Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/f326d75a-5d47-348a-a4cb-d2f25a49191d.roa
File:                     f326d75a-5d47-348a-a4cb-d2f25a49191d.roa (raw, json)
Hash identifier:          omMPLTdoMiwd4oJ6oLnfKGlWBXiPYfl1TFINJzItk6o=
Subject key identifier:   BA:60:86:39:AC:92:A3:5B:A8:17:E0:B6:BC:9C:03:FE:CB:C9:50:96
Certificate issuer:       /CN=75730944-401d-4c41-bc13-ee5c77df37a8
Certificate serial:       010D0C9F43285847600B9DC2CF510B01D43D4E40
Authority key identifier: B7:91:02:37:F0:02:0B:8A:A7:A4:59:0F:78:D2:7A:53:E2:D3:E7:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/f326d75a-5d47-348a-a4cb-d2f25a49191d.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     21805
IP address blocks:        2602:f9ed::/36 maxlen: 36
                          2602:f9ed::/40 maxlen: 40
                          2602:f9ed:100::/40 maxlen: 40
                          2602:f9ed:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/75730944-401d-4c41-bc13-ee5c77df37a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/75730944-401d-4c41-bc13-ee5c77df37a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:9d:c2:cf:51:0b:01:d4:3d:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75730944-401d-4c41-bc13-ee5c77df37a8
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=4413a76d-b1da-4eee-9b28-b2707f0779db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4c:71:9d:85:1b:30:d2:27:cd:e4:08:08:32:
                    aa:74:b7:45:4c:b0:9d:2b:3a:dd:fb:63:d4:35:12:
                    9d:97:02:be:78:56:84:2c:90:d8:6a:4d:22:33:87:
                    5a:c8:1d:a6:1d:bb:0d:3d:7f:0a:fe:e8:2c:bc:5d:
                    a5:9f:21:47:3d:72:57:01:69:f4:85:fd:11:c9:26:
                    76:13:88:b9:8d:02:2d:a4:37:0e:19:ab:b6:67:51:
                    9f:2c:09:25:ce:2d:0d:93:47:06:58:52:31:e3:5f:
                    0b:2d:94:6e:27:67:1a:90:54:fb:77:24:f4:0d:b7:
                    2a:cd:b4:03:ef:a7:97:43:7c:22:52:7a:f9:77:8c:
                    47:bb:c3:6d:f7:81:e9:33:3e:33:f9:4e:56:94:a6:
                    05:fe:fd:59:6e:c8:e2:62:b9:c8:a5:21:f6:66:5d:
                    61:35:2e:66:da:4a:ba:30:35:15:9b:53:f6:66:11:
                    59:ec:ae:1d:c2:fe:6b:eb:ab:c5:85:3a:ab:d7:9f:
                    35:06:3e:95:02:e6:0b:ef:b3:63:5f:b0:7f:08:16:
                    c0:5c:94:89:81:29:da:1b:61:fe:f8:3e:2c:07:9f:
                    7a:ba:3d:bf:bd:68:cb:77:54:89:2a:e0:4e:73:b5:
                    20:3a:a3:95:3a:30:f5:b8:b4:31:20:80:36:37:f7:
                    0e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:60:86:39:AC:92:A3:5B:A8:17:E0:B6:BC:9C:03:FE:CB:C9:50:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/f326d75a-5d47-348a-a4cb-d2f25a49191d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8/75730944-401d-4c41-bc13-ee5c77df37a8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:91:02:37:F0:02:0B:8A:A7:A4:59:0F:78:D2:7A:53:E2:D3:E7:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75730944-401d-4c41-bc13-ee5c77df37a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ed::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:85:53:d2:88:5c:cb:05:22:0e:09:6a:e0:48:a1:c1:0a:35:
         84:c4:8b:01:fc:cc:13:95:5d:13:49:01:25:83:64:9c:55:86:
         60:0d:e2:d2:60:3f:77:6c:75:bb:12:54:c7:03:0a:3c:5b:70:
         94:a9:5c:a6:c4:4d:a2:39:e8:cf:da:5f:25:56:8e:77:29:ef:
         b6:32:88:71:11:69:6f:d1:4e:51:2c:22:1a:62:e2:ae:33:6e:
         b6:2c:51:17:13:54:71:39:2a:52:1f:53:1f:06:0b:93:e0:f5:
         c4:89:d8:91:29:42:31:88:d1:27:70:93:88:de:f4:26:5d:0e:
         cc:13:58:f5:45:65:d2:2b:80:db:ff:bd:ef:49:e9:4b:e8:a5:
         0b:a6:56:43:16:0e:bc:93:a8:7f:5a:b4:3e:c4:05:d7:41:42:
         74:12:24:6d:27:9c:50:45:82:56:26:9a:dd:7f:9f:ca:23:1a:
         f7:4d:5e:43:08:f1:65:5e:60:26:f3:90:21:37:13:5d:37:67:
         6c:b5:c0:5f:cd:d9:12:14:90:17:53:87:d4:12:7d:f0:c1:f2:
         73:0f:2b:f7:7c:24:56:c5:b8:20:96:85:a9:0a:ea:84:2c:87:
         32:da:99:74:f8:14:cc:e6:52:41:91:0a:b5:c9:49:a3:81:1e:
         fe:d2:80:36
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEdgC53Cz1ELAdQ9TkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzU3MzA5NDQtNDAxZC00YzQxLWJjMTMtZWU1Yzc3ZGYz
N2E4MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
NDQxM2E3NmQtYjFkYS00ZWVlLTliMjgtYjI3MDdmMDc3OWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUxxnYUbMNInzeQICDKqdLdFTLCdKzrd+2PU
NRKdlwK+eFaELJDYak0iM4dayB2mHbsNPX8K/ugsvF2lnyFHPXJXAWn0hf0RySZ2
E4i5jQItpDcOGau2Z1GfLAklzi0Nk0cGWFIx418LLZRuJ2cakFT7dyT0DbcqzbQD
76eXQ3wiUnr5d4xHu8Nt94HpMz4z+U5WlKYF/v1ZbsjiYrnIpSH2Zl1hNS5m2kq6
MDUVm1P2ZhFZ7K4dwv5r66vFhTqr1581Bj6VAuYL77NjX7B/CBbAXJSJgSnaG2H+
+D4sB596uj2/vWjLd1SJKuBOc7UgOqOVOjD1uLQxIIA2N/cOAQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLpghjmskqNbqBfgtrycA/7LyVCWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NTcz
MDk0NC00MDFkLTRjNDEtYmMxMy1lZTVjNzdkZjM3YTgvZjMyNmQ3NWEtNWQ0Ny0z
NDhhLWE0Y2ItZDJmMjVhNDkxOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzU3MzA5NDQtNDAxZC00YzQxLWJj
MTMtZWU1Yzc3ZGYzN2E4Lzc1NzMwOTQ0LTQwMWQtNGM0MS1iYzEzLWVlNWM3N2Rm
MzdhOC5jcmwwHwYDVR0jBBgwFoAUt5ECN/ACC4qnpFkPeNJ6U+LT5/UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83NTczMDk0NC00MDFkLTRjNDEtYmMxMy1lZTVj
NzdkZjM3YTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL57QAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAF4VT0ohcywUiDglq4EihwQo1hMSLAfzME5VdE0kBJYNknFWGYA3i
0mA/d2x1uxJUxwMKPFtwlKlcpsRNojnoz9pfJVaOdynvtjKIcRFpb9FOUSwiGmLi
rjNutixRFxNUcTkqUh9THwYLk+D1xInYkSlCMYjRJ3CTiN70Jl0OzBNY9UVl0iuA
2/+970npS+ilC6ZWQxYOvJOof1q0PsQF10FCdBIkbSecUEWCViaa3X+fyiMa901e
QwjxZV5gJvOQITcTXTdnbLXAX83ZEhSQF1OH1BJ98MHycw8r93wkVsW4IJaFqQrq
hCyHMtqZdPgUzOZSQZEKtclJo4Ee/tKANg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:05 2024 by rpki-client on console-ams.rpki-client.org