Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/fc8851b8-385e-3d55-8759-66fb3fa1f38c.roa
File:                     fc8851b8-385e-3d55-8759-66fb3fa1f38c.roa (raw, json)
Hash identifier:          ahi1/WVvnHHCUP30ZjKdH+vzs9F8lzLBj3k9Pv/Aduo=
Subject key identifier:   41:55:3F:A2:20:25:D5:72:B0:05:96:30:3A:64:BC:11:90:75:1B:89
Certificate issuer:       /CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
Certificate serial:       010D0C9F43285847CA3F82529E02F7CD384149C0
Authority key identifier: CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/fc8851b8-385e-3d55-8759-66fb3fa1f38c.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2602:fcee:400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:82:52:9e:02:f7:cd:38:41:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=d2d4ab77-6f97-422f-98ca-f91a9aa5c389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:73:59:66:34:e6:a6:9e:82:f2:fc:5c:8f:32:
                    36:c3:d4:ff:2c:e4:79:a3:93:03:b1:d3:aa:03:b2:
                    d8:c2:63:2d:7e:c9:35:33:1d:a9:af:1a:52:50:78:
                    9b:71:9a:0e:09:4a:ff:f5:b4:7c:7f:9e:9e:17:d0:
                    96:a7:a7:de:cb:44:6d:ce:5c:a0:5a:40:3a:94:ea:
                    54:8c:24:06:2c:fd:50:6b:a1:54:af:b4:dc:01:8e:
                    32:d2:b0:a1:42:22:54:1a:c4:7e:f8:dc:c4:4c:77:
                    3b:61:4c:8a:a4:7d:de:88:e2:4b:a9:33:7d:49:d9:
                    1f:7e:95:12:8f:e0:11:13:eb:21:dc:22:aa:3f:a6:
                    d5:5f:32:c7:4d:9d:de:ae:8c:33:e5:84:2c:91:31:
                    8c:ed:92:dc:eb:64:87:72:a3:73:ea:f4:d5:93:ad:
                    c9:99:2e:7d:de:82:ab:54:a5:f5:23:29:e6:63:97:
                    7e:af:8f:54:21:31:8d:9c:9c:46:91:76:86:c8:62:
                    17:15:73:85:d8:7c:20:68:30:f1:e9:72:05:96:6c:
                    7c:92:c5:31:3d:28:a9:4b:6f:88:a2:41:b9:40:1e:
                    ca:4f:5d:44:40:a0:fa:98:fe:42:9d:ef:a5:63:b4:
                    b6:63:76:1c:b5:18:a7:2e:9b:88:99:37:e2:8a:31:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:55:3F:A2:20:25:D5:72:B0:05:96:30:3A:64:BC:11:90:75:1B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/fc8851b8-385e-3d55-8759-66fb3fa1f38c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcee:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:29:11:cd:28:93:98:c9:d3:5c:ef:20:87:44:14:ed:65:93:
         51:f0:d1:b5:29:35:20:f4:19:06:2e:b6:01:6b:83:1e:f6:c9:
         3c:c6:7c:a4:64:b6:43:eb:87:91:70:95:cd:16:87:3e:07:b5:
         6c:8c:df:00:bd:31:58:85:44:83:9e:8f:06:31:42:97:2a:2b:
         2c:b4:20:6c:4a:58:24:35:9d:31:b5:a5:0f:b6:09:23:e5:68:
         fb:9b:20:0b:c6:02:33:4a:79:bb:9a:94:d9:84:5d:d7:0c:1f:
         19:e0:14:6a:a7:73:86:0f:f5:7a:ae:fb:c8:bc:4f:da:cb:e1:
         16:13:84:3c:b7:da:7e:a2:ab:77:52:9e:74:c8:a9:ea:c6:af:
         f2:9a:7c:ff:7e:f7:76:1d:ed:46:c6:fa:af:df:1a:46:76:0e:
         be:af:54:79:f7:2f:0f:9f:39:cc:aa:d5:49:56:30:b0:b1:b6:
         4d:ec:7b:e5:0d:7e:19:d0:3f:1b:e5:fb:47:40:a3:1b:ca:51:
         02:82:bc:a3:4f:3b:e5:c7:55:f8:5b:f3:1d:0a:62:d0:81:66:
         23:82:3e:b7:52:2e:f0:07:5c:f6:64:95:5a:ba:c2:fa:e6:e2:
         6a:0b:38:20:15:3a:16:58:b9:2c:fa:c6:d3:3f:03:e3:1c:27:
         c8:bf:f6:63
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfKP4JSngL3zThBScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE4MTZhZTYtNTE4Ni00NGY3LWFlNWItZWMxMzM4Yjdh
NzdhMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDJkNGFiNzctNmY5Ny00MjJmLTk4Y2EtZjkxYTlhYTVjMzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinNZZjTmpp6C8vxcjzI2w9T/LOR5o5MDsdOq
A7LYwmMtfsk1Mx2prxpSUHibcZoOCUr/9bR8f56eF9CWp6fey0RtzlygWkA6lOpU
jCQGLP1Qa6FUr7TcAY4y0rChQiJUGsR++NzETHc7YUyKpH3eiOJLqTN9SdkffpUS
j+ARE+sh3CKqP6bVXzLHTZ3erowz5YQskTGM7ZLc62SHcqNz6vTVk63JmS593oKr
VKX1IynmY5d+r49UITGNnJxGkXaGyGIXFXOF2HwgaDDx6XIFlmx8ksUxPSipS2+I
okG5QB7KT11EQKD6mP5Cne+lY7S2Y3YctRinLpuImTfiijGngQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEFVP6IgJdVysAWWMDpkvBGQdRuJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMTgx
NmFlNi01MTg2LTQ0ZjctYWU1Yi1lYzEzMzhiN2E3N2EvZmM4ODUxYjgtMzg1ZS0z
ZDU1LTg3NTktNjZmYjNmYTFmMzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTE4MTZhZTYtNTE4Ni00NGY3LWFl
NWItZWMxMzM4YjdhNzdhL2UxODE2YWU2LTUxODYtNDRmNy1hZTViLWVjMTMzOGI3
YTc3YS5jcmwwHwYDVR0jBBgwFoAUzs4Ag6hVUyVkoML7oxzNirrmnAIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lMTgxNmFlNi01MTg2LTQ0ZjctYWU1Yi1lYzEz
MzhiN2E3N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL87gQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASykRzSiTmMnTXO8gh0QU7WWTUfDRtSk1IPQZBi62AWuDHvbJPMZ8
pGS2Q+uHkXCVzRaHPge1bIzfAL0xWIVEg56PBjFClyorLLQgbEpYJDWdMbWlD7YJ
I+Vo+5sgC8YCM0p5u5qU2YRd1wwfGeAUaqdzhg/1eq77yLxP2svhFhOEPLfafqKr
d1KedMip6sav8pp8/373dh3tRsb6r98aRnYOvq9UefcvD585zKrVSVYwsLG2Tex7
5Q1+GdA/G+X7R0CjG8pRAoK8o0875cdV+FvzHQpi0IFmI4I+t1Iu8Adc9mSVWrrC
+ubiags4IBU6Fli5LPrG0z8D4xwnyL/2Yw==
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:59:07 2024 by rpki-client on console-fra.rpki-client.org