Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/9077b9b6-73ff-3a38-935d-fccba507924f.roa
File:                     9077b9b6-73ff-3a38-935d-fccba507924f.roa (raw, json)
Hash identifier:          p9mVkkeO1pS7K6NFH8Dl8MOoN8EnHDWJ5M1Y3Xig+V4=
Subject key identifier:   69:0C:80:49:E8:80:9E:11:59:FB:F6:57:C6:21:A2:62:25:0D:4E:5F
Certificate issuer:       /CN=eccad7f1-567f-47db-a323-ab03604703b0
Certificate serial:       010D0C9F4328584742BB3A29236ED32B9C64F200
Authority key identifier: B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/9077b9b6-73ff-3a38-935d-fccba507924f.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     11281
IP address blocks:        2602:801:1000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:3a:29:23:6e:d3:2b:9c:64:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccad7f1-567f-47db-a323-ab03604703b0
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=0652b4de-eb55-437e-995f-e29bfdd78d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:8a:24:18:bc:1a:cf:1a:4c:cc:fd:ff:fa:
                    42:5e:61:fc:3d:15:57:f2:8f:ff:6d:1c:1c:20:f7:
                    3d:b7:6f:b3:ad:9f:b0:95:b9:44:e8:37:ea:49:7e:
                    e1:5d:75:58:64:02:25:f2:c6:e8:bd:67:97:47:b9:
                    32:0f:85:46:8c:a7:82:b2:06:8f:35:e4:8f:0c:7f:
                    5f:06:cb:da:76:5a:ff:d5:07:9c:d2:e9:43:fc:1d:
                    a0:b0:d1:cd:99:37:c4:3e:7c:7c:f5:26:53:15:ad:
                    4b:9e:69:db:70:52:52:7b:cb:b9:d4:b2:f8:3b:09:
                    10:f4:67:72:8e:bc:c2:f2:c4:b8:08:c1:25:02:47:
                    c3:69:f8:ab:79:5d:ed:ca:80:f9:33:47:78:20:f3:
                    a4:05:33:40:d5:d8:54:79:90:14:2e:67:eb:83:df:
                    af:a9:e9:a2:ae:16:74:69:52:d9:f0:87:00:e9:63:
                    24:17:d8:a8:a6:81:93:d2:48:6e:01:56:d8:57:13:
                    18:ed:49:f3:50:f2:e8:77:0c:a1:e3:68:fd:e5:17:
                    a3:89:ca:15:04:55:3d:69:77:73:d3:9d:94:0b:6a:
                    fc:76:85:cf:cc:49:f6:91:ac:56:f6:9d:0e:16:c8:
                    69:1c:73:d9:75:af:a2:8f:a9:15:5f:76:51:93:dd:
                    f5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0C:80:49:E8:80:9E:11:59:FB:F6:57:C6:21:A2:62:25:0D:4E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/9077b9b6-73ff-3a38-935d-fccba507924f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl

            X509v3 Authority Key Identifier:
                keyid:B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:801:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:4c:68:99:db:fe:cc:eb:89:fa:64:bb:fd:39:dd:ae:4b:78:
         e2:dc:38:1f:4e:29:bd:67:4a:86:dd:26:e6:c4:6c:61:42:fe:
         70:ab:7b:06:7b:81:dd:cc:67:03:2e:92:37:d4:7c:33:dc:40:
         46:75:16:57:ac:f6:c2:69:fe:22:15:c8:84:be:e3:2f:ca:b3:
         3e:4e:6e:37:ef:51:38:6c:0e:5d:7c:f8:f2:78:a6:4e:40:ef:
         88:6e:63:08:d1:fb:b6:43:a3:8b:ff:26:b8:cf:f3:19:0b:8f:
         7a:cd:0f:44:ed:35:68:49:42:2c:53:f0:bd:5b:b5:ae:9b:66:
         43:a6:1c:30:92:64:5e:c3:50:fe:2a:73:b2:12:70:6f:93:2f:
         25:1f:86:5d:4c:11:6c:80:8b:7e:2a:c2:a6:6c:a3:ac:93:ef:
         d7:da:d8:76:23:b0:bc:3e:be:cd:53:94:6c:bd:7a:30:e8:6c:
         75:4e:94:f4:50:33:77:46:04:d9:91:77:e1:1f:f2:9f:f8:52:
         85:f1:90:9e:aa:70:c4:4d:3d:ae:e3:fc:9e:5c:6e:9a:39:5d:
         68:17:b2:6b:52:7d:ea:cd:02:0e:7d:7d:df:36:d9:80:08:b6:
         95:3e:cf:aa:5a:4d:69:8d:c9:70:74:40:17:fe:97:d0:8f:a0:
         42:61:e5:3a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdCuzopI27TK5xk8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWNjYWQ3ZjEtNTY3Zi00N2RiLWEzMjMtYWIwMzYwNDcw
M2IwMB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk
MDY1MmI0ZGUtZWI1NS00MzdlLTk5NWYtZTI5YmZkZDc4ZDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXSKJBi8Gs8aTMz9//pCXmH8PRVX8o//bRwc
IPc9t2+zrZ+wlblE6DfqSX7hXXVYZAIl8sbovWeXR7kyD4VGjKeCsgaPNeSPDH9f
Bsvadlr/1Qec0ulD/B2gsNHNmTfEPnx89SZTFa1LnmnbcFJSe8u51LL4OwkQ9Gdy
jrzC8sS4CMElAkfDafireV3tyoD5M0d4IPOkBTNA1dhUeZAULmfrg9+vqemirhZ0
aVLZ8IcA6WMkF9iopoGT0khuAVbYVxMY7UnzUPLodwyh42j95RejicoVBFU9aXdz
052UC2r8doXPzEn2kaxW9p0OFshpHHPZda+ij6kVX3ZRk931ywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGkMgEnogJ4RWfv2V8YhomIlDU5fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lY2Nh
ZDdmMS01NjdmLTQ3ZGItYTMyMy1hYjAzNjA0NzAzYjAvOTA3N2I5YjYtNzNmZi0z
YTM4LTkzNWQtZmNjYmE1MDc5MjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWNjYWQ3ZjEtNTY3Zi00N2RiLWEz
MjMtYWIwMzYwNDcwM2IwL2VjY2FkN2YxLTU2N2YtNDdkYi1hMzIzLWFiMDM2MDQ3
MDNiMC5jcmwwHwYDVR0jBBgwFoAUshtvSE8YJhS1lOHKz2GJuPOJc6wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lY2NhZDdmMS01NjdmLTQ3ZGItYTMyMy1hYjAz
NjA0NzAzYjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIARAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFVMaJnb/szrifpku/053a5LeOLcOB9OKb1nSobdJubEbGFC/nCr
ewZ7gd3MZwMukjfUfDPcQEZ1Fles9sJp/iIVyIS+4y/Ksz5ObjfvUThsDl18+PJ4
pk5A74huYwjR+7ZDo4v/JrjP8xkLj3rND0TtNWhJQixT8L1bta6bZkOmHDCSZF7D
UP4qc7IScG+TLyUfhl1MEWyAi34qwqZso6yT79fa2HYjsLw+vs1TlGy9ejDobHVO
lPRQM3dGBNmRd+Ef8p/4UoXxkJ6qcMRNPa7j/J5cbpo5XWgXsmtSferNAg59fd82
2YAItpU+z6paTWmNyXB0QBf+l9CPoEJh5To=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:55 2024 by rpki-client on console-fra.rpki-client.org