Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/89541c3b-c5aa-36f1-bb60-8d16d9e27e86.roa
File:                     89541c3b-c5aa-36f1-bb60-8d16d9e27e86.roa (raw, json)
Hash identifier:          NsqHXXTIS4jwSJq9inTOPR52+fV2dBmYpJ9wNawLSxA=
Subject key identifier:   EB:C0:7C:01:E0:73:B6:59:88:B0:25:B3:E2:AB:FD:7F:42:5C:39:CD
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F432858455A2D7CB384B305DAB43A5A80
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/89541c3b-c5aa-36f1-bb60-8d16d9e27e86.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     19651
IP address blocks:        2602:f9ec:cc::/48 maxlen: 48
                          2602:f9ec:cd::/48 maxlen: 48
                          2602:f9ec:cb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:7c:b3:84:b3:05:da:b4:3a:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=f9710548-b6db-4705-afd0-7bf97f9d33cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:2f:27:7e:8d:9c:c0:93:4d:ba:0a:20:8a:
                    e2:84:95:be:42:d0:fd:a2:b9:58:12:3d:a7:6e:dc:
                    9c:49:1a:cc:8f:80:16:16:5b:eb:39:e9:83:6a:e3:
                    c3:31:1b:c6:f4:5c:a0:8f:bb:9a:40:3f:b5:05:b0:
                    83:e1:ab:3f:4f:d9:31:14:e4:63:20:19:48:95:52:
                    81:74:31:5e:54:b0:19:ff:a1:30:06:42:1d:e8:68:
                    60:ce:1d:49:31:d5:e5:8c:35:29:25:6d:3e:a4:99:
                    aa:e0:12:59:55:0f:3b:8f:9f:c3:f7:8c:74:8a:5b:
                    ac:94:03:b6:b6:dc:81:fc:a3:17:28:bf:06:ab:9e:
                    af:7b:d3:6b:38:5c:6a:5c:22:67:66:20:ce:4c:7e:
                    7a:0a:3c:c7:5b:55:40:f0:28:7c:45:e7:15:78:9d:
                    74:05:c9:1c:90:ee:f3:87:69:5b:21:6a:b9:bf:2c:
                    3e:19:ae:e7:eb:e6:e2:e6:f1:ad:99:26:3b:f3:d4:
                    65:4a:78:56:d8:74:7d:d3:0b:38:29:f7:e9:10:af:
                    f7:14:4c:1b:66:cb:72:fb:9e:a6:e2:45:af:a1:59:
                    7e:70:f2:2b:e5:cb:65:bd:57:2f:f4:85:43:c7:6b:
                    72:2b:d8:3b:37:ff:56:3f:ed:01:0a:3b:81:07:bf:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C0:7C:01:E0:73:B6:59:88:B0:25:B3:E2:AB:FD:7F:42:5C:39:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/89541c3b-c5aa-36f1-bb60-8d16d9e27e86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:cb::-2602:f9ec:cd:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:43:ab:5c:e3:e8:f6:a7:e4:bd:f8:57:b4:bc:80:e0:0d:62:
         ce:0a:95:32:97:db:0e:d2:41:1c:c5:65:74:ec:5c:c2:8d:99:
         c6:95:b1:af:12:ea:10:59:73:8d:6f:f4:28:19:56:e1:15:8d:
         21:3d:3e:44:c7:28:4f:34:97:4e:4a:ab:27:49:d0:8d:a6:07:
         30:95:8e:60:79:22:72:f4:b5:af:49:b5:c5:5d:88:92:ca:cd:
         9c:9a:4d:f1:74:98:d8:3c:38:07:79:70:ce:7b:03:9a:06:c3:
         2d:fb:24:f1:99:6e:38:d3:df:e0:bb:42:aa:a1:20:ae:92:7c:
         33:ce:f1:19:5c:e5:e5:b9:b8:70:69:b6:5d:16:f5:e3:b7:34:
         88:ab:d9:ef:1e:92:25:1a:20:db:18:48:10:9f:60:8b:84:64:
         d4:49:b7:a9:17:52:f7:59:d3:d6:28:98:de:18:19:2b:ac:02:
         11:aa:62:3a:8c:d6:b2:72:1e:8e:33:e1:b4:ea:36:69:b3:cf:
         49:dc:9f:dc:2e:e9:5a:df:ae:d0:d1:f9:de:48:7a:44:fd:a1:
         7f:81:48:4e:81:25:ad:61:e7:48:56:e8:83:72:0d:43:13:c0:
         e0:a8:cc:2c:be:0b:53:60:98:fd:24:1b:d1:2e:62:de:95:62:
         32:e6:4e:5a
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEVaLXyzhLMF2rQ6WoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA3NTYxZmUtNGIwNC00MTdhLWI0MjMtMzQ5YjhiNGIw
NDdkMB4XDTI0MDMyODAxMDAyN1oXDTI0MDYyNjAxMDAyN1owLzEtMCsGA1UEAxMk
Zjk3MTA1NDgtYjZkYi00NzA1LWFmZDAtN2JmOTdmOWQzM2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjcvJ36NnMCTTboKIIrihJW+QtD9orlYEj2n
btycSRrMj4AWFlvrOemDauPDMRvG9Fygj7uaQD+1BbCD4as/T9kxFORjIBlIlVKB
dDFeVLAZ/6EwBkId6Ghgzh1JMdXljDUpJW0+pJmq4BJZVQ87j5/D94x0iluslAO2
ttyB/KMXKL8Gq56ve9NrOFxqXCJnZiDOTH56CjzHW1VA8Ch8RecVeJ10BckckO7z
h2lbIWq5vyw+Ga7n6+bi5vGtmSY789RlSnhW2HR90ws4KffpEK/3FEwbZsty+56m
4kWvoVl+cPIr5ctlvVcv9IVDx2tyK9g7N/9WP+0BCjuBB7/YFQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFOvAfAHgc7ZZiLAls+Kr/X9CXDnNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1
NjFmZS00YjA0LTQxN2EtYjQyMy0zNDliOGI0YjA0N2QvODk1NDFjM2ItYzVhYS0z
NmYxLWJiNjAtOGQxNmQ5ZTI3ZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDA3NTYxZmUtNGIwNC00MTdhLWI0
MjMtMzQ5YjhiNGIwNDdkLzAwNzU2MWZlLTRiMDQtNDE3YS1iNDIzLTM0OWI4YjRi
MDQ3ZC5jcmwwHwYDVR0jBBgwFoAUam3UldcOa/DEVubcc/Wc40Ocg3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1NjFmZS00YjA0LTQxN2EtYjQyMy0zNDli
OGI0YjA0N2QuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmAvns
AMsDBwEmAvnsAMwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEATEOrXOPo9qfkvfhXtLyA4A1izgqVMpfbDtJB
HMVldOxcwo2ZxpWxrxLqEFlzjW/0KBlW4RWNIT0+RMcoTzSXTkqrJ0nQjaYHMJWO
YHkicvS1r0m1xV2IksrNnJpN8XSY2Dw4B3lwznsDmgbDLfsk8ZluONPf4LtCqqEg
rpJ8M87xGVzl5bm4cGm2XRb147c0iKvZ7x6SJRog2xhIEJ9gi4Rk1Em3qRdS91nT
1iiY3hgZK6wCEapiOozWsnIejjPhtOo2abPPSdyf3C7pWt+u0NH53kh6RP2hf4FI
ToElrWHnSFbog3INQxPA4KjMLL4LU2CY/SQb0S5i3pViMuZOWg==
-----END CERTIFICATE-----
Generated at Tue Jun 4 17:52:55 2024 by rpki-client on console-ams.rpki-client.org