Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/c9e79515-2e65-3b9a-a5cd-2a1d9dd05c28.roa
File:                     c9e79515-2e65-3b9a-a5cd-2a1d9dd05c28.roa (raw, json)
Hash identifier:          qPBq3HVPWdkG/GMVKxNWR7G+vf/p2oBaj1owMYTdBb0=
Subject key identifier:   F8:70:3A:4C:07:CE:50:89:62:10:FE:1D:AB:46:6B:CE:42:87:47:4C
Certificate issuer:       /CN=a683f70a-4d8a-489e-b03c-abca94cd7852
Certificate serial:       010D0C9F432858474B1B4E7E83B05AB1E0836EE0
Authority key identifier: B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/c9e79515-2e65-3b9a-a5cd-2a1d9dd05c28.roa
Signing time:             Sun 22 Sep 2024 01:00:32 +0000
ROA not before:           Sun 22 Sep 2024 01:00:32 +0000
ROA not after:            Sat 21 Dec 2024 02:00:32 +0000
asID:                     36369
IP address blocks:        2602:fe69:a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4b:1b:4e:7e:83:b0:5a:b1:e0:83:6e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a683f70a-4d8a-489e-b03c-abca94cd7852
        Validity
            Not Before: Sep 22 01:00:32 2024 GMT
            Not After : Dec 21 02:00:32 2024 GMT
        Subject: CN=a2c8211d-9487-44d1-9da7-559930fb65b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e7:68:51:04:d4:97:a2:1c:ff:c1:5c:58:c4:
                    2d:b7:53:e8:59:74:81:b8:e6:37:9b:1a:35:fe:96:
                    bc:fe:ab:86:9f:29:3e:18:81:e8:09:c2:0d:ec:78:
                    3d:14:29:b3:53:b8:ad:fb:d6:2a:7f:dc:2a:b6:6d:
                    11:c6:06:e5:8c:8d:8e:89:5e:c3:61:c1:e3:7f:67:
                    6c:95:84:05:81:24:f1:b5:2f:96:00:cf:84:d9:c1:
                    11:1c:94:88:f1:61:03:e7:69:cd:41:92:34:39:3b:
                    5f:e1:86:a7:51:13:b8:84:10:9e:d0:ff:78:98:4b:
                    6e:7e:50:02:17:89:55:f7:9a:c3:c8:6a:1d:d3:96:
                    e7:c2:79:6c:61:5e:38:ef:6e:d7:e6:52:3e:b4:99:
                    03:43:d0:2d:d4:a0:82:00:dc:8a:c3:77:8a:87:cf:
                    8f:7f:f3:3c:60:a6:60:49:05:99:84:45:8a:b5:1f:
                    61:27:b9:97:46:20:a6:fd:9b:fe:04:21:ea:da:4f:
                    48:12:df:55:8c:20:ce:56:50:2b:85:b4:44:9b:1b:
                    8e:90:81:36:1c:23:b9:f0:9b:25:d5:7c:d7:b0:d5:
                    38:13:7f:eb:0a:51:99:5a:9e:6b:ed:7a:50:3c:1e:
                    a5:ff:99:96:2c:7a:bc:15:8d:5c:f1:54:c8:b9:3c:
                    b3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:70:3A:4C:07:CE:50:89:62:10:FE:1D:AB:46:6B:CE:42:87:47:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/c9e79515-2e65-3b9a-a5cd-2a1d9dd05c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl

            X509v3 Authority Key Identifier:
                keyid:B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe69:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:8e:fb:65:b4:74:c4:8a:2c:6e:86:62:bc:13:0d:a2:4f:33:
         de:af:4c:40:70:bf:4f:d8:52:7b:99:0a:85:f6:bb:af:72:9f:
         a8:63:2f:82:ac:5c:0c:83:3b:5f:23:cd:dd:35:1c:ab:2b:e0:
         2e:34:ee:67:98:c8:c3:5c:24:1d:01:c6:6c:3c:bd:18:a1:5a:
         c4:41:34:35:9d:af:f2:00:ec:75:70:2e:d5:49:83:4f:d2:a8:
         bb:95:28:9a:d0:e7:40:dd:30:3e:e2:f0:66:eb:11:47:13:8e:
         f0:62:18:de:37:6a:36:94:e1:ce:be:2d:94:a8:54:d6:e8:13:
         a2:c1:ca:6f:75:d8:e4:dc:8b:53:6c:58:00:89:78:88:42:aa:
         80:a1:62:c2:8e:09:fd:75:b4:c0:8f:66:a9:72:16:63:e3:b7:
         9f:d3:cb:48:b6:0f:99:8e:d8:41:07:0e:f7:d9:12:86:74:9d:
         8c:6e:c3:80:7c:4e:b8:ba:bc:df:8b:87:f0:be:d6:bf:07:59:
         6f:e6:9b:07:8f:13:98:46:74:2d:b2:9c:dc:70:91:8c:90:38:
         f5:ff:53:e8:33:5f:43:36:35:5c:64:a8:a6:ef:ca:19:0e:9a:
         a7:e3:61:fc:e0:e0:4f:db:ea:88:9c:f4:e9:08:fa:68:9c:25:
         84:8f:8e:e3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEdLG05+g7BaseCDbuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTY4M2Y3MGEtNGQ4YS00ODllLWIwM2MtYWJjYTk0Y2Q3
ODUyMB4XDTI0MDkyMjAxMDAzMloXDTI0MTIyMTAyMDAzMlowLzEtMCsGA1UEAxMk
YTJjODIxMWQtOTQ4Ny00NGQxLTlkYTctNTU5OTMwZmI2NWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOdoUQTUl6Ic/8FcWMQtt1PoWXSBuOY3mxo1
/pa8/quGnyk+GIHoCcIN7Hg9FCmzU7it+9Yqf9wqtm0RxgbljI2OiV7DYcHjf2ds
lYQFgSTxtS+WAM+E2cERHJSI8WED52nNQZI0OTtf4YanURO4hBCe0P94mEtuflAC
F4lV95rDyGod05bnwnlsYV44727X5lI+tJkDQ9At1KCCANyKw3eKh8+Pf/M8YKZg
SQWZhEWKtR9hJ7mXRiCm/Zv+BCHq2k9IEt9VjCDOVlArhbREmxuOkIE2HCO58Jsl
1XzXsNU4E3/rClGZWp5r7XpQPB6l/5mWLHq8FY1c8VTIuTyztQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPhwOkwHzlCJYhD+HatGa85Ch0dMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjgz
ZjcwYS00ZDhhLTQ4OWUtYjAzYy1hYmNhOTRjZDc4NTIvYzllNzk1MTUtMmU2NS0z
YjlhLWE1Y2QtMmExZDlkZDA1YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTY4M2Y3MGEtNGQ4YS00ODllLWIw
M2MtYWJjYTk0Y2Q3ODUyL2E2ODNmNzBhLTRkOGEtNDg5ZS1iMDNjLWFiY2E5NGNk
Nzg1Mi5jcmwwHwYDVR0jBBgwFoAUuFkDntg3BBzZjRt1Jf/q8lgoSeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjgzZjcwYS00ZDhhLTQ4OWUtYjAzYy1hYmNh
OTRjZDc4NTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL+aQow
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAmo77ZbR0xIosboZivBMNok8z3q9MQHC/T9hSe5kKhfa7r3KfqGMv
gqxcDIM7XyPN3TUcqyvgLjTuZ5jIw1wkHQHGbDy9GKFaxEE0NZ2v8gDsdXAu1UmD
T9Kou5UomtDnQN0wPuLwZusRRxOO8GIY3jdqNpThzr4tlKhU1ugTosHKb3XY5NyL
U2xYAIl4iEKqgKFiwo4J/XW0wI9mqXIWY+O3n9PLSLYPmY7YQQcO99kShnSdjG7D
gHxOuLq834uH8L7WvwdZb+abB48TmEZ0LbKc3HCRjJA49f9T6DNfQzY1XGSopu/K
GQ6ap+Nh/ODgT9vqiJz06Qj6aJwlhI+O4w==
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:43 2024 by rpki-client on console-ams.rpki-client.org