Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b5dbf85d-a037-34e6-a07b-059ffb39c42c.roa
File:                     b5dbf85d-a037-34e6-a07b-059ffb39c42c.roa (raw, json)
Hash identifier:          HCBeNRrM+nHiQkD7K5M+nYqzTdemLyAT4mLX0GuD05E=
Subject key identifier:   F8:CF:C9:3B:EA:3A:71:7D:61:24:34:BD:74:01:19:12:43:BE:5E:6A
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F43285847AF9BEB72ABEFD7CC474C96C0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b5dbf85d-a037-34e6-a07b-059ffb39c42c.roa
Signing time:             Mon 28 Oct 2024 01:00:32 +0000
ROA not before:           Mon 28 Oct 2024 01:00:32 +0000
ROA not after:            Sun 26 Jan 2025 02:00:32 +0000
asID:                     16532
IP address blocks:        2602:220::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:af:9b:eb:72:ab:ef:d7:cc:47:4c:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Oct 28 01:00:32 2024 GMT
            Not After : Jan 26 02:00:32 2025 GMT
        Subject: CN=5be16cc5-7ca5-490a-b0e6-3b3b512fd7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:46:55:11:a9:3e:b4:3e:24:f0:2c:84:81:6b:
                    c9:da:e9:66:84:57:1a:4f:10:7f:c0:c7:44:ee:15:
                    6f:f1:56:a6:de:7c:6e:06:c9:30:1e:4f:c3:c3:1a:
                    6e:e8:bd:b3:61:c0:4a:36:55:d1:c5:1e:8d:88:d1:
                    ef:a1:82:fa:4f:af:12:d6:d4:98:15:29:e5:ff:5e:
                    a4:84:bb:96:ee:4c:70:8d:0f:2e:a8:6d:7a:df:30:
                    1b:7c:5c:c2:05:8b:9c:a0:a6:77:19:7c:53:45:de:
                    aa:4e:f4:af:7f:98:c0:5e:9d:77:63:22:fd:d1:7d:
                    09:f9:aa:a5:82:28:9d:2e:fd:32:85:0d:9f:48:24:
                    69:d6:6e:6b:d8:fa:34:9c:36:5e:68:2b:b1:2f:21:
                    4b:dd:59:3e:b0:5f:11:40:c0:0e:8e:33:c4:ca:29:
                    37:97:fe:2c:59:fd:3d:99:f9:d8:4e:de:13:54:29:
                    64:b7:43:36:1c:e1:45:b4:bf:d9:f7:46:3f:2e:bf:
                    93:74:58:26:9b:98:72:ab:55:88:dd:8e:6f:34:d1:
                    7d:d0:4c:5d:b7:0f:d5:73:f1:f9:5f:0c:e1:f1:d4:
                    67:5b:f0:bc:ec:4d:15:b9:6b:0d:84:a9:aa:c3:b0:
                    7b:1c:17:f9:a7:96:bc:28:9c:85:77:31:01:b1:90:
                    10:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CF:C9:3B:EA:3A:71:7D:61:24:34:BD:74:01:19:12:43:BE:5E:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b5dbf85d-a037-34e6-a07b-059ffb39c42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:220::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a8:c7:8e:48:b6:16:d1:df:53:a1:7f:82:bb:78:ca:b5:8b:
         2d:12:53:ce:ce:3c:7f:5e:da:8c:d1:e5:ab:58:2f:09:76:e3:
         12:e6:be:32:e1:3b:6b:2a:f6:d0:83:51:55:fc:c2:23:85:22:
         cb:fd:d6:9b:e1:42:35:8c:41:9b:5e:1d:70:bd:83:68:fd:4c:
         bc:5a:31:2a:fd:78:32:b1:e4:6a:c4:43:97:73:df:6c:dc:57:
         1e:51:1c:36:ba:62:7c:67:ca:02:9b:b7:e8:3a:5a:1e:bf:51:
         98:55:7e:e9:f5:bb:cb:7d:e3:0a:d8:72:57:fa:ae:15:e8:4c:
         ed:5c:22:4f:e1:45:8f:76:8b:61:33:5a:b7:ae:65:13:ab:27:
         09:af:33:1a:bd:8f:f0:d4:15:d6:c1:a4:77:d7:f1:ec:21:06:
         c3:78:f4:c2:b7:5e:b6:6b:a8:56:2c:21:9f:d7:41:5f:4a:ed:
         d1:ed:e2:c4:d0:b3:7a:c5:f4:8c:88:05:a9:3b:e6:da:46:ed:
         30:3d:ad:27:09:ee:12:d4:f0:1c:38:4a:7a:20:0d:a5:f7:e6:
         15:48:10:c2:d4:43:5c:0f:51:3c:f2:44:cd:dc:63:77:30:46:
         da:11:37:5f:f0:cc:66:ce:8b:34:ac:59:f4:f4:74:53:20:6d:
         3a:01:dd:10
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEevm+tyq+/XzEdMlsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5
MTY5MB4XDTI0MTAyODAxMDAzMloXDTI1MDEyNjAyMDAzMlowLzEtMCsGA1UEAxMk
NWJlMTZjYzUtN2NhNS00OTBhLWIwZTYtM2IzYjUxMmZkN2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEZVEak+tD4k8CyEgWvJ2ulmhFcaTxB/wMdE
7hVv8Vam3nxuBskwHk/Dwxpu6L2zYcBKNlXRxR6NiNHvoYL6T68S1tSYFSnl/16k
hLuW7kxwjQ8uqG163zAbfFzCBYucoKZ3GXxTRd6qTvSvf5jAXp13YyL90X0J+aql
giidLv0yhQ2fSCRp1m5r2Po0nDZeaCuxLyFL3Vk+sF8RQMAOjjPEyik3l/4sWf09
mfnYTt4TVClkt0M2HOFFtL/Z90Y/Lr+TdFgmm5hyq1WI3Y5vNNF90Exdtw/Vc/H5
Xwzh8dRnW/C87E0VuWsNhKmqw7B7HBf5p5a8KJyFdzEBsZAQrwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPjPyTvqOnF9YSQ0vXQBGRJDvl5qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy
OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvYjVkYmY4NWQtYTAzNy0z
NGU2LWEwN2ItMDU5ZmZiMzljNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0
NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3
OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj
NjBkNzkxNjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICIDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBXqMeOSLYW0d9ToX+Cu3jKtYstElPOzjx/XtqM0eWrWC8JduMS5r4y
4TtrKvbQg1FV/MIjhSLL/dab4UI1jEGbXh1wvYNo/Uy8WjEq/XgyseRqxEOXc99s
3FceURw2umJ8Z8oCm7foOloev1GYVX7p9bvLfeMK2HJX+q4V6EztXCJP4UWPdoth
M1q3rmUTqycJrzMavY/w1BXWwaR31/HsIQbDePTCt162a6hWLCGf10FfSu3R7eLE
0LN6xfSMiAWpO+baRu0wPa0nCe4S1PAcOEp6IA2l9+YVSBDC1ENcD1E88kTN3GN3
MEbaETdf8Mxmzos0rFn09HRTIG06Ad0Q
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org