Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/8fe57f4d-d5c9-3a15-8267-887fa616eb55.roa
File:                     8fe57f4d-d5c9-3a15-8267-887fa616eb55.roa (raw, json)
Hash identifier:          d0QQRwbNBl84AOtUTGprXFrUiz6TKZezfDbTsZrFV8g=
Subject key identifier:   85:B5:11:FB:AA:AC:B1:FC:33:F4:29:D2:0E:11:40:D2:91:D6:F1:99
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F432858471FD5DD2C391B428148746000
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/8fe57f4d-d5c9-3a15-8267-887fa616eb55.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     39618
IP address blocks:        2602:fd92:c90::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:dd:2c:39:1b:42:81:48:74:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=4254a7d8-61db-498e-9cdd-5903d3fd3e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:72:e7:be:fa:6b:d0:f4:d3:ef:8d:14:03:
                    04:0d:0c:28:1b:2d:bc:98:b7:ec:fe:b3:e2:00:80:
                    80:17:5e:e5:87:9a:70:f6:88:10:d8:21:e9:1a:38:
                    24:68:69:99:e0:3f:67:a1:f4:8b:7c:a4:9b:08:33:
                    82:8e:a7:40:db:99:7a:a2:d1:ca:b5:e7:06:18:78:
                    ff:fe:c9:92:c0:9c:0f:14:34:a1:5f:38:ae:d5:80:
                    e2:12:e2:a1:cd:9b:ce:8b:f3:b0:c2:d6:bd:99:55:
                    a5:db:1b:48:4a:71:62:30:4a:44:e5:85:39:e6:74:
                    17:c7:c7:a7:67:33:81:8a:b3:40:32:e7:96:bc:13:
                    73:2f:09:3d:90:31:bc:8a:35:75:ef:b6:de:0c:bf:
                    69:25:0a:83:3a:6c:f6:41:64:19:d9:2d:d2:75:3b:
                    1f:03:67:a5:a2:64:51:fb:a1:54:0f:51:a8:44:64:
                    75:f7:fa:22:4f:bf:37:5c:c3:4c:19:03:d0:cc:b1:
                    1e:75:1c:53:cb:51:dd:d1:12:d5:81:71:e1:fd:1d:
                    55:d7:42:49:52:db:95:07:5a:07:70:6c:28:bd:9a:
                    79:e2:3f:f2:f9:68:26:2a:45:c7:b7:3f:72:b7:7d:
                    f0:45:48:b9:99:6d:96:9b:0b:ee:3f:88:52:05:40:
                    9b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B5:11:FB:AA:AC:B1:FC:33:F4:29:D2:0E:11:40:D2:91:D6:F1:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/8fe57f4d-d5c9-3a15-8267-887fa616eb55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:c90::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7f:55:83:59:2f:39:12:c7:67:17:b1:08:85:24:67:31:fc:
         bf:ab:5d:2d:af:15:14:5b:8c:97:44:b2:28:24:6f:83:ff:e0:
         01:e7:64:16:50:63:3a:a1:25:1a:88:d1:2f:ca:44:00:2d:4b:
         7c:ce:d5:ee:42:00:e0:76:8f:39:0b:ed:be:6f:49:52:79:88:
         9a:6c:8b:37:1f:36:55:7e:c9:2c:a8:33:a4:a3:6a:20:b7:49:
         5a:bd:6b:78:09:c3:16:af:b9:bb:a2:84:92:97:90:00:20:e7:
         3a:34:2f:b4:b4:b9:2e:bc:b3:2f:72:0d:c2:88:76:f9:27:ed:
         bd:6d:13:e1:90:9f:80:28:f8:64:04:d1:cb:ca:38:c6:05:d3:
         92:1a:03:93:a8:4d:cd:1f:02:93:70:1c:01:cf:9e:a6:c9:03:
         d9:57:15:87:c5:24:43:4a:ab:ec:f7:7d:52:e7:ee:bd:2f:31:
         e7:ba:56:e8:b3:02:fb:85:44:82:57:38:15:2a:74:30:06:17:
         43:42:79:3d:23:77:05:70:f1:1e:37:17:9f:3a:64:91:ac:cb:
         f4:da:3e:37:dc:43:78:78:19:b4:f1:0f:2e:8b:c2:3b:4e:b0:
         86:b3:d3:b2:0a:50:bf:48:d6:77:2e:20:8e:d1:13:48:46:75:
         09:08:2d:e0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcf1d0sORtCgUh0YAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MmE3MzMtMGUxMy00MDEyLTgyOTQtZmNlNjU1ZTRh
NDFhMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
NDI1NGE3ZDgtNjFkYi00OThlLTljZGQtNTkwM2QzZmQzZTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokhy5776a9D00++NFAMEDQwoGy28mLfs/rPi
AICAF17lh5pw9ogQ2CHpGjgkaGmZ4D9nofSLfKSbCDOCjqdA25l6otHKtecGGHj/
/smSwJwPFDShXziu1YDiEuKhzZvOi/Owwta9mVWl2xtISnFiMEpE5YU55nQXx8en
ZzOBirNAMueWvBNzLwk9kDG8ijV177beDL9pJQqDOmz2QWQZ2S3SdTsfA2elomRR
+6FUD1GoRGR19/oiT783XMNMGQPQzLEedRxTy1Hd0RLVgXHh/R1V10JJUtuVB1oH
cGwovZp54j/y+WgmKkXHtz9yt33wRUi5mW2WmwvuP4hSBUCbpwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIW1EfuqrLH8M/Qp0g4RQNKR1vGZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYy
YTczMy0wZTEzLTQwMTItODI5NC1mY2U2NTVlNGE0MWEvOGZlNTdmNGQtZDVjOS0z
YTE1LTgyNjctODg3ZmE2MTZlYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2MmE3MzMtMGUxMy00MDEyLTgy
OTQtZmNlNjU1ZTRhNDFhL2RkNjJhNzMzLTBlMTMtNDAxMi04Mjk0LWZjZTY1NWU0
YTQxYS5jcmwwHwYDVR0jBBgwFoAUkRNYtHaun6GwfpONvDcsq5c9dt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYyYTczMy0wZTEzLTQwMTItODI5NC1mY2U2
NTVlNGE0MWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL9kgyQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADp/VYNZLzkSx2cXsQiFJGcx/L+rXS2vFRRbjJdEsigkb4P/4AHn
ZBZQYzqhJRqI0S/KRAAtS3zO1e5CAOB2jzkL7b5vSVJ5iJpsizcfNlV+ySyoM6Sj
aiC3SVq9a3gJwxavubuihJKXkAAg5zo0L7S0uS68sy9yDcKIdvkn7b1tE+GQn4Ao
+GQE0cvKOMYF05IaA5OoTc0fApNwHAHPnqbJA9lXFYfFJENKq+z3fVLn7r0vMee6
VuizAvuFRIJXOBUqdDAGF0NCeT0jdwVw8R43F586ZJGsy/TaPjfcQ3h4GbTxDy6L
wjtOsIaz07IKUL9I1ncuII7RE0hGdQkILeA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:07 2024 by rpki-client on console-ams.rpki-client.org