Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/4dcb0f93-9824-30cb-b45f-51c078ec780e.roa
File:                     4dcb0f93-9824-30cb-b45f-51c078ec780e.roa (raw, json)
Hash identifier:          UV4brrb8JNlmFM3yKDrRqCFTG/UWy+kkkS+NI8RSet4=
Subject key identifier:   31:8C:35:EB:00:61:1C:54:FC:2B:13:79:AF:CB:23:AC:6C:48:6F:85
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584585732DD1B83A104ABB8EE420
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/4dcb0f93-9824-30cb-b45f-51c078ec780e.roa
Signing time:             Fri 12 Apr 2024 13:00:34 +0000
ROA not before:           Fri 12 Apr 2024 13:00:34 +0000
ROA not after:            Thu 11 Jul 2024 13:00:34 +0000
asID:                     32181
IP address blocks:        2602:fea7:e00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:73:2d:d1:b8:3a:10:4a:bb:8e:e4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Apr 12 13:00:34 2024 GMT
            Not After : Jul 11 13:00:34 2024 GMT
        Subject: CN=97a8351d-e520-4924-8810-2e851ff00dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:d2:0e:a1:bc:65:3f:4f:9c:cd:ed:f1:7d:
                    11:17:b5:2e:2b:0a:ce:cd:6a:ab:bf:4f:bc:ca:49:
                    04:a3:91:62:5f:37:4a:b1:0e:33:3a:49:0c:5b:ec:
                    cb:43:6e:95:d0:66:08:0a:31:ac:d2:5a:93:31:d3:
                    18:79:83:8c:c7:19:7e:a0:de:92:be:c0:b8:e1:cd:
                    2b:89:45:d6:13:6a:f1:ed:7d:26:08:08:bd:c8:96:
                    87:fb:e7:66:66:80:d1:cb:35:90:cf:d5:8c:52:3c:
                    27:03:a4:ef:1c:af:01:6a:8f:48:b6:67:1e:77:ef:
                    2c:42:2b:7c:67:18:ab:44:e0:5c:2c:02:50:df:aa:
                    90:f8:33:da:af:b6:da:d4:63:2b:43:10:72:3b:2b:
                    03:1d:21:72:ad:05:59:27:25:50:dd:29:1f:33:17:
                    a5:1c:bb:96:d3:d3:2b:40:dc:9b:ba:61:62:36:34:
                    48:c4:7c:b9:05:ab:95:1b:7b:8d:ae:ed:03:ee:5a:
                    31:29:5d:40:1f:b6:da:e7:bd:ac:62:8f:16:60:b9:
                    51:5f:1c:d9:aa:c2:05:e2:cf:de:f4:4e:dc:8e:28:
                    bb:db:23:35:da:b3:48:01:1d:71:d8:2b:85:6e:60:
                    02:e4:67:89:5b:be:95:2b:48:ec:54:71:75:9b:9b:
                    7d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8C:35:EB:00:61:1C:54:FC:2B:13:79:AF:CB:23:AC:6C:48:6F:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/4dcb0f93-9824-30cb-b45f-51c078ec780e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fea7:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:bd:3d:ea:b6:57:01:b9:fd:11:7d:1e:bf:4b:6b:65:b6:d0:
         81:b2:cd:91:ba:21:1e:50:b1:bc:cb:9f:b2:cd:48:ba:66:ed:
         3a:cc:f3:36:b6:b3:9b:03:f1:7b:72:cf:80:e6:1a:20:3c:7b:
         66:42:36:7f:2b:52:a7:32:0a:3e:d5:c7:ac:d9:bc:f5:5a:a2:
         dd:2c:4a:d5:9c:93:d2:1c:d1:35:05:b9:d6:ca:19:3b:75:24:
         25:83:b3:dd:1d:6d:48:0d:30:e8:77:ea:2d:73:6e:9f:39:73:
         11:11:96:50:be:72:1c:2b:ae:f0:31:6b:cb:3a:70:dc:0a:92:
         e4:e6:27:20:74:96:a9:a4:e7:98:74:af:91:0e:bb:af:b3:32:
         ad:7d:d2:4d:a0:65:fb:17:07:31:7d:7e:e1:36:d2:5d:9e:37:
         a4:85:60:14:da:e5:b7:2f:7b:99:b4:10:3c:0e:41:0f:e7:1e:
         d0:06:60:2a:17:5c:ae:f8:37:ce:8b:6f:ad:02:5a:88:a0:01:
         5c:8e:5b:1f:90:60:94:0e:52:f5:3f:e3:b1:d9:3e:f8:d5:38:
         51:57:32:cd:84:2a:94:a6:57:0d:52:4a:5b:aa:78:07:6e:81:
         f4:4e:a4:d1:c8:f3:11:d2:1d:57:8c:9d:95:f3:f7:a8:f0:ae:
         44:af:22:d3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEWFcy3RuDoQSruO5CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5YWM5ZjctZWY0Zi00ZjU2LWJlYzItMjFjOWEyYjI1
YzExMB4XDTI0MDQxMjEzMDAzNFoXDTI0MDcxMTEzMDAzNFowLzEtMCsGA1UEAxMk
OTdhODM1MWQtZTUyMC00OTI0LTg4MTAtMmU4NTFmZjAwZGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvirSDqG8ZT9PnM3t8X0RF7UuKwrOzWqrv0+8
ykkEo5FiXzdKsQ4zOkkMW+zLQ26V0GYICjGs0lqTMdMYeYOMxxl+oN6SvsC44c0r
iUXWE2rx7X0mCAi9yJaH++dmZoDRyzWQz9WMUjwnA6TvHK8Bao9Itmced+8sQit8
ZxirROBcLAJQ36qQ+DPar7ba1GMrQxByOysDHSFyrQVZJyVQ3SkfMxelHLuW09Mr
QNybumFiNjRIxHy5BauVG3uNru0D7loxKV1AH7ba572sYo8WYLlRXxzZqsIF4s/e
9E7cjii72yM12rNIAR1x2CuFbmAC5GeJW76VK0jsVHF1m5t9vQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDGMNesAYRxU/CsTea/LI6xsSG+FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDlh
YzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5YTJiMjVjMTEvNGRjYjBmOTMtOTgyNC0z
MGNiLWI0NWYtNTFjMDc4ZWM3ODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5YWM5ZjctZWY0Zi00ZjU2LWJl
YzItMjFjOWEyYjI1YzExLzZkOWFjOWY3LWVmNGYtNGY1Ni1iZWMyLTIxYzlhMmIy
NWMxMS5jcmwwHwYDVR0jBBgwFoAUHHn5hkuePscm3W7MmE2ro4PenJgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDlhYzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5
YTJiMjVjMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL+pw4w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEADr096rZXAbn9EX0ev0trZbbQgbLNkbohHlCxvMufss1IumbtOszz
NrazmwPxe3LPgOYaIDx7ZkI2fytSpzIKPtXHrNm89Vqi3SxK1ZyT0hzRNQW51soZ
O3UkJYOz3R1tSA0w6HfqLXNunzlzERGWUL5yHCuu8DFryzpw3AqS5OYnIHSWqaTn
mHSvkQ67r7MyrX3STaBl+xcHMX1+4TbSXZ43pIVgFNrlty97mbQQPA5BD+ce0AZg
Khdcrvg3zotvrQJaiKABXI5bH5BglA5S9T/jsdk++NU4UVcyzYQqlKZXDVJKW6p4
B26B9E6k0cjzEdIdV4ydlfP3qPCuRK8i0w==
-----END CERTIFICATE-----
Generated at Sun May 5 02:26:29 2024 by rpki-client on console-ams.rpki-client.org