Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/3d49770f-800a-34a9-b579-a4adf2ce610b.roa
File:                     3d49770f-800a-34a9-b579-a4adf2ce610b.roa (raw, json)
Hash identifier:          MZKAqsyKp+VNK50UrgDKKs8QBJSFNTzEH1yXTIDd87U=
Subject key identifier:   03:4B:38:B6:79:35:6A:0C:C7:3F:F0:DF:D6:D1:CB:80:26:3A:64:4C
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F43285847792BA3E1F08608CF13976040
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/3d49770f-800a-34a9-b579-a4adf2ce610b.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     27010
IP address blocks:        2602:f9f6:430::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:a3:e1:f0:86:08:cf:13:97:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=10b0485e-9792-4580-983a-8b92a4545dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:88:5c:fc:d4:bb:59:d1:2e:00:e7:c1:06:20:
                    5a:fe:cb:ff:fb:8e:3a:48:da:ea:9b:d9:2b:a9:1a:
                    11:fa:9c:82:d4:ec:49:37:38:22:c0:f5:87:c8:15:
                    f8:8c:ef:47:28:88:f1:fe:7f:7c:64:ab:ab:ec:e4:
                    27:0a:d5:f9:e6:53:f2:2a:a1:1e:ff:4a:a6:0a:50:
                    c1:24:75:25:be:48:f2:9f:3b:b2:f7:1f:26:bb:cb:
                    5c:02:5b:9a:95:c7:91:3e:42:7b:25:bc:5a:14:92:
                    00:0d:79:e8:ee:84:0f:54:7c:56:0f:57:03:e5:e3:
                    ea:a5:29:f2:2b:79:17:69:61:0c:5a:cb:b9:9e:9c:
                    fd:e8:90:4e:fa:51:c1:46:25:5e:2d:d7:9c:84:9a:
                    66:01:5b:14:91:62:4c:98:27:1e:c8:7a:48:80:1a:
                    a4:c0:87:87:e1:42:b3:5b:eb:04:46:4c:14:c0:39:
                    d6:d2:c0:f7:93:2e:16:5e:85:ae:64:60:90:37:2d:
                    41:67:1c:35:54:06:cc:a1:a9:aa:a5:3a:03:7e:a8:
                    e0:4f:0c:78:12:d8:c1:a1:31:ff:38:a0:54:f6:35:
                    a4:35:b1:5e:ec:21:5e:2f:bc:9a:ad:3c:65:0d:2f:
                    7d:a7:38:7d:eb:77:1a:b0:3f:52:f9:21:78:4b:50:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4B:38:B6:79:35:6A:0C:C7:3F:F0:DF:D6:D1:CB:80:26:3A:64:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/3d49770f-800a-34a9-b579-a4adf2ce610b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:430::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:45:1a:1c:e4:d1:07:48:80:4f:a8:55:7d:d5:cd:7e:37:13:
         29:9c:f1:0c:9f:27:48:7d:d0:e6:2e:ad:e8:96:b8:f8:7a:2d:
         4e:29:5b:9c:6c:b7:45:fd:d6:83:ca:d7:47:8e:7f:a1:cb:3c:
         26:99:1c:86:ba:62:ae:74:f2:83:7f:b6:7d:46:b8:9b:67:da:
         c6:1b:e5:c4:c4:2a:f8:ef:61:90:dd:09:e9:99:24:43:6d:63:
         9b:c1:32:60:6e:49:9d:b7:8f:3b:6f:90:d1:bd:29:23:e1:09:
         c0:e1:22:a0:c9:03:d0:28:8d:64:d4:73:2a:9a:dc:b3:d5:5c:
         00:d9:4f:ef:4d:0e:1d:73:69:cd:75:ee:52:7d:52:78:25:d8:
         17:dd:97:2c:c0:1b:4b:87:9b:25:d4:91:4d:ae:fd:e5:b1:76:
         ba:18:3b:30:81:30:27:2e:70:70:1b:0d:d7:35:c9:81:8c:21:
         d0:a9:3a:94:49:66:7c:24:39:5b:61:d6:67:89:78:9a:d1:cb:
         6d:02:67:59:7b:20:e5:a1:16:de:72:a6:42:e2:21:55:64:09:
         e3:6e:2d:b0:59:11:f9:55:1f:1f:9f:70:54:be:78:61:5e:d4:
         9e:df:2a:7b:77:ff:2c:d1:e4:7f:0a:2a:d4:98:07:74:06:c1:
         a9:7f:ff:e3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd5K6Ph8IYIzxOXYEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew
NjZjMB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
MTBiMDQ4NWUtOTc5Mi00NTgwLTk4M2EtOGI5MmE0NTQ1ZGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYhc/NS7WdEuAOfBBiBa/sv/+446SNrqm9kr
qRoR+pyC1OxJNzgiwPWHyBX4jO9HKIjx/n98ZKur7OQnCtX55lPyKqEe/0qmClDB
JHUlvkjynzuy9x8mu8tcAlualceRPkJ7JbxaFJIADXno7oQPVHxWD1cD5ePqpSny
K3kXaWEMWsu5npz96JBO+lHBRiVeLdechJpmAVsUkWJMmCceyHpIgBqkwIeH4UKz
W+sERkwUwDnW0sD3ky4WXoWuZGCQNy1BZxw1VAbMoamqpToDfqjgTwx4EtjBoTH/
OKBU9jWkNbFe7CFeL7yarTxlDS99pzh963casD9S+SF4S1AU3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFANLOLZ5NWoMxz/w39bRy4AmOmRMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0
NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvM2Q0OTc3MGYtODAwYS0z
NGE5LWI1NzktYTRhZGYyY2U2MTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1
ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh
MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1
ZmU3YTA2NmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL59gQw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHVFGhzk0QdIgE+oVX3VzX43Eymc8QyfJ0h90OYureiWuPh6LU4p
W5xst0X91oPK10eOf6HLPCaZHIa6Yq508oN/tn1GuJtn2sYb5cTEKvjvYZDdCemZ
JENtY5vBMmBuSZ23jztvkNG9KSPhCcDhIqDJA9AojWTUcyqa3LPVXADZT+9NDh1z
ac117lJ9Ungl2BfdlyzAG0uHmyXUkU2u/eWxdroYOzCBMCcucHAbDdc1yYGMIdCp
OpRJZnwkOVth1meJeJrRy20CZ1l7IOWhFt5ypkLiIVVkCeNuLbBZEflVHx+fcFS+
eGFe1J7fKnt3/yzR5H8KKtSYB3QGwal//+M=
-----END CERTIFICATE-----
Generated at Sun Nov 24 08:37:19 2024 by rpki-client on console-ams.rpki-client.org