Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/d61f4303-b118-3610-b7c0-315c48fdeeb9.roa
File:                     d61f4303-b118-3610-b7c0-315c48fdeeb9.roa (raw, json)
Hash identifier:          TpIlb7TrfkR2dLM7XA9mnnzXfMhIa5erCZP1MIxlBZY=
Subject key identifier:   82:4F:38:49:C1:23:0C:B8:0C:3F:E5:48:64:7C:BB:7A:FB:B6:9E:7E
Certificate issuer:       /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Certificate serial:       010D0C9F43285847D999F8389C456D9A46555C00
Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/d61f4303-b118-3610-b7c0-315c48fdeeb9.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     399899
IP address blocks:        2602:fbb7:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:f8:38:9c:45:6d:9a:46:55:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=084bae44-e124-4cbc-8c20-ca06b89fd09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:a2:13:53:fa:f5:52:91:2a:5e:50:dd:e0:
                    aa:2a:47:34:4e:72:ab:92:09:60:43:56:01:c4:54:
                    a8:83:45:09:aa:64:4f:91:48:ff:59:9b:ae:28:f7:
                    6c:8e:06:25:26:8c:fe:c6:38:fb:95:91:93:db:33:
                    05:98:6b:94:2e:da:0e:1d:e5:91:b0:8a:99:0f:7b:
                    fc:d9:53:04:79:4b:77:00:67:45:5b:79:34:5b:13:
                    6f:27:bc:1c:e5:33:25:26:b6:f0:ae:c4:f0:98:28:
                    ea:72:50:83:25:37:e3:0e:30:17:87:b8:4a:de:3e:
                    b1:e2:a5:d9:ad:30:52:87:8f:d7:bd:8c:4a:c4:f3:
                    d5:26:20:db:7b:ac:6b:5c:a7:70:c8:4c:49:be:55:
                    56:9e:66:9a:54:47:e6:7e:33:ae:70:37:9d:cd:76:
                    96:3e:27:76:33:08:a2:3f:af:0b:73:d7:73:3c:09:
                    c4:fd:15:ac:c7:30:b5:41:13:6c:72:b5:da:a1:43:
                    b0:29:35:84:46:ad:c2:58:ac:9d:20:b2:d9:c6:de:
                    d8:2d:73:0e:9b:01:7c:3a:0e:53:80:75:86:92:e1:
                    a7:74:c0:03:5b:88:48:a1:4a:58:99:a4:fe:81:a4:
                    74:49:b8:34:62:69:6a:07:df:bf:48:99:bc:93:7d:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4F:38:49:C1:23:0C:B8:0C:3F:E5:48:64:7C:BB:7A:FB:B6:9E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/d61f4303-b118-3610-b7c0-315c48fdeeb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl

            X509v3 Authority Key Identifier:
                keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbb7:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:20:b6:02:e2:03:5b:48:f8:f3:14:0c:54:9e:c4:80:40:50:
         ab:9b:3a:35:fd:0a:01:f6:11:10:24:b8:9b:93:25:2d:ff:e5:
         89:5c:30:ad:3c:ea:29:59:88:b4:ba:5a:37:5a:76:fc:bf:75:
         34:57:6c:6c:8e:50:83:0e:55:9c:67:11:c4:1e:4c:6d:d8:a8:
         96:9b:18:a7:a0:07:01:9f:68:99:90:18:b9:e8:94:51:ba:ab:
         cf:98:78:98:15:27:7a:2a:72:e0:f2:3d:99:5f:1f:c5:e0:fc:
         b5:4c:a9:f8:10:6c:05:7d:e6:d6:14:3d:cb:3e:37:6e:a0:ee:
         6d:fa:55:8f:6f:6e:e7:e5:c3:d0:f2:5d:84:e3:e2:20:50:6a:
         89:ab:30:cc:3a:ab:32:ee:11:39:a2:d6:55:d9:20:a5:25:95:
         6d:bf:15:c8:6e:09:75:b7:bb:5c:88:ce:87:7c:2a:ac:58:10:
         12:a2:e5:08:1b:6a:28:20:8d:c4:25:3e:2c:43:cb:2a:e2:84:
         5f:ab:31:c1:8a:73:bd:44:18:28:1a:b9:d3:35:ef:1c:99:0d:
         ae:81:7f:7f:20:85:74:cb:71:48:31:ab:99:32:61:ab:9d:d7:
         fc:7d:17:62:fc:1f:38:3f:86:95:44:2e:8c:c3:5a:49:3a:5d:
         42:f6:b4:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfZmfg4nEVtmkZVXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM3Yzg1M2QtZjYxNC00MTdhLTg3ZDktZmVkOWNmOWI2
ZTRhMB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk
MDg0YmFlNDQtZTEyNC00Y2JjLThjMjAtY2EwNmI4OWZkMDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RKiE1P69VKRKl5Q3eCqKkc0TnKrkglgQ1YB
xFSog0UJqmRPkUj/WZuuKPdsjgYlJoz+xjj7lZGT2zMFmGuULtoOHeWRsIqZD3v8
2VMEeUt3AGdFW3k0WxNvJ7wc5TMlJrbwrsTwmCjqclCDJTfjDjAXh7hK3j6x4qXZ
rTBSh4/XvYxKxPPVJiDbe6xrXKdwyExJvlVWnmaaVEfmfjOucDedzXaWPid2Mwii
P68Lc9dzPAnE/RWsxzC1QRNscrXaoUOwKTWERq3CWKydILLZxt7YLXMOmwF8Og5T
gHWGkuGndMADW4hIoUpYmaT+gaR0Sbg0YmlqB9+/SJm8k33yxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIJPOEnBIwy4DD/lSGR8u3r7tp5+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzdj
ODUzZC1mNjE0LTQxN2EtODdkOS1mZWQ5Y2Y5YjZlNGEvZDYxZjQzMDMtYjExOC0z
NjEwLWI3YzAtMzE1YzQ4ZmRlZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjM3Yzg1M2QtZjYxNC00MTdhLTg3
ZDktZmVkOWNmOWI2ZTRhL2IzN2M4NTNkLWY2MTQtNDE3YS04N2Q5LWZlZDljZjli
NmU0YS5jcmwwHwYDVR0jBBgwFoAUPqf5ASNhrB95WSP0kVHBkLMAaaowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzdjODUzZC1mNjE0LTQxN2EtODdkOS1mZWQ5
Y2Y5YjZlNGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7twAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADMgtgLiA1tI+PMUDFSexIBAUKubOjX9CgH2ERAkuJuTJS3/5Ylc
MK086ilZiLS6Wjdadvy/dTRXbGyOUIMOVZxnEcQeTG3YqJabGKegBwGfaJmQGLno
lFG6q8+YeJgVJ3oqcuDyPZlfH8Xg/LVMqfgQbAV95tYUPcs+N26g7m36VY9vbufl
w9DyXYTj4iBQaomrMMw6qzLuETmi1lXZIKUllW2/FchuCXW3u1yIzod8KqxYEBKi
5QgbaiggjcQlPixDyyrihF+rMcGKc71EGCgaudM17xyZDa6Bf38ghXTLcUgxq5ky
Yaud1/x9F2L8Hzg/hpVELozDWkk6XUL2tAk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:51 2024 by rpki-client on console-fra.rpki-client.org