:
                    cf:00:d6:81:31:0b:cf:c5:5e:49:b6:a1:bb:ae:f0:
                    03:d3:d3:62:cc:da:06:8b:48:69:8b:af:54:e3:ae:
                    eb:eb:ea:3d:28:14:c8:dc:a6:40:4f:05:df:18:c1:
                    43:2b:5c:35:9e:79:9e:65:52:67:1a:92:48:0e:2e:
                    f0:a2:32:c0:82:5d:81:37:70:28:98:48:5f:25:92:
                    e9:4e:2d:2b:84:57:cb:06:b1:88:1d:79:d2:86:8f:
                    a2:2e:a7:12:45:13:f3:e5:6a:56:c8:fa:40:5c:4c:
                    e3:92:b6:29:73:b7:ed:62:bf:4f:08:43:57:d2:5c:
                    be:00:dc:a0:2a:2d:9a:78:4f:e5:10:ce:08:dc:e5:
                    9b:0b:a9:27:8f:64:c4:38:62:c6:42:e8:e7:07:31:
                    13:4a:ed:ea:9e:b5:a0:b6:be:da:ab:d2:aa:92:f1:
                    90:a8:85:6f:70:23:67:51:59:0b:68:69:ef:90:4b:
                    eb:3f:db:0d:4d:49:90:b3:41:72:40:e0:0f:b1:8d:
                    f3:0c:74:35:d0:f3:41:95:b4:e7:8c:87:17:f6:44:
                    b5:9d:93:01:8e:8f:fa:bc:37:c2:17:83:2f:9a:b9:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:08:8B:1C:FB:F6:D0:14:16:E6:7F:E0:E9:9E:0E:84:A4:A0:B0:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/f6d0917c-6631-3577-983a-59e495210036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc24:19::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:77:b7:85:e7:1c:6e:56:99:04:6e:c8:d2:da:32:56:8f:50:
         1c:a6:ba:1e:8e:64:64:97:27:6d:31:50:94:f4:b5:ad:ec:19:
         0e:80:7c:7f:ba:97:4f:ef:6b:7a:28:9e:36:15:5e:ee:da:49:
         3c:4a:bf:d9:51:d3:ce:34:a8:68:03:f5:ee:3e:08:c6:4d:bd:
         32:bb:6e:8e:ec:88:a7:b6:cf:d2:af:ff:76:40:7f:4c:f7:b2:
         e4:47:43:09:0e:34:3c:d0:c3:ad:15:1d:7f:88:7a:d7:d9:1e:
         e3:e0:07:f6:b2:43:85:32:5d:ab:15:cc:c9:9a:ea:ed:fe:d2:
         36:26:dd:ed:9e:e6:9e:5b:42:14:31:0f:a5:7b:ef:4d:4f:e7:
         77:7d:49:f9:8d:a7:42:c4:b3:b7:63:a7:2d:ed:4a:cd:2a:56:
         8d:d1:1e:ed:fc:04:bf:99:fd:cc:dd:de:e4:a1:5d:47:2a:8a:
         26:d4:8b:1c:5b:c8:cf:81:57:2d:ed:74:d5:b2:98:03:ad:3e:
         d8:ea:d2:a1:d6:ec:a5:05:0b:95:a9:5c:60:0e:a0:d7:dd:97:
         d9:a1:05:be:c6:db:e2:69:15:b8:94:f8:11:c7:7c:f8:2f:09:
         31:d3:65:a1:4e:2a:97:75:3d:4e:a7:74:f7:a8:40:1f:22:54:
         d9:b9:5f:12
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXC3jg3V0iSNIvLlsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFlZWVhNjAtZTEyZS00NTcwLWEzMTAtY2FjNmY1MGMy
YmVmMB4XDTI0MDUwNDEzMDAzNVoXDTI0MDgwMjEzMDAzNVowLzEtMCsGA1UEAxMk
YTU3NGVlMWEtOGVhYi00ZjZlLThhNTAtNmJiZDRhOTA1NWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyNEXTzfnTF2Mh8eKQbppQf/XLeemoLI9vWV
JprPANaBMQvPxV5JtqG7rvAD09NizNoGi0hpi69U467r6+o9KBTI3KZATwXfGMFD
K1w1nnmeZVJnGpJIDi7wojLAgl2BN3AomEhfJZLpTi0rhFfLBrGIHXnSho+iLqcS
RRPz5WpWyPpAXEzjkrYpc7ftYr9PCENX0ly+ANygKi2aeE/lEM4I3OWbC6knj2TE
OGLGQujnBzETSu3qnrWgtr7aq9KqkvGQqIVvcCNnUVkLaGnvkEvrP9sNTUmQs0Fy
QOAPsY3zDHQ10PNBlbTnjIcX9kS1nZMBjo/6vDfCF4MvmrlqzQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEQIixz79tAUFuZ/4OmeDoSkoLDRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVl
ZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2ZjUwYzJiZWYvZjZkMDkxN2MtNjYzMS0z
NTc3LTk4M2EtNTllNDk1MjEwMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGFlZWVhNjAtZTEyZS00NTcwLWEz
MTAtY2FjNmY1MGMyYmVmLzRhZWVlYTYwLWUxMmUtNDU3MC1hMzEwLWNhYzZmNTBj
MmJlZi5jcmwwHwYDVR0jBBgwFoAUpJDk1gjBX1VkEHVwfcHmpS1DnY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVlZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2
ZjUwYzJiZWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8JAAZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADZ3t4XnHG5WmQRuyNLaMlaPUBymuh6OZGSXJ20xUJT0ta3sGQ6A
fH+6l0/va3oonjYVXu7aSTxKv9lR0840qGgD9e4+CMZNvTK7bo7siKe2z9Kv/3ZA
f0z3suRHQwkONDzQw60VHX+IetfZHuPgB/ayQ4UyXasVzMma6u3+0jYm3e2e5p5b
QhQxD6V7701P53d9SfmNp0LEs7djpy3tSs0qVo3RHu38BL+Z/czd3uShXUcqiibU
ixxbyM+BVy3tdNWymAOtPtjq0qHW7KUFC5WpXGAOoNfdl9mhBb7G2+JpFbiU+BHH
fPgvCTHTZaFOKpd1PU6ndPeoQB8iVNm5XxI=
-----END CERTIFICATE-----
Generated at Sun May 5 01:28:07 2024 by rpki-client on console-ams.rpki-client.org