Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa
File:                     3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa (raw, json)
Hash identifier:          hIaSRuhymLfklclhCaVBlsL0zS2M3/7gwoboj80ZW64=
Subject key identifier:   32:44:1B:2E:42:C0:53:B8:D3:F4:C6:B7:84:3C:EF:F4:60:9F:B6:9A
Certificate issuer:       /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial:       010D0C9F43285845DEC916A3A4A1F10A9D3734C0
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     210645
IP address blocks:        2602:2c9:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:16:a3:a4:a1:f1:0a:9d:37:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=2c2e16b2-de38-4d78-90a8-2d3be25d5838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:f6:80:ab:f8:97:82:85:24:f4:ee:c9:08:
                    3c:db:e6:9a:b9:52:2c:1f:26:8c:41:0c:07:5d:11:
                    f1:60:3a:44:f1:23:ac:7b:a1:11:05:6d:b8:9d:f5:
                    01:c2:38:d4:4f:b6:94:f9:1d:ac:11:9e:b2:de:74:
                    80:fa:42:5a:02:72:e8:32:3d:d9:8c:8a:5e:3b:3f:
                    e0:3a:13:5d:8d:55:73:cd:b3:b7:d6:73:e8:fa:fc:
                    e5:da:1a:48:25:33:66:80:53:f4:da:45:95:b5:54:
                    cb:a4:da:d5:36:bc:a6:2c:7f:a3:48:92:84:67:ff:
                    c5:c5:a7:08:b9:49:b6:8a:21:df:aa:f0:ef:c2:47:
                    8f:ac:13:0e:b1:ae:0d:79:5b:3a:3a:ff:e1:57:f6:
                    1c:2b:2c:fa:1f:4d:56:7b:c3:78:46:16:b9:43:24:
                    7c:c8:65:9c:01:9e:73:da:c9:92:7d:e2:dd:30:71:
                    18:68:8c:ac:6b:ce:b9:28:1c:06:92:71:28:16:16:
                    84:49:74:95:22:4a:f4:a2:be:5f:80:37:75:9c:6a:
                    52:7d:66:46:45:dd:0f:34:b7:a6:60:be:ce:f8:10:
                    ff:1a:5a:dd:ae:b2:0d:fc:ba:d6:e8:a2:40:3a:5c:
                    37:97:89:0d:0c:13:80:43:13:57:27:b0:f6:d2:e4:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:44:1B:2E:42:C0:53:B8:D3:F4:C6:B7:84:3C:EF:F4:60:9F:B6:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c9:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ad:cf:cb:1b:c9:57:71:37:a8:ce:a4:20:15:92:2c:bf:47:
         00:69:b7:d5:dc:0b:b5:e6:79:f8:5f:b5:ed:03:d3:5b:30:cb:
         bb:ea:4a:bd:9b:0f:a5:3b:33:3e:83:16:07:8c:eb:3b:59:a2:
         0b:62:48:d5:92:65:2e:5b:99:e6:72:8e:75:41:94:86:ef:0a:
         e9:42:bb:f7:bf:7d:a7:ca:93:dc:b6:88:85:e6:44:b4:19:e2:
         ce:d3:bf:1c:f3:5e:2c:25:6e:f2:07:97:05:ce:14:7f:32:8a:
         45:4d:0c:db:48:04:a8:d0:eb:4a:df:7c:87:29:23:ba:f6:15:
         c9:54:1f:a0:e7:d7:51:52:cc:cd:cb:2f:a4:83:b0:74:f4:82:
         4c:65:d2:f9:c8:74:03:79:a5:5a:7e:64:9d:df:c5:f3:cc:7d:
         6d:57:34:00:94:86:04:04:2b:dd:9a:87:45:4d:88:52:4e:d6:
         d4:76:be:c6:b4:df:70:73:ff:50:27:d9:07:bb:60:5d:90:b8:
         89:d6:10:34:80:86:50:72:bd:bc:56:94:1d:cc:ba:fb:a8:fa:
         81:8f:d1:2b:91:3b:ff:d1:a6:c8:d3:50:4f:b8:c5:0d:ef:96:
         a2:1d:3d:8d:66:fb:57:0f:1b:e7:c3:a0:21:13:87:b4:28:97:
         71:a4:96:9f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXeyRajpKHxCp03NMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3
ZDcxMB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk
MmMyZTE2YjItZGUzOC00ZDc4LTkwYTgtMmQzYmUyNWQ1ODM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaH2gKv4l4KFJPTuyQg82+aauVIsHyaMQQwH
XRHxYDpE8SOse6ERBW24nfUBwjjUT7aU+R2sEZ6y3nSA+kJaAnLoMj3ZjIpeOz/g
OhNdjVVzzbO31nPo+vzl2hpIJTNmgFP02kWVtVTLpNrVNrymLH+jSJKEZ//FxacI
uUm2iiHfqvDvwkePrBMOsa4NeVs6Ov/hV/YcKyz6H01We8N4Rha5QyR8yGWcAZ5z
2smSfeLdMHEYaIysa865KBwGknEoFhaESXSVIkr0or5fgDd1nGpSfWZGRd0PNLem
YL7O+BD/GlrdrrIN/LrW6KJAOlw3l4kNDBOAQxNXJ7D20uR0LQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDJEGy5CwFO40/TGt4Q87/Rgn7aaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk
NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvM2ZlZGU0Y2ItNGYyZS0z
OGYyLWJiNmQtZGE3NGIxYzI3YTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0
MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1
N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl
NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAKtz8sbyVdxN6jOpCAVkiy/RwBpt9XcC7Xmefhfte0D01swy7vq
Sr2bD6U7Mz6DFgeM6ztZogtiSNWSZS5bmeZyjnVBlIbvCulCu/e/fafKk9y2iIXm
RLQZ4s7TvxzzXiwlbvIHlwXOFH8yikVNDNtIBKjQ60rffIcpI7r2FclUH6Dn11FS
zM3LL6SDsHT0gkxl0vnIdAN5pVp+ZJ3fxfPMfW1XNACUhgQEK92ah0VNiFJO1tR2
vsa033Bz/1An2Qe7YF2QuInWEDSAhlByvbxWlB3Muvuo+oGP0SuRO//RpsjTUE+4
xQ3vlqIdPY1m+1cPG+fDoCETh7Qol3Gklp8=
-----END CERTIFICATE-----
Generated at Sat May 18 01:43:30 2024 by rpki-client on console-fra.rpki-client.org