Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa
File:                     829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa (raw, json)
Hash identifier:          2VRWCtW8CprTtFz365k8/DBnYxb0P+GYmdo6pzYK8kM=
Subject key identifier:   9A:C6:EC:04:78:EA:8D:AD:92:75:A5:EF:5B:40:CB:E1:C4:C4:26:8D
Certificate issuer:       /CN=4b9027e9-0517-4775-a6c4-35522e65e4ad
Certificate serial:       010D0C9F432858471775C13C1D37D03AB0ED9480
Authority key identifier: 68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     398697
IP address blocks:        2602:fcdd::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:c1:3c:1d:37:d0:3a:b0:ed:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9027e9-0517-4775-a6c4-35522e65e4ad
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=57d042be-3fbb-408b-a6b8-064a8865c05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:38:6a:3e:fa:b6:d1:b2:c1:5c:9f:96:38:04:
                    0c:04:f8:80:e5:3c:3b:81:11:fe:d3:c1:74:41:8d:
                    a9:fd:1b:e2:b5:f1:cc:39:1f:05:d3:dc:2a:4a:2b:
                    d3:bb:6e:72:f7:c2:ff:1f:86:ff:38:59:e8:ee:6e:
                    9f:ed:67:fa:ae:1b:54:dd:14:e5:99:28:8d:8c:8a:
                    8b:19:b7:71:aa:24:3c:8e:11:06:a9:dc:3d:19:ce:
                    ec:d1:8b:2a:5b:bf:a6:00:39:10:35:2f:b7:15:0f:
                    68:0b:0e:f5:a2:b9:55:25:d9:cf:0c:b2:3d:d7:07:
                    db:05:9c:d5:4f:42:9b:01:8d:9d:81:c6:af:b3:e1:
                    11:89:2c:ff:aa:8a:ea:23:41:4f:25:d7:7e:a0:3c:
                    9f:a5:a1:f9:d0:ef:0c:35:60:d0:eb:21:eb:95:28:
                    54:4c:a5:99:a8:03:05:42:2e:5e:06:d6:59:2c:a1:
                    88:45:1d:77:62:1b:19:6e:44:40:5e:01:88:d6:05:
                    49:af:31:4a:22:59:b0:54:9d:12:34:35:c3:20:39:
                    59:04:a4:37:48:39:90:44:b6:1f:8e:2e:f4:8c:57:
                    59:a5:04:70:bc:46:c8:1b:6c:9c:3e:e8:0c:dc:91:
                    78:6b:78:62:8a:e5:b5:57:bb:36:b1:32:87:03:fc:
                    3a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C6:EC:04:78:EA:8D:AD:92:75:A5:EF:5B:40:CB:E1:C4:C4:26:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl

            X509v3 Authority Key Identifier:
                keyid:68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcdd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b7:b1:05:8a:01:ca:8a:59:dd:ce:fa:09:b8:e8:47:b1:29:
         a0:48:6f:b7:3e:f2:79:ba:65:9f:cc:82:57:a6:97:04:35:46:
         8c:cc:f1:43:9f:e1:a0:4c:c6:32:fa:41:c9:78:69:cb:a4:96:
         6e:7a:a9:97:1f:78:cb:b1:c1:a1:7d:22:ad:a1:95:33:6e:58:
         1a:72:df:96:3c:93:7f:f4:4b:f7:a5:37:c4:c9:56:77:92:f9:
         e4:0b:2e:19:8b:00:5f:19:f0:56:96:14:25:63:6b:df:c2:f5:
         f2:eb:47:16:2e:38:a4:f9:4a:61:9e:53:cf:7e:ec:04:2c:2c:
         20:f1:e8:39:4c:04:6a:35:2d:7c:91:48:c9:e8:5e:49:51:17:
         cb:53:ec:1b:45:3e:20:5a:ba:d1:26:05:9c:44:d8:97:d1:a9:
         b6:6b:24:3d:ff:30:02:70:62:05:9d:01:6d:ae:9d:fd:31:f2:
         c7:25:ee:ac:37:d5:19:f9:48:a9:47:1f:60:8d:f3:3b:dd:d5:
         43:6a:f0:47:a7:66:87:84:7a:29:f1:2b:c5:b8:84:1d:07:cf:
         22:14:37:4b:96:e1:6e:66:97:df:8f:e4:1a:c0:95:33:8f:38:
         9c:65:64:5d:57:0d:fb:ae:c5:a5:8e:41:65:55:d5:4b:6d:81:
         75:fd:73:36
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEcXdcE8HTfQOrDtlIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGI5MDI3ZTktMDUxNy00Nzc1LWE2YzQtMzU1MjJlNjVl
NGFkMB4XDTI0MDkwMzEzMDA0MloXDTI0MTIwMjE0MDA0MlowLzEtMCsGA1UEAxMk
NTdkMDQyYmUtM2ZiYi00MDhiLWE2YjgtMDY0YTg4NjVjMDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDhqPvq20bLBXJ+WOAQMBPiA5Tw7gRH+08F0
QY2p/RvitfHMOR8F09wqSivTu25y98L/H4b/OFno7m6f7Wf6rhtU3RTlmSiNjIqL
GbdxqiQ8jhEGqdw9Gc7s0YsqW7+mADkQNS+3FQ9oCw71orlVJdnPDLI91wfbBZzV
T0KbAY2dgcavs+ERiSz/qorqI0FPJdd+oDyfpaH50O8MNWDQ6yHrlShUTKWZqAMF
Qi5eBtZZLKGIRR13YhsZbkRAXgGI1gVJrzFKIlmwVJ0SNDXDIDlZBKQ3SDmQRLYf
ji70jFdZpQRwvEbIG2ycPugM3JF4a3hiiuW1V7s2sTKHA/w6pwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJrG7AR46o2tknWl71tAy+HExCaNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Yjkw
MjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUyMmU2NWU0YWQvODI5YmIzYmEtMjliYy0z
ZGRjLThlMGQtODI5ZTIzY2I1NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGI5MDI3ZTktMDUxNy00Nzc1LWE2
YzQtMzU1MjJlNjVlNGFkLzRiOTAyN2U5LTA1MTctNDc3NS1hNmM0LTM1NTIyZTY1
ZTRhZC5jcmwwHwYDVR0jBBgwFoAUaAaXzMELbzFO2zE1+i0H8zBpTwowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80YjkwMjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUy
MmU2NWU0YWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL83QAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAh7exBYoByopZ3c76CbjoR7EpoEhvtz7yebpln8yCV6aXBDVGjMzx
Q5/hoEzGMvpByXhpy6SWbnqplx94y7HBoX0iraGVM25YGnLfljyTf/RL96U3xMlW
d5L55AsuGYsAXxnwVpYUJWNr38L18utHFi44pPlKYZ5Tz37sBCwsIPHoOUwEajUt
fJFIyeheSVEXy1PsG0U+IFq60SYFnETYl9GptmskPf8wAnBiBZ0Bba6d/THyxyXu
rDfVGflIqUcfYI3zO93VQ2rwR6dmh4R6KfErxbiEHQfPIhQ3S5bhbmaX34/kGsCV
M484nGVkXVcN+67FpY5BZVXVS22Bdf1zNg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:29 2024 by rpki-client on console-ams.rpki-client.org