Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/7498589e-57a8-3a95-86ac-755dca4d3099.roa
File:                     7498589e-57a8-3a95-86ac-755dca4d3099.roa (raw, json)
Hash identifier:          eAUXqXS2MwLJktHi0kJf/gJv+/TYz2yknQ0+ccq0Fpo=
Subject key identifier:   64:57:5A:11:3C:0C:62:AA:0F:A5:E7:86:9C:7A:B6:D2:35:2C:3F:1D
Certificate issuer:       /CN=4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c
Certificate serial:       010D0C9F432858473FF09D25216A41D44DFBA390
Authority key identifier: 54:C5:6B:92:F7:D9:72:CC:E8:04:D6:6C:39:D6:D9:00:8D:84:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/7498589e-57a8-3a95-86ac-755dca4d3099.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     397550
IP address blocks:        2602:fdbf::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:9d:25:21:6a:41:d4:4d:fb:a3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=a1cf8e16-6dba-42e3-9a40-336b8cb8f172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:b1:4d:04:e4:eb:93:37:3d:c4:3e:92:98:
                    dc:5a:c7:9b:63:79:73:d3:db:94:81:da:e9:06:0b:
                    88:06:50:7c:7a:53:7b:fe:be:d2:04:22:77:57:32:
                    5b:7f:fe:75:df:47:71:17:4a:c3:96:0f:96:c9:15:
                    cb:9c:08:e5:72:94:4f:c5:29:b0:8e:b2:e2:6f:c2:
                    1d:57:8f:94:da:b0:0a:d3:9c:db:5b:3e:80:64:72:
                    1c:53:ff:fd:e9:9b:f4:77:8b:eb:1e:62:44:90:d1:
                    3e:04:78:f1:bd:3a:fb:ba:72:44:b6:38:4c:f6:36:
                    39:a4:7f:f2:a6:d7:26:5e:be:19:f4:fe:21:9e:03:
                    e5:df:10:50:34:3f:bc:d5:14:86:83:13:63:c6:b8:
                    16:bf:7a:1f:65:12:27:7b:06:5c:bf:73:d0:13:bf:
                    72:1f:70:49:78:d7:05:b4:e5:07:a7:0b:96:8c:8e:
                    cb:b0:10:76:42:23:c4:17:bf:c3:bf:92:6f:0f:b0:
                    89:a6:59:ff:3b:06:91:c5:6d:b7:41:48:83:04:08:
                    e0:61:5e:24:a2:0d:33:a1:63:56:9c:fb:d7:5d:bc:
                    1a:35:2f:52:45:8a:84:99:c5:00:6d:61:04:03:e8:
                    33:19:4b:0b:cb:20:f1:34:c6:52:18:8b:5a:29:f4:
                    5d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:57:5A:11:3C:0C:62:AA:0F:A5:E7:86:9C:7A:B6:D2:35:2C:3F:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/7498589e-57a8-3a95-86ac-755dca4d3099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.crl

            X509v3 Authority Key Identifier:
                keyid:54:C5:6B:92:F7:D9:72:CC:E8:04:D6:6C:39:D6:D9:00:8D:84:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdbf::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d7:90:df:c8:c5:75:ef:db:9f:fb:9f:46:3d:51:c1:ef:d8:
         e3:fa:a2:c9:e4:d0:ba:dd:d0:a8:03:39:c6:4d:6f:ef:29:0f:
         79:ac:8f:0e:5b:09:fd:98:c7:ab:96:83:76:6b:61:d8:ba:92:
         15:7d:ba:70:4f:86:ab:14:af:1c:42:9d:ec:51:2c:58:da:13:
         29:fe:1a:c9:17:e7:1f:39:2d:3a:ff:6e:fd:22:15:e6:92:e3:
         e8:27:d0:0e:f3:f2:54:50:5b:23:d4:60:0a:da:a6:86:88:97:
         04:85:4e:e7:11:6a:24:fe:19:a5:06:8d:e7:45:af:24:51:51:
         7b:05:80:7a:d9:7c:32:b5:e9:ad:97:8e:9c:b7:a9:f0:58:4a:
         c9:71:56:c8:68:62:d5:d2:50:63:3d:ac:ef:c1:cd:5e:48:28:
         43:d3:22:24:49:c3:78:9e:dd:4a:6d:96:78:c3:0a:2f:87:b7:
         d7:4a:3b:2c:0c:6e:74:a1:84:d3:0d:25:04:08:70:fa:60:0c:
         6a:83:11:33:0e:d7:ba:17:a7:f0:40:08:73:78:ef:6f:af:27:
         d9:20:b1:db:82:30:b7:4f:ce:d8:8f:a2:37:2d:17:ec:26:ab:
         51:9d:82:ee:b8:5b:e6:3d:a0:05:fc:16:77:ac:90:73:5b:fd:
         f0:d5:4a:90
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEc/8J0lIWpB1E37o5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGY2ZGQ3YmMtYjhhMy00MmMzLTk4YjEtZjQ0YWM5NDY2
ZjRjMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk
YTFjZjhlMTYtNmRiYS00MmUzLTlhNDAtMzM2YjhjYjhmMTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnKxTQTk65M3PcQ+kpjcWsebY3lz09uUgdrp
BguIBlB8elN7/r7SBCJ3VzJbf/5130dxF0rDlg+WyRXLnAjlcpRPxSmwjrLib8Id
V4+U2rAK05zbWz6AZHIcU//96Zv0d4vrHmJEkNE+BHjxvTr7unJEtjhM9jY5pH/y
ptcmXr4Z9P4hngPl3xBQND+81RSGgxNjxrgWv3ofZRInewZcv3PQE79yH3BJeNcF
tOUHpwuWjI7LsBB2QiPEF7/Dv5JvD7CJpln/OwaRxW23QUiDBAjgYV4kog0zoWNW
nPvXXbwaNS9SRYqEmcUAbWEEA+gzGUsLyyDxNMZSGItaKfRdUwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGRXWhE8DGKqD6Xnhpx6ttI1LD8dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZjZk
ZDdiYy1iOGEzLTQyYzMtOThiMS1mNDRhYzk0NjZmNGMvNzQ5ODU4OWUtNTdhOC0z
YTk1LTg2YWMtNzU1ZGNhNGQzMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGY2ZGQ3YmMtYjhhMy00MmMzLTk4
YjEtZjQ0YWM5NDY2ZjRjLzRmNmRkN2JjLWI4YTMtNDJjMy05OGIxLWY0NGFjOTQ2
NmY0Yy5jcmwwHwYDVR0jBBgwFoAUVMVrkvfZcszoBNZsOdbZAI2E+owwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80ZjZkZDdiYy1iOGEzLTQyYzMtOThiMS1mNDRh
Yzk0NjZmNGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9vwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAa9eQ38jFde/bn/ufRj1Rwe/Y4/qiyeTQut3QqAM5xk1v7ykPeayP
DlsJ/ZjHq5aDdmth2LqSFX26cE+GqxSvHEKd7FEsWNoTKf4ayRfnHzktOv9u/SIV
5pLj6CfQDvPyVFBbI9RgCtqmhoiXBIVO5xFqJP4ZpQaN50WvJFFRewWAetl8MrXp
rZeOnLep8FhKyXFWyGhi1dJQYz2s78HNXkgoQ9MiJEnDeJ7dSm2WeMMKL4e310o7
LAxudKGE0w0lBAhw+mAMaoMRMw7Xuhen8EAIc3jvb68n2SCx24Iwt0/O2I+iNy0X
7CarUZ2C7rhb5j2gBfwWd6yQc1v98NVKkA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:24 2024 by rpki-client on console-ams.rpki-client.org