Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa
File:                     4e00c024-f493-3f70-9db1-bef788678325.roa (raw, json)
Hash identifier:          pZVZ58fGqu2Rx4Ie+h0OrwKxQ1bnj9DRSKRPZQpU7OQ=
Subject key identifier:   54:B3:2E:52:A3:E8:63:D1:BB:88:70:EB:82:94:40:77:14:F1:06:76
Certificate issuer:       /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial:       010D0C9F432858479D76BF868EB56DC5405A8980
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     210645
IP address blocks:        2602:2c9::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:bf:86:8e:b5:6d:c5:40:5a:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=a4f645f8-5e4e-4cd7-84ad-6fafa26cbc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:c8:32:4b:8e:e8:53:3d:97:ec:b0:ff:63:
                    b7:16:51:c4:8b:48:6b:c0:cd:6b:4a:2e:07:83:a0:
                    ed:c7:e5:33:23:1c:b4:5b:66:e9:c9:d9:4c:14:bb:
                    fc:bc:a0:e6:16:15:41:41:56:88:71:61:82:85:a9:
                    9b:f5:13:ba:4f:69:85:7b:0a:d8:44:a5:af:ab:ee:
                    e3:56:9b:2b:c1:e5:29:77:43:2a:b9:3b:c3:b9:4d:
                    fc:1c:3b:73:18:61:ff:bd:94:ab:ca:51:48:53:eb:
                    b5:8e:a8:35:ba:6b:c0:16:fd:aa:b8:f3:54:4d:be:
                    a6:5e:ba:7f:d9:6a:23:33:c2:6f:e7:92:46:9f:e8:
                    43:be:57:bc:0b:f1:6f:45:61:03:fc:4b:d0:ed:31:
                    df:ef:ec:38:0c:39:90:8a:f4:97:c5:28:f1:61:70:
                    df:f0:62:93:31:e4:08:89:63:2b:9a:06:3e:2f:3f:
                    a9:8c:5d:6b:b3:d2:e3:cc:17:0d:a5:c0:54:4d:0b:
                    37:a3:5a:ec:73:23:46:dc:2b:a7:bf:9e:87:87:29:
                    74:4a:46:4a:bd:e3:36:9b:1c:19:65:54:9d:bc:a1:
                    d1:36:97:02:8d:ea:61:93:e4:1f:ee:d8:16:80:0b:
                    b4:56:2e:1b:c2:8e:bf:d8:56:8d:04:33:af:63:12:
                    d7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B3:2E:52:A3:E8:63:D1:BB:88:70:EB:82:94:40:77:14:F1:06:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c9::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:cc:1f:ec:53:0b:ed:ac:7e:fc:ae:85:60:df:69:5e:b6:15:
         ba:3d:36:cf:7c:a6:1d:72:3a:0d:08:32:b4:f5:0f:60:f4:6f:
         e2:7c:3e:8b:67:a7:f2:77:ad:f9:0a:fc:aa:b2:65:8e:4b:51:
         fc:58:23:89:67:51:60:ec:c6:84:18:26:47:0f:d1:de:6c:16:
         8d:63:a1:62:f4:32:37:9c:36:b6:e9:f1:ad:ba:47:5d:4b:5a:
         c6:c4:ef:29:94:f6:9a:84:d0:26:b2:28:65:09:43:6e:4d:90:
         31:ac:a9:ca:d6:cc:59:eb:a9:71:41:3c:b9:41:90:a3:8a:9f:
         4a:07:4f:5d:c9:ee:88:d9:b5:94:76:70:f5:4d:64:21:7d:77:
         40:00:5c:62:f8:86:fd:4d:4a:4b:9d:f9:cb:b6:e5:85:e2:cd:
         51:49:e5:a8:f5:71:37:2f:e3:4a:a7:fb:16:41:fb:ac:e2:13:
         1d:9d:72:91:5c:c6:4e:49:a1:88:2e:cc:0d:96:61:32:af:1b:
         ac:06:e2:d4:27:3d:fd:75:f3:37:22:bf:04:65:99:b4:92:dd:
         96:94:f2:b2:fa:db:d7:c3:4d:15:71:1f:3f:12:3c:f6:14:10:
         58:cd:1a:6c:58:6c:7f:8b:29:1c:e6:f6:4b:6a:ce:65:42:19:
         44:7f:d3:34
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEeddr+GjrVtxUBaiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3
ZDcxMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
YTRmNjQ1ZjgtNWU0ZS00Y2Q3LTg0YWQtNmZhZmEyNmNiYzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaTIMkuO6FM9l+yw/2O3FlHEi0hrwM1rSi4H
g6Dtx+UzIxy0W2bpydlMFLv8vKDmFhVBQVaIcWGChamb9RO6T2mFewrYRKWvq+7j
VpsrweUpd0MquTvDuU38HDtzGGH/vZSrylFIU+u1jqg1umvAFv2quPNUTb6mXrp/
2WojM8Jv55JGn+hDvle8C/FvRWED/EvQ7THf7+w4DDmQivSXxSjxYXDf8GKTMeQI
iWMrmgY+Lz+pjF1rs9LjzBcNpcBUTQs3o1rscyNG3Cunv56Hhyl0SkZKveM2mxwZ
ZVSdvKHRNpcCjephk+Qf7tgWgAu0Vi4bwo6/2FaNBDOvYxLX6QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFSzLlKj6GPRu4hw64KUQHcU8QZ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk
NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvNGUwMGMwMjQtZjQ5My0z
ZjcwLTlkYjEtYmVmNzg4Njc4MzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0
MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1
N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl
NjgzNTdkNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgICyQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKswf7FML7ax+/K6FYN9pXrYVuj02z3ymHXI6DQgytPUPYPRv4nw+
i2en8net+Qr8qrJljktR/FgjiWdRYOzGhBgmRw/R3mwWjWOhYvQyN5w2tunxrbpH
XUtaxsTvKZT2moTQJrIoZQlDbk2QMaypytbMWeupcUE8uUGQo4qfSgdPXcnuiNm1
lHZw9U1kIX13QABcYviG/U1KS535y7blheLNUUnlqPVxNy/jSqf7FkH7rOITHZ1y
kVzGTkmhiC7MDZZhMq8brAbi1Cc9/XXzNyK/BGWZtJLdlpTysvrb18NNFXEfPxI8
9hQQWM0abFhsf4spHOb2S2rOZUIZRH/TNA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:09:44 2024 by rpki-client on console-fra.rpki-client.org