Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa
File:                     0f760c1b-2287-3417-81e0-e555031d9abd.roa (raw, json)
Hash identifier:          MAbf08SHN74EgtKHwhY4AAl6ct4/uLaV/lTQPeBN5BQ=
Subject key identifier:   3C:E7:57:77:14:5C:98:75:62:CB:8D:3C:81:14:3D:46:2C:8F:BE:1A
Certificate issuer:       /CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
Certificate serial:       010D0C9F432858457FDDD3F4E769819D339960B0
Authority key identifier: 17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     399209
IP address blocks:        2602:807:6003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d3:f4:e7:69:81:9d:33:99:60:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=8c3a019d-4db6-43e8-8d6e-ec77f6a2a354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:19:ca:82:5e:32:1c:e2:f6:8c:86:1b:d6:
                    eb:9a:43:5d:18:d3:a3:b3:7a:4b:08:1f:d7:08:b8:
                    69:20:b4:58:e1:fc:b6:a0:6d:15:27:af:72:32:51:
                    53:14:52:52:c5:e4:b3:98:c5:9f:93:20:82:1c:ae:
                    75:d5:ec:61:7f:5e:02:af:ac:b4:8e:3d:55:65:f9:
                    5c:82:35:3a:92:d2:a3:be:76:13:f9:bf:48:2f:d4:
                    d1:84:2e:6f:4a:37:57:71:18:57:52:df:17:29:d6:
                    c3:e0:31:45:8e:f2:ba:14:44:8f:fb:2d:aa:a1:e7:
                    11:7f:1c:86:ff:8c:6b:8e:ef:9b:1e:a5:bc:07:e4:
                    d1:f5:10:bd:c7:74:7d:f8:f7:27:ae:a9:bb:b3:a5:
                    61:49:67:24:b4:c8:fe:01:ff:17:cd:e1:a1:eb:99:
                    76:fd:94:97:99:f7:d8:78:11:e0:a9:de:b6:33:eb:
                    fb:5e:52:51:c0:97:e0:c2:f9:2d:33:57:f2:da:93:
                    18:e7:71:ea:18:71:df:1b:89:9b:e8:9e:cf:65:06:
                    e7:fd:9e:4f:a8:10:a8:48:2e:ad:8d:2d:93:2c:b7:
                    1c:cf:90:d9:0b:35:08:e2:fb:57:17:5b:30:da:8f:
                    27:c0:50:58:62:af:e4:18:d0:f2:59:c3:a8:8e:d9:
                    25:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E7:57:77:14:5C:98:75:62:CB:8D:3C:81:14:3D:46:2C:8F:BE:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl

            X509v3 Authority Key Identifier:
                keyid:17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:6003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:78:78:ea:51:61:aa:ae:d5:f7:c4:5f:8d:89:be:fb:6f:e5:
         f7:1b:a5:7c:26:c6:02:69:ef:dc:a5:fc:0a:25:45:6f:3f:73:
         39:4e:0e:ae:ce:cb:5b:0c:a6:c5:29:44:43:23:3c:f0:fb:9b:
         92:1a:93:d9:2f:be:e7:39:d6:6d:b4:7b:1a:26:3d:38:2a:4e:
         0c:4e:8e:5c:2b:97:e0:4b:64:fc:c5:e7:3c:5f:a2:34:c4:bc:
         31:0a:47:42:83:60:70:37:56:52:70:e7:a4:46:d3:73:fe:84:
         92:ef:4f:f4:9d:dc:2c:55:d1:a1:d8:21:02:76:95:01:ff:af:
         31:5f:72:88:df:dc:3e:a3:f0:6f:bf:82:06:a8:cd:de:7e:32:
         16:94:03:5a:59:7c:34:5a:9f:f8:03:fc:d8:b5:ca:26:ca:ee:
         00:47:b3:4c:59:c4:e1:71:b2:1d:1c:65:a5:54:57:96:36:0b:
         93:ad:ad:d3:3a:15:22:20:8a:a9:b3:1e:3a:b6:c1:2f:3f:07:
         f8:39:1e:47:f0:6c:8c:c9:cd:67:d6:b4:fa:43:42:2f:a7:08:
         a3:df:97:76:31:59:f2:99:2f:0a:0d:96:93:ba:16:01:e4:52:
         18:a1:9c:e9:0b:da:2b:d7:35:32:d8:a3:b7:ec:b7:e5:e4:9d:
         3e:b8:3c:42
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV/3dP052mBnTOZYLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmFjNTE2ZmItZTRkZi00OWMxLTgyYmMtZmVkMjM5OWQy
MWMyMB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk
OGMzYTAxOWQtNGRiNi00M2U4LThkNmUtZWM3N2Y2YTJhMzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkYZyoJeMhzi9oyGG9brmkNdGNOjs3pLCB/X
CLhpILRY4fy2oG0VJ69yMlFTFFJSxeSzmMWfkyCCHK511exhf14Cr6y0jj1VZflc
gjU6ktKjvnYT+b9IL9TRhC5vSjdXcRhXUt8XKdbD4DFFjvK6FESP+y2qoecRfxyG
/4xrju+bHqW8B+TR9RC9x3R9+Pcnrqm7s6VhSWcktMj+Af8XzeGh65l2/ZSXmffY
eBHgqd62M+v7XlJRwJfgwvktM1fy2pMY53HqGHHfG4mb6J7PZQbn/Z5PqBCoSC6t
jS2TLLccz5DZCzUI4vtXF1sw2o8nwFBYYq/kGNDyWcOojtkl8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDznV3cUXJh1YsuNPIEUPUYsj74aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YWM1
MTZmYi1lNGRmLTQ5YzEtODJiYy1mZWQyMzk5ZDIxYzIvMGY3NjBjMWItMjI4Ny0z
NDE3LTgxZTAtZTU1NTAzMWQ5YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmFjNTE2ZmItZTRkZi00OWMxLTgy
YmMtZmVkMjM5OWQyMWMyLzZhYzUxNmZiLWU0ZGYtNDljMS04MmJjLWZlZDIzOTlk
MjFjMi5jcmwwHwYDVR0jBBgwFoAUF4lBSoEsr3LH4ic/wFzMM8KRZyswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82YWM1MTZmYi1lNGRmLTQ5YzEtODJiYy1mZWQy
Mzk5ZDIxYzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIB2AD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGl4eOpRYaqu1ffEX42Jvvtv5fcbpXwmxgJp79yl/AolRW8/czlO
Dq7Oy1sMpsUpREMjPPD7m5Iak9kvvuc51m20exomPTgqTgxOjlwrl+BLZPzF5zxf
ojTEvDEKR0KDYHA3VlJw56RG03P+hJLvT/Sd3CxV0aHYIQJ2lQH/rzFfcojf3D6j
8G+/ggaozd5+MhaUA1pZfDRan/gD/Ni1yibK7gBHs0xZxOFxsh0cZaVUV5Y2C5Ot
rdM6FSIgiqmzHjq2wS8/B/g5HkfwbIzJzWfWtPpDQi+nCKPfl3YxWfKZLwoNlpO6
FgHkUhihnOkL2ivXNTLYo7fst+XknT64PEI=
-----END CERTIFICATE-----
Generated at Thu Apr 18 22:04:41 2024 by rpki-client on console-fra.rpki-client.org