Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa
File:                     d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa (raw, json)
Hash identifier:          3ltFtH/f6ccYSTUN/QwouVGWas4MpiyxWUyB+ZtHPbo=
Subject key identifier:   A6:48:79:40:9D:54:08:65:4A:48:E3:8F:57:86:5E:F6:C7:0B:1F:2B
Certificate issuer:       /CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0
Certificate serial:       010D0C9F43285847E35F7400D62D9EA270A5CD00
Authority key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     11913
IP address blocks:        2602:816:3000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:74:00:d6:2d:9e:a2:70:a5:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=1512e135-7312-4a61-90c6-c9e804bd0b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a6:de:20:59:85:58:6e:3b:ad:bb:4b:1d:29:
                    9a:cf:cf:bd:e7:ac:68:b6:dc:d8:15:4a:f9:7d:95:
                    e5:2b:69:0c:3f:8e:81:bb:67:58:42:f9:6f:45:77:
                    82:a6:e6:05:7c:16:eb:cd:4a:3b:05:e5:2e:88:95:
                    ab:64:d8:16:39:ec:08:25:c2:73:53:f8:4d:90:c6:
                    d7:a6:cf:ce:46:7f:01:03:4c:29:91:4c:d6:a6:0f:
                    fb:8e:0a:9c:6b:a8:81:f9:5b:a0:9f:a4:59:cd:17:
                    40:08:06:ef:fa:a2:df:43:8f:c2:d7:63:46:58:d6:
                    d5:dd:dc:5b:a8:64:a6:a3:75:6a:bc:6a:1c:9f:04:
                    1c:70:b8:9e:d5:b4:02:ad:36:5e:2e:ce:94:ed:c0:
                    70:e4:be:70:1e:ad:15:88:70:c5:07:ac:45:47:36:
                    df:77:21:46:ff:83:62:92:a5:2c:ac:62:ea:4e:f2:
                    8f:ed:0f:2e:ed:e7:84:bd:68:7c:b3:02:97:37:6d:
                    c7:83:3c:d4:04:77:f0:93:92:64:5c:59:27:a4:d4:
                    5b:13:ef:f0:30:01:41:ef:e2:6a:2c:15:b8:5c:75:
                    e6:87:56:cd:51:6f:b9:b4:c8:15:d3:97:fa:1e:04:
                    1e:96:43:a8:3f:c3:08:bb:8b:fd:4b:9c:93:3b:35:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:48:79:40:9D:54:08:65:4A:48:E3:8F:57:86:5E:F6:C7:0B:1F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl

            X509v3 Authority Key Identifier:
                keyid:FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:816:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f1:6d:32:b9:bd:8f:4d:31:2c:4f:2f:9d:06:93:9b:88:1a:
         8f:3b:cd:4e:75:fb:cb:c3:88:59:e4:9e:6b:b0:07:42:35:fd:
         ba:c0:41:76:ac:af:0a:a2:f7:4f:0d:e3:e9:8c:10:4b:36:86:
         9c:11:6b:6a:c7:36:ba:35:ff:0a:92:8a:17:32:75:d8:c0:5c:
         44:fb:b3:f0:31:e8:50:88:54:58:58:ac:de:24:89:13:4d:e5:
         8c:f7:41:ea:7a:ce:60:5c:f4:6a:12:6f:92:99:a5:17:b3:ae:
         5f:83:f0:91:07:d3:89:75:fe:3c:16:2b:51:b0:b4:13:8a:eb:
         d0:13:78:a8:cb:56:56:b4:91:65:a8:54:28:a8:1d:23:e3:59:
         97:2c:1b:78:15:7e:0a:27:57:83:a4:0a:3b:d5:91:e3:54:68:
         db:eb:b4:67:89:35:e1:90:95:48:00:8a:e0:8c:02:e4:27:b3:
         c5:0c:e3:b5:d3:83:d4:2a:80:b8:2e:14:75:4b:a6:76:16:0d:
         ce:c2:49:38:0a:04:81:72:32:9e:46:bd:d5:5c:d1:49:38:ef:
         33:59:b5:0b:85:55:34:ae:86:b7:d9:1b:24:da:d8:2d:06:50:
         a7:4c:f1:7f:d1:4f:09:15:e0:e3:d4:1a:1c:e1:c8:cf:19:f7:
         4b:cd:d9:24
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfjX3QA1i2eonClzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNm
Y2YwMB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk
MTUxMmUxMzUtNzMxMi00YTYxLTkwYzYtYzllODA0YmQwYjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqbeIFmFWG47rbtLHSmaz8+956xottzYFUr5
fZXlK2kMP46Bu2dYQvlvRXeCpuYFfBbrzUo7BeUuiJWrZNgWOewIJcJzU/hNkMbX
ps/ORn8BA0wpkUzWpg/7jgqca6iB+Vugn6RZzRdACAbv+qLfQ4/C12NGWNbV3dxb
qGSmo3VqvGocnwQccLie1bQCrTZeLs6U7cBw5L5wHq0ViHDFB6xFRzbfdyFG/4Ni
kqUsrGLqTvKP7Q8u7eeEvWh8swKXN23HgzzUBHfwk5JkXFknpNRbE+/wMAFB7+Jq
LBW4XHXmh1bNUW+5tMgV05f6HgQelkOoP8MIu4v9S5yTOzVoAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKZIeUCdVAhlSkjjj1eGXvbHCx8rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMx
Mjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvZDlmOWFjYzktYzMyNC0z
NzNlLWEyYzQtZTQ2MDRmNTZkNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YzMTI5NmYtOGYyZi00MjY4LTg1
OTktNGM0N2QyNWNmY2YwL2NmMzEyOTZmLThmMmYtNDI2OC04NTk5LTRjNDdkMjVj
ZmNmMC5jcmwwHwYDVR0jBBgwFoAU+roXSGw1zYqLPBZgxG+fWA4vXmQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3
ZDI1Y2ZjZjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFjAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGnxbTK5vY9NMSxPL50Gk5uIGo87zU51+8vDiFnknmuwB0I1/brA
QXasrwqi908N4+mMEEs2hpwRa2rHNro1/wqSihcyddjAXET7s/Ax6FCIVFhYrN4k
iRNN5Yz3Qep6zmBc9GoSb5KZpRezrl+D8JEH04l1/jwWK1GwtBOK69ATeKjLVla0
kWWoVCioHSPjWZcsG3gVfgonV4OkCjvVkeNUaNvrtGeJNeGQlUgAiuCMAuQns8UM
47XTg9QqgLguFHVLpnYWDc7CSTgKBIFyMp5GvdVc0Uk47zNZtQuFVTSuhrfZGyTa
2C0GUKdM8X/RTwkV4OPUGhzhyM8Z90vN2SQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org