Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa
File:                     ab70b155-c31f-3dfa-b48d-947689c8f9df.roa (raw, json)
Hash identifier:          DY1yB20jYyUrSePMzlHhmkSeN9odeCIxcBgOXPzN8FE=
Subject key identifier:   AE:F1:FD:6C:CF:A9:64:26:A7:16:D4:42:A0:21:81:EC:AA:AD:A6:91
Certificate issuer:       /CN=e48dc9aa-413f-45f8-9a4e-20346bdcca64
Certificate serial:       010D0C9F43285845F51E9536A2675D5AB1CDA680
Authority key identifier: 73:F2:EF:9F:7B:AB:1D:FA:60:EB:45:BD:F6:94:39:DA:68:7C:31:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     29770
IP address blocks:        2602:faae::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:95:36:a2:67:5d:5a:b1:cd:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e48dc9aa-413f-45f8-9a4e-20346bdcca64
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=6150ef3d-46f5-4970-a9fc-64bc51ddbaff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3b:06:99:62:f1:2c:66:06:39:8f:1d:a0:ea:
                    78:ab:58:65:62:ed:35:f8:dd:7e:c0:04:5a:62:97:
                    62:13:ea:e0:9d:b0:a9:ce:c8:8f:21:00:6b:d8:06:
                    d1:80:b8:bb:a0:ff:3b:82:9b:a4:1d:ac:08:20:cb:
                    ab:de:8e:25:48:b5:a6:1d:c0:ec:81:19:ac:87:93:
                    b9:06:27:ed:d4:2b:52:09:ea:5c:20:38:ef:48:55:
                    da:57:d2:bb:9f:d5:31:86:95:0e:a5:8c:49:e9:aa:
                    1d:bf:50:b7:fe:f7:3a:ed:96:2d:14:88:72:0a:56:
                    5b:99:a5:db:74:42:b7:01:66:06:99:da:fb:9e:f2:
                    f2:7a:11:c6:13:f2:f0:d2:65:2f:b7:6a:80:da:23:
                    bf:49:d9:4a:1a:cb:36:18:44:e2:69:ee:80:d4:fe:
                    d6:86:44:2a:ff:e3:89:6f:32:f3:f6:40:a0:a5:53:
                    26:5b:90:65:7c:b1:36:03:d3:e8:82:87:0e:68:8f:
                    20:eb:46:00:ae:9f:22:1b:d8:4b:16:52:bb:d1:50:
                    46:2e:58:e9:21:43:8e:22:6b:ef:44:bb:41:29:31:
                    5f:b4:f1:47:b9:c7:ad:bd:8a:18:bb:6f:f3:b1:96:
                    f3:f5:6a:07:ab:54:6f:e1:27:a7:23:d9:a0:44:41:
                    4d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F1:FD:6C:CF:A9:64:26:A7:16:D4:42:A0:21:81:EC:AA:AD:A6:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.crl

            X509v3 Authority Key Identifier:
                keyid:73:F2:EF:9F:7B:AB:1D:FA:60:EB:45:BD:F6:94:39:DA:68:7C:31:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faae::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:28:36:d4:07:97:4c:37:85:fa:96:8c:70:f4:55:2f:b2:fd:
         0b:b7:51:bd:7f:eb:ec:2d:02:37:c6:60:89:51:a3:4e:66:3f:
         a3:d1:34:45:7d:b6:58:a2:75:54:4a:d5:fc:c2:c6:ad:d5:17:
         a1:72:fe:15:de:89:d1:21:4f:5e:5e:9d:18:58:73:f1:ff:73:
         dc:e2:78:8c:19:c2:6f:3e:42:6c:00:6a:76:aa:62:e4:e6:59:
         17:39:f5:b4:ea:52:bf:2e:17:c4:6c:5a:85:f1:77:86:7a:a3:
         0d:c4:13:24:95:ee:ab:0f:bf:2a:66:03:fb:f5:c1:67:6c:dd:
         f8:21:87:25:16:7d:7c:5b:ae:e0:b5:6d:2d:65:a8:81:96:29:
         c1:c1:aa:dc:d7:2d:f6:cf:d9:c6:b3:36:5b:d2:dc:96:09:c8:
         5d:67:96:e6:bd:15:4e:81:45:2d:45:20:dd:9f:03:32:ec:c0:
         9c:ea:2b:f8:a3:a9:47:80:76:58:8e:db:a9:a2:60:54:4e:75:
         d8:15:4b:a7:f1:d2:ea:3b:a1:51:14:ff:77:c2:32:21:c7:22:
         c6:99:3c:55:e2:04:34:7d:0d:e8:28:b6:8a:f1:23:71:52:71:
         a2:1c:7d:71:bf:34:35:38:c5:67:ac:21:77:0a:ae:03:65:eb:
         25:6d:e1:ac
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEX1HpU2omddWrHNpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ4ZGM5YWEtNDEzZi00NWY4LTlhNGUtMjAzNDZiZGNj
YTY0MB4XDTI0MDUyMjEzMDAzM1oXDTI0MDgyMDEzMDAzM1owLzEtMCsGA1UEAxMk
NjE1MGVmM2QtNDZmNS00OTcwLWE5ZmMtNjRiYzUxZGRiYWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTsGmWLxLGYGOY8doOp4q1hlYu01+N1+wARa
YpdiE+rgnbCpzsiPIQBr2AbRgLi7oP87gpukHawIIMur3o4lSLWmHcDsgRmsh5O5
Bift1CtSCepcIDjvSFXaV9K7n9UxhpUOpYxJ6aodv1C3/vc67ZYtFIhyClZbmaXb
dEK3AWYGmdr7nvLyehHGE/Lw0mUvt2qA2iO/SdlKGss2GETiae6A1P7WhkQq/+OJ
bzLz9kCgpVMmW5BlfLE2A9PogocOaI8g60YArp8iG9hLFlK70VBGLljpIUOOImvv
RLtBKTFftPFHucetvYoYu2/zsZbz9WoHq1Rv4SenI9mgREFNcQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFK7x/WzPqWQmpxbUQqAhgeyqraaRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDhk
YzlhYS00MTNmLTQ1ZjgtOWE0ZS0yMDM0NmJkY2NhNjQvYWI3MGIxNTUtYzMxZi0z
ZGZhLWI0OGQtOTQ3Njg5YzhmOWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTQ4ZGM5YWEtNDEzZi00NWY4LTlh
NGUtMjAzNDZiZGNjYTY0L2U0OGRjOWFhLTQxM2YtNDVmOC05YTRlLTIwMzQ2YmRj
Y2E2NC5jcmwwHwYDVR0jBBgwFoAUc/Lvn3urHfpg60W99pQ52mh8MUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDhkYzlhYS00MTNmLTQ1ZjgtOWE0ZS0yMDM0
NmJkY2NhNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6rgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAICg21AeXTDeF+paMcPRVL7L9C7dRvX/r7C0CN8ZgiVGjTmY/o9E0
RX22WKJ1VErV/MLGrdUXoXL+Fd6J0SFPXl6dGFhz8f9z3OJ4jBnCbz5CbABqdqpi
5OZZFzn1tOpSvy4XxGxahfF3hnqjDcQTJJXuqw+/KmYD+/XBZ2zd+CGHJRZ9fFuu
4LVtLWWogZYpwcGq3Nct9s/ZxrM2W9LclgnIXWeW5r0VToFFLUUg3Z8DMuzAnOor
+KOpR4B2WI7bqaJgVE512BVLp/HS6juhURT/d8IyIccixpk8VeIENH0N6Ci2ivEj
cVJxohx9cb80NTjFZ6whdwquA2XrJW3hrA==
-----END CERTIFICATE-----
Generated at Thu May 23 03:49:20 2024 by rpki-client on console-fra.rpki-client.org