Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/7711a2d7-6eb5-3b2a-9244-eb8270cbde55.roa
File:                     7711a2d7-6eb5-3b2a-9244-eb8270cbde55.roa (raw, json)
Hash identifier:          3+KQgnfMaPrP97VAT9aXfYQnLV4Xj3/u7JaEDhvU6aI=
Subject key identifier:   19:17:12:13:AF:E5:C2:23:AC:02:EB:02:C7:72:A2:AC:47:1B:D0:8A
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F432858460FA40D4E4F5D381865077C80
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/7711a2d7-6eb5-3b2a-9244-eb8270cbde55.roa
Signing time:             Sat 01 Jun 2024 01:00:28 +0000
ROA not before:           Sat 01 Jun 2024 01:00:28 +0000
ROA not after:            Fri 30 Aug 2024 01:00:28 +0000
asID:                     19651
IP address blocks:        2602:f9ec:ca::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0f:a4:0d:4e:4f:5d:38:18:65:07:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Jun  1 01:00:28 2024 GMT
            Not After : Aug 30 01:00:28 2024 GMT
        Subject: CN=2bfd4ec1-8ea4-4819-a47e-720ca97ff51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4b:b9:a9:d4:f9:dc:73:79:df:1a:b6:7e:39:
                    3d:b4:50:e7:c2:5b:83:68:a4:1e:a2:60:ea:83:53:
                    8a:6e:3a:10:1d:6a:2e:ce:58:24:2b:f6:79:53:2a:
                    9b:94:b5:ee:c3:21:d4:5e:47:fe:75:28:0a:b1:36:
                    de:4d:14:a7:2c:fe:ae:a4:ef:01:ad:30:41:41:36:
                    36:42:79:ae:5d:ce:c3:17:8a:64:89:38:18:06:2f:
                    77:b8:e3:97:4d:b0:b6:a4:92:d0:e4:a4:1c:d7:ea:
                    49:5f:ed:3e:95:30:1a:36:2a:f0:c1:f1:78:3c:66:
                    ac:32:5d:52:2a:c4:50:10:5b:87:eb:dc:c3:9f:55:
                    56:73:38:70:c0:ab:0b:dd:92:4a:f5:70:64:f6:f2:
                    53:e9:cb:54:ba:18:66:70:e4:8c:8b:0c:fc:ad:7e:
                    e5:2d:5a:18:c5:56:10:a9:58:eb:5a:b6:3b:85:83:
                    76:9c:7c:65:13:0c:ba:6d:18:61:3b:f4:95:f9:12:
                    4c:2b:cd:3b:8d:51:4d:e6:51:0f:52:3a:45:f2:db:
                    e1:cc:31:f0:13:83:07:db:17:91:59:32:d6:58:83:
                    d3:96:91:a9:c5:d4:a0:3f:d7:32:cb:b0:d1:2e:7b:
                    55:53:52:f2:95:0f:84:1f:c3:c3:2a:da:cb:e3:b8:
                    21:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:17:12:13:AF:E5:C2:23:AC:02:EB:02:C7:72:A2:AC:47:1B:D0:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/7711a2d7-6eb5-3b2a-9244-eb8270cbde55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:ca::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:dd:ea:5e:f3:53:07:66:b0:c1:47:32:77:c2:54:15:fa:30:
         9f:95:f8:8c:f7:aa:ce:93:cb:55:f8:e5:a9:1a:75:a3:0d:ef:
         02:c5:84:e5:4a:09:9e:e8:69:8a:0e:3f:5b:c5:bd:81:6a:fb:
         cb:b9:6d:ac:a2:1b:f7:1d:50:5d:9e:97:04:81:87:77:6e:c2:
         a8:7f:c4:2d:27:da:a8:3a:45:8d:a6:38:bb:e8:9c:e1:e4:1d:
         71:2e:eb:a3:ca:b1:c0:77:95:75:c6:f5:1d:59:b5:55:80:b4:
         74:85:e7:51:f5:44:94:fb:0f:b6:0a:02:f4:24:7f:20:4f:e3:
         eb:2c:c2:42:14:f5:bf:b4:8c:f2:e2:73:b1:09:62:8e:ad:93:
         ad:f6:01:81:6f:ac:fe:8b:ce:6f:53:8b:4b:f6:4b:b9:09:bf:
         07:49:77:90:bf:7a:70:05:b0:ac:e2:0b:5d:2c:12:bc:1e:76:
         d9:f4:18:ad:d0:42:da:f0:5f:b7:98:54:60:b2:d4:d6:01:ea:
         10:7e:7b:91:47:df:19:47:93:77:82:2a:d1:e9:5a:f1:a0:fe:
         8a:d0:9f:0a:f2:8c:d0:59:bc:91:9a:83:44:21:d0:6f:1c:16:
         47:58:da:a5:82:e7:dc:4a:07:9a:dd:d1:83:e1:9e:e6:48:89:
         d1:92:cc:25
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYPpA1OT104GGUHfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA3NTYxZmUtNGIwNC00MTdhLWI0MjMtMzQ5YjhiNGIw
NDdkMB4XDTI0MDYwMTAxMDAyOFoXDTI0MDgzMDAxMDAyOFowLzEtMCsGA1UEAxMk
MmJmZDRlYzEtOGVhNC00ODE5LWE0N2UtNzIwY2E5N2ZmNTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUu5qdT53HN53xq2fjk9tFDnwluDaKQeomDq
g1OKbjoQHWouzlgkK/Z5UyqblLXuwyHUXkf+dSgKsTbeTRSnLP6upO8BrTBBQTY2
QnmuXc7DF4pkiTgYBi93uOOXTbC2pJLQ5KQc1+pJX+0+lTAaNirwwfF4PGasMl1S
KsRQEFuH69zDn1VWczhwwKsL3ZJK9XBk9vJT6ctUuhhmcOSMiwz8rX7lLVoYxVYQ
qVjrWrY7hYN2nHxlEwy6bRhhO/SV+RJMK807jVFN5lEPUjpF8tvhzDHwE4MH2xeR
WTLWWIPTlpGpxdSgP9cyy7DRLntVU1LylQ+EH8PDKtrL47ghIQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBkXEhOv5cIjrALrAsdyoqxHG9CKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1
NjFmZS00YjA0LTQxN2EtYjQyMy0zNDliOGI0YjA0N2QvNzcxMWEyZDctNmViNS0z
YjJhLTkyNDQtZWI4MjcwY2JkZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDA3NTYxZmUtNGIwNC00MTdhLWI0
MjMtMzQ5YjhiNGIwNDdkLzAwNzU2MWZlLTRiMDQtNDE3YS1iNDIzLTM0OWI4YjRi
MDQ3ZC5jcmwwHwYDVR0jBBgwFoAUam3UldcOa/DEVubcc/Wc40Ocg3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1NjFmZS00YjA0LTQxN2EtYjQyMy0zNDli
OGI0YjA0N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL57ADK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADnd6l7zUwdmsMFHMnfCVBX6MJ+V+Iz3qs6Ty1X45akadaMN7wLF
hOVKCZ7oaYoOP1vFvYFq+8u5bayiG/cdUF2elwSBh3duwqh/xC0n2qg6RY2mOLvo
nOHkHXEu66PKscB3lXXG9R1ZtVWAtHSF51H1RJT7D7YKAvQkfyBP4+sswkIU9b+0
jPLic7EJYo6tk632AYFvrP6Lzm9Ti0v2S7kJvwdJd5C/enAFsKziC10sErwedtn0
GK3QQtrwX7eYVGCy1NYB6hB+e5FH3xlHk3eCKtHpWvGg/orQnwryjNBZvJGag0Qh
0G8cFkdY2qWC59xKB5rd0YPhnuZIidGSzCU=
-----END CERTIFICATE-----
Generated at Sun Jun 23 15:04:09 2024 by rpki-client on console-fra.rpki-client.org