Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/8e0fe062-53ef-392d-8b4e-e877f5e254b2.roa
File:                     8e0fe062-53ef-392d-8b4e-e877f5e254b2.roa (raw, json)
Hash identifier:          TllX+DmKOLLHahwZfDOVW8gNA1cYQLFkEjpsR8b1AJU=
Subject key identifier:   DF:67:76:11:E1:36:CD:CA:94:3B:F4:C2:00:0F:DF:29:10:71:F9:BF
Certificate issuer:       /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial:       010D0C9F43285845304D3D12411D50A7DF9315C0
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/8e0fe062-53ef-392d-8b4e-e877f5e254b2.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        2602:fa36::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:3d:12:41:1d:50:a7:df:93:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=94b3eafa-d693-4abc-ab63-ddb560c9b441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:28:0d:1b:ce:07:b7:15:c7:3a:b7:05:cc:63:
                    f8:c2:d6:7d:b3:73:fc:76:15:0a:97:f5:ba:f8:64:
                    de:ed:44:de:48:fd:28:45:c8:2f:03:5f:d2:bf:e5:
                    e3:29:75:66:6e:f0:b2:21:45:89:55:8b:b6:80:3f:
                    e5:77:fd:6e:e6:a1:74:e2:39:5d:9b:c6:c4:00:7b:
                    92:8c:a2:3b:b9:60:25:9f:29:08:68:bd:65:01:26:
                    d5:03:bb:fe:98:42:74:fa:e5:d1:15:03:86:da:a2:
                    94:e8:c6:20:53:ae:09:f2:ed:c5:63:34:37:01:80:
                    11:ff:57:5a:e5:ad:13:21:89:b5:d5:ff:2d:d1:86:
                    57:ad:65:e9:3a:36:1c:7e:93:3b:ff:85:45:1c:01:
                    32:d4:2d:1f:d1:c3:f8:9a:da:57:c8:d3:97:ea:8d:
                    d8:9e:49:80:79:df:88:4c:98:56:17:a4:a8:e5:5e:
                    70:b5:7d:93:08:1d:19:98:12:ed:b9:c6:e2:dc:46:
                    5c:c0:b8:53:b5:ee:d7:bd:b3:c0:09:c0:ef:37:3f:
                    3e:28:17:b2:17:d2:bc:19:3a:40:74:74:fb:c5:df:
                    a9:bf:bc:24:62:4f:6a:d1:8a:57:40:42:f5:bd:46:
                    f6:57:b3:09:11:00:d7:8d:fa:77:a9:f7:2c:49:56:
                    dc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:67:76:11:E1:36:CD:CA:94:3B:F4:C2:00:0F:DF:29:10:71:F9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/8e0fe062-53ef-392d-8b4e-e877f5e254b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl

            X509v3 Authority Key Identifier:
                keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa36::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:25:b9:54:3c:bd:57:1f:94:0b:76:b8:0f:50:5a:08:6d:0b:
         9a:ac:30:3b:4b:d0:22:ce:49:72:51:ea:a4:3a:46:ef:28:30:
         30:de:27:de:29:40:8f:24:55:db:2b:aa:f4:04:44:96:09:e2:
         13:4e:e5:90:22:f8:9c:a7:38:6f:46:37:ca:d4:06:17:75:fa:
         ed:2f:60:10:6f:25:8b:5a:b3:ca:52:f7:15:23:01:f1:cd:16:
         fd:69:01:f1:39:4d:43:12:f3:5a:02:01:e7:1d:d8:a8:b4:ea:
         ac:39:7a:5c:5f:c3:57:eb:c9:f7:87:7d:1b:cf:a7:28:32:3c:
         0f:53:79:5f:34:34:af:55:54:8d:42:18:2c:3b:e5:d3:af:4d:
         a6:2e:e9:6e:d2:c9:6d:f3:ea:d9:5c:eb:20:97:0a:0f:73:da:
         48:70:e0:c0:02:b1:da:95:85:cc:9a:85:31:3a:2e:b4:50:96:
         a4:ab:c6:4b:2c:4f:d7:d5:9c:da:0e:55:47:e2:fc:bd:5a:4d:
         c2:92:d1:a6:f3:c0:92:98:6b:60:69:bc:ab:9a:75:8c:f6:39:
         44:8f:3f:2c:8d:4a:04:41:1a:dd:a9:b8:4a:40:a0:74:99:cc:
         e0:31:11:3e:63:18:98:c8:f5:71:7f:29:1a:84:e3:c3:7f:93:
         f1:25:66:c1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUwTT0SQR1Qp9+TFcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGZmNTVmYmUtMzljMi00NWI0LTlhYTItNjAxNjJkNGUy
OTMyMB4XDTI0MDMxMzAxMDAyNloXDTI0MDYxMTAxMDAyNlowLzEtMCsGA1UEAxMk
OTRiM2VhZmEtZDY5My00YWJjLWFiNjMtZGRiNTYwYzliNDQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgygNG84HtxXHOrcFzGP4wtZ9s3P8dhUKl/W6
+GTe7UTeSP0oRcgvA1/Sv+XjKXVmbvCyIUWJVYu2gD/ld/1u5qF04jldm8bEAHuS
jKI7uWAlnykIaL1lASbVA7v+mEJ0+uXRFQOG2qKU6MYgU64J8u3FYzQ3AYAR/1da
5a0TIYm11f8t0YZXrWXpOjYcfpM7/4VFHAEy1C0f0cP4mtpXyNOX6o3YnkmAed+I
TJhWF6So5V5wtX2TCB0ZmBLtucbi3EZcwLhTte7XvbPACcDvNz8+KBeyF9K8GTpA
dHT7xd+pv7wkYk9q0YpXQEL1vUb2V7MJEQDXjfp3qfcsSVbcyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN9ndhHhNs3KlDv0wgAP3ykQcfm/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZmY1
NWZiZS0zOWMyLTQ1YjQtOWFhMi02MDE2MmQ0ZTI5MzIvOGUwZmUwNjItNTNlZi0z
OTJkLThiNGUtZTg3N2Y1ZTI1NGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGZmNTVmYmUtMzljMi00NWI0LTlh
YTItNjAxNjJkNGUyOTMyLzRmZjU1ZmJlLTM5YzItNDViNC05YWEyLTYwMTYyZDRl
MjkzMi5jcmwwHwYDVR0jBBgwFoAUHP9AdpG2YPFJ/JUDj4ksEk1MAVswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZmY1NWZiZS0zOWMyLTQ1YjQtOWFhMi02MDE2
MmQ0ZTI5MzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6NgAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAQluVQ8vVcflAt2uA9QWghtC5qsMDtL0CLOSXJR6qQ6Ru8oMDDe
J94pQI8kVdsrqvQERJYJ4hNO5ZAi+JynOG9GN8rUBhd1+u0vYBBvJYtas8pS9xUj
AfHNFv1pAfE5TUMS81oCAecd2Ki06qw5elxfw1fryfeHfRvPpygyPA9TeV80NK9V
VI1CGCw75dOvTaYu6W7SyW3z6tlc6yCXCg9z2khw4MACsdqVhcyahTE6LrRQlqSr
xkssT9fVnNoOVUfi/L1aTcKS0abzwJKYa2BpvKuadYz2OUSPPyyNSgRBGt2puEpA
oHSZzOAxET5jGJjI9XF/KRqE48N/k/ElZsE=
-----END CERTIFICATE-----
Generated at Wed May 1 19:31:46 2024 by rpki-client on console-fra.rpki-client.org