Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/2b7ff483-6330-3dfe-a36c-9b9cc9dc413f.roa
File:                     2b7ff483-6330-3dfe-a36c-9b9cc9dc413f.roa (raw, json)
Hash identifier:          otvhLM3bzV7nra1CwQZEab86+Z8iav2qMZXivQRLX5w=
Subject key identifier:   45:F3:3C:1C:61:52:04:C8:49:E3:31:A5:DA:BF:54:E2:21:A2:C7:A1
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F43285846FBC9526543AFB692E9CDBD00
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/2b7ff483-6330-3dfe-a36c-9b9cc9dc413f.roa
Signing time:             Sat 24 Aug 2024 15:06:33 +0000
ROA not before:           Sat 24 Aug 2024 15:06:33 +0000
ROA not after:            Fri 22 Nov 2024 16:06:33 +0000
asID:                     199203
IP address blocks:        2602:f9a9:400::/38 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fb:c9:52:65:43:af:b6:92:e9:cd:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Aug 24 15:06:33 2024 GMT
            Not After : Nov 22 16:06:33 2024 GMT
        Subject: CN=2eeff6ec-7ba2-4122-944c-841a1a9ab2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:48:47:d8:8e:f2:9e:38:46:71:b0:5f:b7:02:
                    59:6e:de:31:bf:03:e5:68:83:4c:7e:86:02:22:c1:
                    8c:ff:3b:83:13:12:03:78:92:f6:63:4c:fd:3c:f0:
                    4d:78:ef:7f:b9:bf:27:3e:ee:d5:f8:c1:23:71:17:
                    d2:75:d3:ef:0e:07:08:7f:a9:fa:88:79:59:2b:51:
                    03:33:de:f9:f8:54:82:77:c7:d0:f7:86:63:bb:e8:
                    0a:cf:49:c1:86:fc:31:3b:3f:2d:35:3b:22:86:f4:
                    4b:a1:9c:0f:44:a8:a4:e4:f4:ab:21:b4:21:af:95:
                    a5:18:39:b8:74:06:d4:b2:02:29:d5:6b:0a:10:2d:
                    a8:79:3b:35:a8:c0:a5:2f:fa:ea:bf:b8:3a:09:88:
                    d1:31:d8:c5:57:d7:19:73:f2:82:e7:09:7e:70:6d:
                    bd:cb:a9:c6:6f:e1:84:0b:9a:96:a5:63:95:07:ff:
                    15:93:b1:0e:9c:c2:c8:55:02:50:58:72:41:5d:30:
                    7f:13:19:4c:4e:de:5f:1a:ae:b5:0e:eb:c7:0d:4b:
                    4e:73:37:62:2d:d3:3f:d5:db:d6:b9:9b:4b:89:54:
                    1b:65:30:6a:1e:17:aa:00:f6:22:37:74:4d:7e:d5:
                    8c:7e:88:9f:20:29:d7:34:84:2f:de:2e:fb:f8:26:
                    d6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F3:3C:1C:61:52:04:C8:49:E3:31:A5:DA:BF:54:E2:21:A2:C7:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/2b7ff483-6330-3dfe-a36c-9b9cc9dc413f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:05:68:a9:09:27:a3:ca:bd:b2:3e:ad:87:7a:0f:8e:c9:
         40:d7:a2:18:ea:4a:1d:05:3e:49:fd:ef:5e:2e:82:9f:61:b8:
         cf:87:85:8b:77:e3:2e:db:36:c6:35:c8:32:48:b0:e0:ec:25:
         29:24:6a:8d:50:c1:9f:10:1a:94:83:ca:c7:1a:52:1c:37:93:
         48:00:9c:c9:74:a2:4c:f3:dd:d8:c9:07:13:02:7d:b5:79:b0:
         84:d1:5c:03:93:dd:da:82:fa:14:2c:56:fc:51:6c:b7:ac:55:
         45:cd:bd:a5:29:b4:73:2b:5a:c3:5b:a9:e6:a5:e8:2b:4b:61:
         b6:c9:37:08:6e:d6:33:dd:7d:16:38:89:50:4b:c1:af:44:d0:
         6a:0e:11:20:b6:21:d5:9d:52:3c:a0:fc:29:41:a1:66:66:6a:
         eb:89:64:59:af:60:5e:71:e0:f6:c5:52:ec:45:a6:39:b9:31:
         e7:d4:6d:ef:00:13:f3:96:b8:f5:3f:2f:00:26:1a:fb:f3:fe:
         f2:b4:c1:32:36:6a:f3:19:73:7a:32:e4:86:dd:8e:b8:73:fb:
         2a:be:c8:3b:af:96:aa:96:1c:6c:e0:62:08:f0:73:06:5b:ea:
         b0:33:56:d9:75:82:7d:51:f2:ab:8d:c9:4b:be:1f:06:f8:bc:
         92:aa:21:69
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEb7yVJlQ6+2kunNvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyMjc5ZDgtMmVkNS00NzQ1LTkyMzEtOWRiZDEwYmJi
MWEyMB4XDTI0MDgyNDE1MDYzM1oXDTI0MTEyMjE2MDYzM1owLzEtMCsGA1UEAxMk
MmVlZmY2ZWMtN2JhMi00MTIyLTk0NGMtODQxYTFhOWFiMmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEhH2I7ynjhGcbBftwJZbt4xvwPlaINMfoYC
IsGM/zuDExIDeJL2Y0z9PPBNeO9/ub8nPu7V+MEjcRfSddPvDgcIf6n6iHlZK1ED
M975+FSCd8fQ94Zju+gKz0nBhvwxOz8tNTsihvRLoZwPRKik5PSrIbQhr5WlGDm4
dAbUsgIp1WsKEC2oeTs1qMClL/rqv7g6CYjRMdjFV9cZc/KC5wl+cG29y6nGb+GE
C5qWpWOVB/8Vk7EOnMLIVQJQWHJBXTB/ExlMTt5fGq61DuvHDUtOczdiLdM/1dvW
uZtLiVQbZTBqHheqAPYiN3RNftWMfoifICnXNIQv3i77+CbWNwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEXzPBxhUgTISeMxpdq/VOIhosehMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIy
NzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJkMTBiYmIxYTIvMmI3ZmY0ODMtNjMzMC0z
ZGZlLWEzNmMtOWI5Y2M5ZGM0MTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyMjc5ZDgtMmVkNS00NzQ1LTky
MzEtOWRiZDEwYmJiMWEyLzNkMjI3OWQ4LTJlZDUtNDc0NS05MjMxLTlkYmQxMGJi
YjFhMi5jcmwwHwYDVR0jBBgwFoAUSb7JmMg+rj/d6ly9Ou3KOIKBHm4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIyNzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJk
MTBiYmIxYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgL5qQQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdckFaKkJJ6PKvbI+rYd6D47JQNeiGOpKHQU+Sf3vXi6Cn2G4z4eF
i3fjLts2xjXIMkiw4OwlKSRqjVDBnxAalIPKxxpSHDeTSACcyXSiTPPd2MkHEwJ9
tXmwhNFcA5Pd2oL6FCxW/FFst6xVRc29pSm0cytaw1up5qXoK0thtsk3CG7WM919
FjiJUEvBr0TQag4RILYh1Z1SPKD8KUGhZmZq64lkWa9gXnHg9sVS7EWmObkx59Rt
7wAT85a49T8vACYa+/P+8rTBMjZq8xlzejLkht2OuHP7Kr7IO6+WqpYcbOBiCPBz
BlvqsDNW2XWCfVHyq43JS74fBvi8kqohaQ==
-----END CERTIFICATE-----
Generated at Thu Sep 19 16:36:08 2024 by rpki-client on console-fra.rpki-client.org