Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa
File:                     3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa (raw, json)
Hash identifier:          qlWKdkTixMG4sHMBYLrUFoa2+/NaqkyC8dR0S2mKJIs=
Subject key identifier:   F2:6C:14:26:F6:5E:6A:8F:7B:F9:E7:FF:8D:6C:5B:EF:CD:F5:50:F0
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F43285845936896B454E7A85BBE9490A0
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     0
IP address blocks:        2607:fe80::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:96:b4:54:e7:a8:5b:be:94:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=349dd0e8-4dc1-4e1b-9c74-921faac9e8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:5a:4d:b8:b4:24:37:23:18:6a:eb:18:b2:
                    82:f9:0c:23:53:37:34:bd:5e:03:8a:28:e4:d6:b1:
                    a4:70:f7:db:5e:f3:e8:cc:c8:fc:ff:84:01:ae:f0:
                    a2:a7:8d:a6:2a:4a:05:02:90:b7:60:e2:bd:ac:35:
                    2f:27:4a:7d:ce:e7:99:80:60:0b:8a:6b:8e:b5:b4:
                    e4:24:96:66:bf:59:ce:f3:87:ed:e3:4e:63:db:04:
                    9e:9d:7b:e7:53:ef:b7:cc:1b:22:14:05:42:d5:42:
                    54:fb:54:8a:9a:c7:a2:3f:cb:06:ed:01:e8:16:3d:
                    a1:38:3a:18:b6:c3:d8:90:0c:85:81:a7:ac:86:a7:
                    fe:42:96:1c:36:50:a0:7a:ca:c9:ca:a5:cc:69:ac:
                    f4:3c:dd:b4:67:e2:0f:99:ea:be:7a:01:0b:b3:b9:
                    7a:f4:e8:dc:a1:c1:89:dc:93:5b:eb:63:e1:a6:73:
                    a8:51:d3:6e:c2:eb:d5:7b:09:aa:10:f7:a6:4d:b9:
                    2e:50:4c:8e:a9:ff:e0:cc:b2:99:b0:2b:cb:1b:26:
                    3e:39:29:48:29:8f:05:35:d2:5e:f6:5d:e0:81:91:
                    69:2b:04:8e:82:2e:40:cf:e4:b9:2c:57:e7:64:f8:
                    26:39:79:23:4c:9c:24:47:8c:56:9b:fb:45:df:4c:
                    4b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6C:14:26:F6:5E:6A:8F:7B:F9:E7:FF:8D:6C:5B:EF:CD:F5:50:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:68:2d:44:8e:6d:67:f0:d8:14:2c:01:e0:d3:96:0d:f3:c5:
         85:c1:75:7f:21:a4:ca:f7:6c:e2:87:8a:84:91:05:6a:76:44:
         de:ef:b7:9c:67:cd:5c:14:f8:80:6d:82:f6:78:47:22:02:9c:
         78:c2:8c:7f:2b:91:6a:93:bf:59:97:d0:08:d3:b9:74:3c:2d:
         80:c7:b4:d9:63:47:ab:03:db:ee:45:e3:4e:44:91:d5:16:37:
         0e:8b:a0:23:93:4a:fc:49:01:49:4c:d6:76:dc:18:f0:ea:d2:
         22:4c:2a:69:54:7a:da:1e:de:c2:dd:98:be:08:09:a6:9f:7e:
         d8:2f:f8:13:65:e2:35:79:42:84:30:1e:74:ae:6a:f3:a8:32:
         fe:b0:81:69:19:0d:7a:75:4d:4d:f4:74:d6:ac:94:96:b2:a1:
         a7:95:d3:bc:c7:c3:b9:43:76:31:51:cb:dc:5b:65:f5:62:3c:
         c7:98:df:14:77:50:80:a2:d7:82:a3:44:9d:ca:df:74:07:01:
         b0:59:a9:e9:1a:d8:1e:9b:2a:69:e0:8b:33:d7:ad:4e:dc:5d:
         1b:f3:93:9a:19:01:44:fe:84:f2:68:d5:82:be:27:70:85:09:
         b4:bc:4b:1d:4b:d9:22:da:fb:6a:f5:0e:c7:ae:aa:2e:fe:c4:
         e7:ae:61:6b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWTaJa0VOeoW76UkKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi
Mzk4MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk
MzQ5ZGQwZTgtNGRjMS00ZTFiLTljNzQtOTIxZmFhYzllOGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRRaTbi0JDcjGGrrGLKC+QwjUzc0vV4Diijk
1rGkcPfbXvPozMj8/4QBrvCip42mKkoFApC3YOK9rDUvJ0p9zueZgGALimuOtbTk
JJZmv1nO84ft405j2wSenXvnU++3zBsiFAVC1UJU+1SKmseiP8sG7QHoFj2hODoY
tsPYkAyFgaeshqf+QpYcNlCgesrJyqXMaaz0PN20Z+IPmeq+egELs7l69OjcocGJ
3JNb62PhpnOoUdNuwuvVewmqEPemTbkuUEyOqf/gzLKZsCvLGyY+OSlIKY8FNdJe
9l3ggZFpKwSOgi5Az+S5LFfnZPgmOXkjTJwkR4xWm/tF30xLoQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPJsFCb2XmqPe/nn/41sW+/N9VDwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz
MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvMzI5OGNjYjctM2U3Yi0z
NGE5LTk1OTgtMzNmZGJiY2Q2NTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl
MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz
YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw
NTdkM2IzOTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf+gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAZaC1Ejm1n8NgULAHg05YN88WFwXV/IaTK92zih4qEkQVqdkTe77ec
Z81cFPiAbYL2eEciApx4wox/K5Fqk79Zl9AI07l0PC2Ax7TZY0erA9vuReNORJHV
FjcOi6Ajk0r8SQFJTNZ23Bjw6tIiTCppVHraHt7C3Zi+CAmmn37YL/gTZeI1eUKE
MB50rmrzqDL+sIFpGQ16dU1N9HTWrJSWsqGnldO8x8O5Q3YxUcvcW2X1YjzHmN8U
d1CAoteCo0Sdyt90BwGwWanpGtgemypp4Isz161O3F0b85OaGQFE/oTyaNWCvidw
hQm0vEsdS9ki2vtq9Q7Hrqou/sTnrmFr
-----END CERTIFICATE-----
Generated at Wed Apr 24 02:10:12 2024 by rpki-client on console-ams.rpki-client.org