Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/f4d23f6c-e75b-30b2-8021-3628a855e890.roa
File:                     f4d23f6c-e75b-30b2-8021-3628a855e890.roa (raw, json)
Hash identifier:          1jbQFinNQQoIJBsSjtNv1OUeDfyXJ4AHHDv/EJsiu38=
Subject key identifier:   9F:38:89:AF:AD:91:52:32:48:9B:F1:4D:14:23:94:EC:07:D3:FD:D9
Certificate issuer:       /CN=5541e022-414f-45f5-9426-a7643db1ec8d
Certificate serial:       010D0C9F43285846D4756109FE19163A6DE71D00
Authority key identifier: F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/f4d23f6c-e75b-30b2-8021-3628a855e890.roa
Signing time:             Sat 10 Aug 2024 13:00:39 +0000
ROA not before:           Sat 10 Aug 2024 13:00:39 +0000
ROA not after:            Fri 08 Nov 2024 14:00:39 +0000
asID:                     206216
IP address blocks:        2602:fa08:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d4:75:61:09:fe:19:16:3a:6d:e7:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5541e022-414f-45f5-9426-a7643db1ec8d
        Validity
            Not Before: Aug 10 13:00:39 2024 GMT
            Not After : Nov  8 14:00:39 2024 GMT
        Subject: CN=f1db3ca1-6feb-45f7-bfc6-751f3ef4dd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:68:e2:92:b0:1c:d1:1d:e5:90:92:2a:8a:c6:
                    19:ff:4d:35:6e:59:8c:52:af:af:ed:94:11:4e:81:
                    15:81:a0:5c:b1:dc:3a:d7:31:32:1a:8f:ab:3c:47:
                    5c:4e:77:e3:96:7a:93:77:1d:f9:0a:d0:bf:5c:1d:
                    c2:b5:c9:1d:9f:e6:48:fd:24:a2:af:1e:c5:6c:0d:
                    5e:52:f2:12:5d:d1:8b:85:b8:7e:6a:96:7c:5b:17:
                    3e:62:0f:07:a4:24:4f:28:23:77:c3:de:41:97:66:
                    55:ca:7d:2f:f5:9d:ef:78:ce:63:5c:4b:68:33:fa:
                    56:95:f8:e0:18:d3:d4:38:25:21:2f:a2:22:3d:0b:
                    6e:17:d7:c7:85:68:0b:84:44:20:84:5e:71:55:2d:
                    22:e9:15:65:15:a0:c8:81:51:54:03:d8:97:32:7e:
                    0e:43:0b:46:77:9f:4e:10:d9:4e:9c:e4:64:bf:0d:
                    27:b1:c9:9d:e8:a0:a6:ac:0d:f8:0f:b5:30:61:a0:
                    f1:81:63:ad:0c:87:a6:21:09:52:62:4d:a2:3a:46:
                    0a:48:65:c0:7c:80:84:bb:4a:11:84:a1:48:2a:1f:
                    b1:17:bd:d8:82:72:f5:fc:3f:6b:e9:77:c5:8e:2d:
                    ee:ff:db:30:b6:31:ec:23:29:0c:60:e8:a0:24:bd:
                    71:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:38:89:AF:AD:91:52:32:48:9B:F1:4D:14:23:94:EC:07:D3:FD:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/f4d23f6c-e75b-30b2-8021-3628a855e890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl

            X509v3 Authority Key Identifier:
                keyid:F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa08:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d0:ed:d1:af:03:51:e8:a9:df:0b:70:50:dc:34:48:cd:70:
         11:5f:ab:98:50:56:24:9b:74:fc:35:6d:21:53:5b:0d:b7:9d:
         34:95:90:23:0d:b7:9a:2a:2e:6b:57:67:76:b3:b7:48:89:27:
         3b:e5:c9:c5:4a:3f:11:70:b8:23:f5:89:fe:d8:fa:80:f6:8c:
         e2:f8:ca:36:21:08:f3:d2:b7:ea:97:14:a1:3f:9a:5b:97:ba:
         ff:29:90:e1:a2:18:14:96:11:15:de:db:d2:f8:68:41:8c:a7:
         c8:c2:bc:65:2c:ac:01:b7:81:ae:7e:de:a6:e6:eb:16:de:11:
         73:e2:58:91:e9:07:eb:06:b7:7a:80:56:ad:c6:4b:eb:15:68:
         d7:9a:46:38:99:ce:e6:3a:a1:09:3a:13:94:5d:94:0d:8e:a2:
         e2:5e:3c:34:ab:6c:ba:5e:6d:28:8a:c0:c1:5c:58:50:1e:d7:
         b1:06:00:3a:bb:e6:9a:43:ef:4f:6a:66:9e:68:5a:49:9a:c8:
         97:9a:96:25:a0:3f:1a:c2:17:7d:48:0b:b1:91:33:9e:a7:bd:
         57:31:e2:e4:7e:c1:2e:f1:99:f8:8e:16:48:15:1b:c8:84:34:
         5b:25:7a:e8:c1:46:26:4f:78:30:98:21:3c:63:fd:a9:b7:e0:
         32:d5:7b:24
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEbUdWEJ/hkWOm3nHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU0MWUwMjItNDE0Zi00NWY1LTk0MjYtYTc2NDNkYjFl
YzhkMB4XDTI0MDgxMDEzMDAzOVoXDTI0MTEwODE0MDAzOVowLzEtMCsGA1UEAxMk
ZjFkYjNjYTEtNmZlYi00NWY3LWJmYzYtNzUxZjNlZjRkZDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GjikrAc0R3lkJIqisYZ/001blmMUq+v7ZQR
ToEVgaBcsdw61zEyGo+rPEdcTnfjlnqTdx35CtC/XB3Ctckdn+ZI/SSirx7FbA1e
UvISXdGLhbh+apZ8Wxc+Yg8HpCRPKCN3w95Bl2ZVyn0v9Z3veM5jXEtoM/pWlfjg
GNPUOCUhL6IiPQtuF9fHhWgLhEQghF5xVS0i6RVlFaDIgVFUA9iXMn4OQwtGd59O
ENlOnORkvw0nscmd6KCmrA34D7UwYaDxgWOtDIemIQlSYk2iOkYKSGXAfICEu0oR
hKFIKh+xF73YgnL1/D9r6XfFji3u/9swtjHsIykMYOigJL1xBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ84ia+tkVIySJvxTRQjlOwH0/3ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81NTQx
ZTAyMi00MTRmLTQ1ZjUtOTQyNi1hNzY0M2RiMWVjOGQvZjRkMjNmNmMtZTc1Yi0z
MGIyLTgwMjEtMzYyOGE4NTVlODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNTU0MWUwMjItNDE0Zi00NWY1LTk0
MjYtYTc2NDNkYjFlYzhkLzU1NDFlMDIyLTQxNGYtNDVmNS05NDI2LWE3NjQzZGIx
ZWM4ZC5jcmwwHwYDVR0jBBgwFoAU9XJmm/or1eRYLh/qGspnJJZrP6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81NTQxZTAyMi00MTRmLTQ1ZjUtOTQyNi1hNzY0
M2RiMWVjOGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6CAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFrQ7dGvA1Hoqd8LcFDcNEjNcBFfq5hQViSbdPw1bSFTWw23nTSV
kCMNt5oqLmtXZ3azt0iJJzvlycVKPxFwuCP1if7Y+oD2jOL4yjYhCPPSt+qXFKE/
mluXuv8pkOGiGBSWERXe29L4aEGMp8jCvGUsrAG3ga5+3qbm6xbeEXPiWJHpB+sG
t3qAVq3GS+sVaNeaRjiZzuY6oQk6E5RdlA2OouJePDSrbLpebSiKwMFcWFAe17EG
ADq75ppD709qZp5oWkmayJealiWgPxrCF31IC7GRM56nvVcx4uR+wS7xmfiOFkgV
G8iENFsleujBRiZPeDCYITxj/am34DLVeyQ=
-----END CERTIFICATE-----
Generated at Tue Oct 22 16:12:11 2024 by rpki-client on console-ams.rpki-client.org