Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/64d4ad3d-addc-36f0-b7f8-db2e430fa19d.roa
File:                     64d4ad3d-addc-36f0-b7f8-db2e430fa19d.roa (raw, json)
Hash identifier:          j3wdway42NR242Z/Ithl2VPUZDbEBaCum0mapyY7IeI=
Subject key identifier:   A6:49:25:47:6D:B4:80:E8:7F:8A:32:F7:41:23:A5:09:05:71:C4:34
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F432858473D26027FCAE88B4D824EC940
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/64d4ad3d-addc-36f0-b7f8-db2e430fa19d.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     10753
IP address blocks:        2602:fea7:d00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:02:7f:ca:e8:8b:4d:82:4e:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=a1e4503d-9688-418a-9ede-0d58ba48ebf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4a:b4:93:f3:c6:c6:fe:d8:e2:3f:b6:4e:f8:
                    fa:e2:35:1f:a9:01:1a:39:de:92:80:86:68:10:0b:
                    ba:dc:a0:8f:18:9e:56:8d:51:d2:e7:9c:8e:a4:29:
                    97:37:07:66:88:c1:09:e8:4f:dd:54:02:17:91:dd:
                    70:65:07:2d:84:e8:ff:40:3b:ac:01:a6:9d:cd:b3:
                    6c:58:9c:df:4a:2b:3f:28:3c:b7:e0:b3:57:27:0a:
                    65:2b:c3:5e:ce:e1:5c:41:d7:0d:7d:6d:5f:7a:01:
                    9b:2d:c8:9b:f1:01:5b:45:ad:02:cf:3f:e5:1b:8c:
                    ea:25:7d:57:5c:20:67:1c:0d:58:83:db:78:13:94:
                    f8:2d:55:63:27:13:23:b6:75:4f:a3:03:c5:08:24:
                    be:01:52:ce:26:e1:31:94:28:96:bd:f5:61:25:76:
                    54:b4:3e:88:b2:65:6a:b1:fa:6e:7e:ae:d4:f3:b9:
                    11:05:7b:41:6d:26:d9:7c:63:bb:35:35:2a:51:13:
                    da:19:6c:74:7e:25:51:01:62:e1:5d:1d:e2:57:3e:
                    ea:a6:5a:94:32:1c:51:5c:a0:8a:b5:13:d7:3f:61:
                    3c:e7:77:29:f9:8c:9e:b4:78:2f:39:6a:bb:b5:1a:
                    d6:8d:fe:5c:55:cd:08:ca:9c:cf:fe:dd:dd:0a:2a:
                    ed:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:49:25:47:6D:B4:80:E8:7F:8A:32:F7:41:23:A5:09:05:71:C4:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/64d4ad3d-addc-36f0-b7f8-db2e430fa19d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fea7:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d7:4c:af:3d:6f:1b:8d:fe:6f:d2:8b:32:fd:c2:f2:ae:49:
         06:5e:40:5c:3b:de:c2:1c:97:f4:3f:9b:41:87:40:be:c4:6b:
         c0:6d:33:ed:6c:dc:94:72:c3:09:5b:98:04:87:77:23:9b:4c:
         6c:1d:2f:88:55:5f:0d:f2:9e:07:0b:c7:df:dd:2f:13:01:ff:
         80:f7:e5:c1:74:56:38:fd:fb:b5:4e:19:71:1e:10:98:09:ae:
         4f:4e:01:7a:09:13:f3:18:65:c0:de:6c:4f:0d:96:c3:0d:0f:
         24:4b:09:b3:7f:a0:ec:9c:e0:fb:08:c9:b1:1a:e9:f2:7c:74:
         5d:a6:2b:30:4a:ae:27:1f:6c:31:d4:4d:b3:ac:30:7a:32:86:
         5b:c1:e2:49:f8:12:89:d0:72:c6:bd:ac:bb:fd:ee:29:61:54:
         1d:d7:d2:e6:dc:b4:be:96:ff:80:8e:d3:9e:b4:76:e1:11:4d:
         18:59:23:9b:dc:20:0e:d1:72:6f:2f:3b:1d:0e:37:28:0a:b2:
         a7:51:28:ac:de:dc:ec:b8:3b:ba:6d:0a:21:d8:68:05:45:84:
         74:90:09:87:3f:b9:9f:96:2b:e8:ad:8a:59:75:dd:05:00:9a:
         12:eb:11:9e:13:ab:aa:f6:b8:c2:85:f2:d5:06:fa:05:9f:09:
         ba:a0:58:b9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEc9JgJ/yuiLTYJOyUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5YWM5ZjctZWY0Zi00ZjU2LWJlYzItMjFjOWEyYjI1
YzExMB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk
YTFlNDUwM2QtOTY4OC00MThhLTllZGUtMGQ1OGJhNDhlYmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUq0k/PGxv7Y4j+2Tvj64jUfqQEaOd6SgIZo
EAu63KCPGJ5WjVHS55yOpCmXNwdmiMEJ6E/dVAIXkd1wZQcthOj/QDusAaadzbNs
WJzfSis/KDy34LNXJwplK8NezuFcQdcNfW1fegGbLcib8QFbRa0Czz/lG4zqJX1X
XCBnHA1Yg9t4E5T4LVVjJxMjtnVPowPFCCS+AVLOJuExlCiWvfVhJXZUtD6IsmVq
sfpufq7U87kRBXtBbSbZfGO7NTUqURPaGWx0fiVRAWLhXR3iVz7qplqUMhxRXKCK
tRPXP2E853cp+YyetHgvOWq7tRrWjf5cVc0IypzP/t3dCirtYwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKZJJUdttIDof4oy90EjpQkFccQ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDlh
YzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5YTJiMjVjMTEvNjRkNGFkM2QtYWRkYy0z
NmYwLWI3ZjgtZGIyZTQzMGZhMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5YWM5ZjctZWY0Zi00ZjU2LWJl
YzItMjFjOWEyYjI1YzExLzZkOWFjOWY3LWVmNGYtNGY1Ni1iZWMyLTIxYzlhMmIy
NWMxMS5jcmwwHwYDVR0jBBgwFoAUHHn5hkuePscm3W7MmE2ro4PenJgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDlhYzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5
YTJiMjVjMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL+pw0w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATNdMrz1vG43+b9KLMv3C8q5JBl5AXDvewhyX9D+bQYdAvsRrwG0z
7WzclHLDCVuYBId3I5tMbB0viFVfDfKeBwvH390vEwH/gPflwXRWOP37tU4ZcR4Q
mAmuT04BegkT8xhlwN5sTw2Www0PJEsJs3+g7Jzg+wjJsRrp8nx0XaYrMEquJx9s
MdRNs6wwejKGW8HiSfgSidByxr2su/3uKWFUHdfS5ty0vpb/gI7TnrR24RFNGFkj
m9wgDtFyby87HQ43KAqyp1EorN7c7Lg7um0KIdhoBUWEdJAJhz+5n5Yr6K2KWXXd
BQCaEusRnhOrqva4woXy1Qb6BZ8JuqBYuQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:44 2024 by rpki-client on console-fra.rpki-client.org