Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa
File:                     ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa (raw, json)
Hash identifier:          eFU2Ylvjrf5ZPSL2U1lH2KMkyVLvrheTecbjccCJSqM=
Subject key identifier:   4D:88:37:80:1A:28:A9:83:A3:7E:EF:40:7C:96:1E:EB:8D:12:AD:1B
Certificate issuer:       /CN=c52f54e9-4dc6-4976-963e-f51088184223
Certificate serial:       010D0C9F43285845A9BE1EEEBF0BC08C0EF99DE0
Authority key identifier: 59:54:A7:EF:DA:24:0C:DB:76:A3:58:FA:9D:33:06:2D:0E:1A:7D:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     33973
IP address blocks:        2602:815::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/c52f54e9-4dc6-4976-963e-f51088184223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/c52f54e9-4dc6-4976-963e-f51088184223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:1e:ee:bf:0b:c0:8c:0e:f9:9d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c52f54e9-4dc6-4976-963e-f51088184223
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=ec028d57-f5d8-4f73-9b1d-f1d246cba5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:9d:f0:6b:8c:04:77:ab:f1:6e:be:65:3a:
                    43:0a:30:04:a3:ed:9c:29:2a:35:80:19:43:73:eb:
                    c9:77:d9:60:3d:2b:6e:63:c9:93:8c:7f:ad:68:35:
                    11:de:79:c0:00:48:58:08:eb:6f:dd:79:9e:45:87:
                    9a:eb:09:9a:80:87:82:61:a0:69:da:99:93:78:61:
                    7a:16:dc:6a:18:47:16:42:fc:a4:79:5a:ef:a1:dd:
                    5f:bd:cb:c3:75:0f:ea:98:cf:4a:5a:fc:b4:c6:c3:
                    2e:a9:be:08:50:5c:46:97:37:ba:34:76:9a:e2:11:
                    8f:95:55:ef:9c:aa:a7:e3:26:06:38:a1:be:43:d7:
                    5d:a3:5b:e1:b5:0f:a1:6f:85:01:84:95:ef:c1:98:
                    ad:b3:89:55:00:a0:57:f6:c2:85:d0:4b:e1:4b:97:
                    50:70:8d:80:44:6b:4a:1b:ad:56:61:bc:ff:bb:c5:
                    17:9f:2f:87:ac:00:e8:d5:e2:37:f2:af:9d:d3:0e:
                    53:37:f0:ca:b9:54:72:88:a7:9a:55:63:e6:01:c7:
                    b7:bf:0b:12:19:33:6f:6e:62:53:6b:85:06:7f:40:
                    0a:32:8e:34:75:3a:9d:70:c4:a1:f3:ed:b3:74:72:
                    cb:bd:48:79:54:39:80:3a:ce:0b:42:f1:9e:c1:60:
                    3f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:88:37:80:1A:28:A9:83:A3:7E:EF:40:7C:96:1E:EB:8D:12:AD:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/c52f54e9-4dc6-4976-963e-f51088184223.crl

            X509v3 Authority Key Identifier:
                keyid:59:54:A7:EF:DA:24:0C:DB:76:A3:58:FA:9D:33:06:2D:0E:1A:7D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1e:b9:e9:5e:72:1b:c6:51:26:74:e0:39:f6:30:7b:2a:3d:
         7d:9f:bf:82:56:e4:dd:e6:86:2e:2a:33:75:11:86:23:17:0c:
         60:86:32:78:ac:72:b7:12:f6:97:54:fb:6e:d7:80:01:f2:a3:
         69:42:5c:9a:57:70:29:37:88:d5:fa:46:2d:2c:c5:9e:26:c7:
         03:e8:87:99:57:3c:d8:50:3e:81:6e:93:4f:c7:84:d8:47:29:
         52:5e:65:3c:73:90:3f:37:ff:43:e6:da:d4:6d:85:e5:1f:a0:
         23:77:fe:47:b2:6e:82:bf:80:f6:89:86:19:11:65:7a:95:b9:
         33:1f:55:d5:c2:f5:45:31:2a:d5:a7:01:de:e9:d9:e4:00:d8:
         6f:29:b5:31:90:5c:84:cf:af:b0:1f:5a:d0:f6:68:fc:3c:09:
         0b:43:db:53:6f:8c:37:c1:ac:28:1b:0b:1c:e7:3d:9d:93:bb:
         01:a6:cc:a7:04:43:05:60:64:41:3d:e0:77:df:c9:22:71:0a:
         15:6a:61:cf:cc:bb:58:ff:5a:bf:82:59:e1:c2:d8:48:e1:26:
         4f:6e:43:2b:32:42:db:e2:41:d6:06:8d:a7:ed:9a:56:d9:08:
         7c:e8:17:46:e2:56:a5:31:77:f6:13:c4:d2:20:cc:0f:20:97:
         3e:24:cc:2b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWpvh7uvwvAjA75neAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzUyZjU0ZTktNGRjNi00OTc2LTk2M2UtZjUxMDg4MTg0
MjIzMB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk
ZWMwMjhkNTctZjVkOC00ZjczLTliMWQtZjFkMjQ2Y2JhNWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtmd8GuMBHer8W6+ZTpDCjAEo+2cKSo1gBlD
c+vJd9lgPStuY8mTjH+taDUR3nnAAEhYCOtv3XmeRYea6wmagIeCYaBp2pmTeGF6
FtxqGEcWQvykeVrvod1fvcvDdQ/qmM9KWvy0xsMuqb4IUFxGlze6NHaa4hGPlVXv
nKqn4yYGOKG+Q9ddo1vhtQ+hb4UBhJXvwZits4lVAKBX9sKF0EvhS5dQcI2ARGtK
G61WYbz/u8UXny+HrADo1eI38q+d0w5TN/DKuVRyiKeaVWPmAce3vwsSGTNvbmJT
a4UGf0AKMo40dTqdcMSh8+2zdHLLvUh5VDmAOs4LQvGewWA/JQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE2IN4AaKKmDo37vQHyWHuuNEq0bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNTJm
NTRlOS00ZGM2LTQ5NzYtOTYzZS1mNTEwODgxODQyMjMvZmY2Mzc1MmItMjllNy0z
ZmMwLWI2YjEtNmViZWY3NGNiMGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzUyZjU0ZTktNGRjNi00OTc2LTk2
M2UtZjUxMDg4MTg0MjIzL2M1MmY1NGU5LTRkYzYtNDk3Ni05NjNlLWY1MTA4ODE4
NDIyMy5jcmwwHwYDVR0jBBgwFoAUWVSn79okDNt2o1j6nTMGLQ4afZMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jNTJmNTRlOS00ZGM2LTQ5NzYtOTYzZS1mNTEw
ODgxODQyMjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFQAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGAeuelechvGUSZ04Dn2MHsqPX2fv4JW5N3mhi4qM3URhiMXDGCG
MniscrcS9pdU+27XgAHyo2lCXJpXcCk3iNX6Ri0sxZ4mxwPoh5lXPNhQPoFuk0/H
hNhHKVJeZTxzkD83/0Pm2tRtheUfoCN3/keyboK/gPaJhhkRZXqVuTMfVdXC9UUx
KtWnAd7p2eQA2G8ptTGQXITPr7AfWtD2aPw8CQtD21NvjDfBrCgbCxznPZ2TuwGm
zKcEQwVgZEE94HffySJxChVqYc/Mu1j/Wr+CWeHC2EjhJk9uQysyQtviQdYGjaft
mlbZCHzoF0biVqUxd/YTxNIgzA8glz4kzCs=
-----END CERTIFICATE-----
Generated at Wed May 22 14:50:24 2024 by rpki-client on console-fra.rpki-client.org