Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/91a6ac00-e6d7-3b0c-bb98-9a0d648596c0.roa
File:                     91a6ac00-e6d7-3b0c-bb98-9a0d648596c0.roa (raw, json)
Hash identifier:          mSMqcZlkbvEYmCr9ypmvFPiI0Ta7uy6ssTMEpRzUxXU=
Subject key identifier:   02:93:0F:12:F3:18:3B:4A:5E:2F:D3:BE:EE:0C:29:C4:CD:4C:20:E1
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F432858476C9DBACEF556E07FF3190F00
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/91a6ac00-e6d7-3b0c-bb98-9a0d648596c0.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     8075
IP address blocks:        2602:f9e7:28::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:ba:ce:f5:56:e0:7f:f3:19:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=f5c271e8-acaa-4bcc-a43d-64963df0111a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:71:6d:f0:80:6f:b5:37:36:23:ac:ff:3e:5a:
                    5d:f7:97:e2:56:12:b5:f1:b0:69:08:7f:82:ef:44:
                    c7:c2:61:15:af:c2:2c:3b:84:7b:c0:58:b0:3d:d7:
                    c3:23:ff:57:f7:f8:3d:ba:dd:01:8c:1d:f2:dd:c3:
                    d6:9e:c8:e9:ad:20:d7:65:66:1e:aa:ec:b9:b4:2f:
                    80:10:12:72:be:d6:15:5a:02:a9:bc:b4:67:e2:e2:
                    f6:ec:5a:a7:eb:72:32:3b:4c:64:47:01:9c:70:03:
                    da:5d:fd:3e:c5:83:bb:e6:df:9e:fc:83:87:1e:0b:
                    17:15:f2:70:84:70:69:b9:ec:d4:77:61:ee:98:5e:
                    8d:e6:76:37:cb:b6:6b:59:54:f5:b0:e5:cf:63:78:
                    8c:75:02:1e:b6:4a:57:40:bc:be:27:ac:09:f3:39:
                    92:76:cf:6b:35:53:61:e4:35:8f:b2:78:8e:d1:be:
                    e3:b6:5d:30:3d:a2:52:be:40:e7:17:36:9f:5a:f1:
                    c6:55:33:e9:21:95:0c:6a:54:36:be:8a:0a:3b:67:
                    87:5e:97:0b:21:af:e9:73:e4:b2:70:34:69:36:f8:
                    7c:75:bc:5a:e6:99:44:34:d3:38:f1:be:66:b4:0a:
                    f3:83:c3:a4:8d:49:cf:b4:fc:69:9a:b8:66:ba:27:
                    ff:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:93:0F:12:F3:18:3B:4A:5E:2F:D3:BE:EE:0C:29:C4:CD:4C:20:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/91a6ac00-e6d7-3b0c-bb98-9a0d648596c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e7:28::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:5a:1c:b3:04:a3:8e:40:9a:1c:64:d6:e1:17:82:f4:59:e8:
         fc:c4:17:4e:99:b7:77:6e:d9:05:cd:5c:9b:11:00:c4:51:44:
         8d:59:70:c1:db:03:0f:20:06:48:1b:b1:fd:88:41:28:e2:7d:
         4c:a8:dd:26:47:57:1a:4b:70:e9:81:31:94:26:5b:f3:e3:d2:
         f9:ab:0e:a5:0b:2c:f2:75:62:79:c7:77:28:b4:2d:bb:85:c9:
         d8:56:12:f4:0b:e7:a6:1d:4f:ba:ee:47:fa:40:8f:58:0d:35:
         f7:7c:e8:5b:12:11:ae:bb:fb:e0:51:d6:f5:b7:e0:bd:a4:fc:
         84:e1:66:24:62:17:a6:52:10:0b:cb:51:91:51:2b:2c:b5:96:
         ad:80:b0:5a:01:f7:9a:4b:31:1c:ca:df:89:f0:2f:30:0a:2b:
         1d:df:db:50:2b:76:a4:b5:f8:d2:16:6b:73:4f:b4:fe:1c:e7:
         36:0e:ef:62:6b:3c:17:ee:9f:a1:e8:e3:a9:8c:16:c0:a2:89:
         6a:73:4e:60:77:69:50:c6:5f:f0:a0:26:65:11:b3:d8:47:e9:
         40:fd:18:d6:28:e9:32:58:3e:6a:df:a5:32:de:af:58:92:b4:
         41:3d:31:33:d7:1e:d4:d0:54:36:0a:20:37:fb:3a:5c:3e:46:
         34:77:c6:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdsnbrO9Vbgf/MZDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj
MzRmMB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
ZjVjMjcxZTgtYWNhYS00YmNjLWE0M2QtNjQ5NjNkZjAxMTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3Ft8IBvtTc2I6z/Plpd95fiVhK18bBpCH+C
70THwmEVr8IsO4R7wFiwPdfDI/9X9/g9ut0BjB3y3cPWnsjprSDXZWYequy5tC+A
EBJyvtYVWgKpvLRn4uL27Fqn63IyO0xkRwGccAPaXf0+xYO75t+e/IOHHgsXFfJw
hHBpuezUd2HumF6N5nY3y7ZrWVT1sOXPY3iMdQIetkpXQLy+J6wJ8zmSds9rNVNh
5DWPsniO0b7jtl0wPaJSvkDnFzafWvHGVTPpIZUMalQ2vooKO2eHXpcLIa/pc+Sy
cDRpNvh8dbxa5plENNM48b5mtArzg8OkjUnPtPxpmrhmuif/kQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAKTDxLzGDtKXi/Tvu4MKcTNTCDhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw
ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvOTFhNmFjMDAtZTZkNy0z
YjBjLWJiOTgtOWEwZDY0ODU5NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm
OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy
YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm
NDZmMmMzNGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL55wAo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEBaHLMEo45Amhxk1uEXgvRZ6PzEF06Zt3du2QXNXJsRAMRRRI1Z
cMHbAw8gBkgbsf2IQSjifUyo3SZHVxpLcOmBMZQmW/Pj0vmrDqULLPJ1YnnHdyi0
LbuFydhWEvQL56YdT7ruR/pAj1gNNfd86FsSEa67++BR1vW34L2k/IThZiRiF6ZS
EAvLUZFRKyy1lq2AsFoB95pLMRzK34nwLzAKKx3f21ArdqS1+NIWa3NPtP4c5zYO
72JrPBfun6Ho46mMFsCiiWpzTmB3aVDGX/CgJmURs9hH6UD9GNYo6TJYPmrfpTLe
r1iStEE9MTPXHtTQVDYKIDf7Olw+RjR3xhk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org