Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa
File:                     14ccf9e3-3501-3d49-b394-7e1405d6383d.roa (raw, json)
Hash identifier:          rQgQPzopYurYNUQCImp8zSB9MoRMkM6V16Q96+SFUh0=
Subject key identifier:   59:DD:8E:83:D4:B8:6B:A0:5C:9A:D4:8B:4D:B7:CF:78:F6:20:CF:D8
Certificate issuer:       /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial:       010D0C9F43285847AE36C1D3091A051E71358500
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     62563
IP address blocks:        2602:fec3:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c1:d3:09:1a:05:1e:71:35:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=ead63abb-0d44-483e-8425-f4cb3fc75360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:d6:82:8b:4f:d6:01:7e:d1:d9:04:bc:48:
                    0d:d6:b3:20:9a:99:cb:19:d1:eb:32:6c:f1:2b:42:
                    82:e7:20:b5:4e:48:18:b1:72:55:ec:9f:24:a1:d7:
                    13:29:b4:7a:85:7d:9f:95:92:6c:55:a7:7b:82:c4:
                    c2:a7:0d:2f:52:f3:98:e5:e5:23:1e:57:c7:fe:a2:
                    ed:02:30:1b:d1:72:b2:8f:00:c2:53:ab:6c:1c:bf:
                    82:38:77:f2:09:c8:67:c8:dd:d3:3a:c3:bd:80:da:
                    c8:bf:a6:6f:b6:48:8c:0a:16:c4:9a:66:8a:45:a6:
                    db:80:42:87:b5:af:b9:d2:29:d8:e7:7f:42:c1:d6:
                    f0:21:64:18:7d:fa:42:fa:34:b9:57:7b:f2:06:c4:
                    3a:0b:a0:dc:2e:9b:00:1d:4c:31:27:40:0c:1e:d0:
                    6c:87:70:54:5c:cc:e7:fa:02:0b:ef:96:25:89:e9:
                    dd:98:1e:d2:22:8e:10:5c:27:0a:9e:f0:e5:02:ee:
                    c6:17:e1:c1:a3:d3:72:91:7b:d3:f6:78:6d:5b:4c:
                    95:76:4e:9d:1d:50:8d:e8:83:82:0b:2c:25:c9:18:
                    41:81:e1:bf:05:91:67:ef:9b:83:3b:72:2f:b9:39:
                    43:00:89:3a:8e:b4:06:ec:44:4b:53:40:16:9c:ff:
                    de:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DD:8E:83:D4:B8:6B:A0:5C:9A:D4:8B:4D:B7:CF:78:F6:20:CF:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl

            X509v3 Authority Key Identifier:
                keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fec3:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:56:10:32:c4:7c:af:f3:7e:51:68:69:66:3a:1f:62:a1:aa:
         fc:10:70:26:5a:4e:83:41:ab:2a:4a:cb:26:f7:27:d3:40:eb:
         c5:ff:db:f4:20:30:d4:3d:f9:1b:66:2c:7f:51:90:67:1b:ae:
         f4:82:f7:28:71:2d:eb:94:61:2b:dd:71:f1:e4:01:d1:ab:49:
         58:f2:a3:50:39:3f:0a:8c:62:e4:19:d1:91:17:a8:48:fb:85:
         43:5c:6b:a3:8b:0c:20:69:e1:29:36:76:16:b4:8f:fa:0b:4c:
         14:c3:e0:12:c1:63:89:d8:fd:e4:77:27:d1:80:5e:7d:5c:3b:
         c9:32:c8:4a:8e:0a:1e:ed:8c:d1:32:62:ff:67:96:35:17:1c:
         4e:fb:4f:c3:78:85:88:e7:5a:9f:d6:89:d9:00:85:7c:37:5d:
         78:0c:ba:cc:9c:8c:6d:de:be:fc:75:18:9d:a4:6d:3f:b1:a8:
         7a:00:32:8a:77:6a:4e:ba:1f:be:af:99:f9:4e:fa:62:0c:9e:
         32:ce:8e:39:b9:42:f1:cc:fc:94:cc:2b:68:0f:0b:d0:32:38:
         ee:65:bb:1f:6e:79:09:53:ce:4e:0b:df:4e:60:8c:52:c4:fb:
         be:6c:19:10:4f:1c:56:b8:dc:33:da:65:66:c8:30:fb:97:70:
         bb:8a:0a:59
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEeuNsHTCRoFHnE1hQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0
Mjc4MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
ZWFkNjNhYmItMGQ0NC00ODNlLTg0MjUtZjRjYjNmYzc1MzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuTWgotP1gF+0dkEvEgN1rMgmpnLGdHrMmzx
K0KC5yC1TkgYsXJV7J8kodcTKbR6hX2flZJsVad7gsTCpw0vUvOY5eUjHlfH/qLt
AjAb0XKyjwDCU6tsHL+COHfyCchnyN3TOsO9gNrIv6ZvtkiMChbEmmaKRabbgEKH
ta+50inY539CwdbwIWQYffpC+jS5V3vyBsQ6C6DcLpsAHUwxJ0AMHtBsh3BUXMzn
+gIL75YliendmB7SIo4QXCcKnvDlAu7GF+HBo9NykXvT9nhtW0yVdk6dHVCN6IOC
CywlyRhBgeG/BZFn75uDO3IvuTlDAIk6jrQG7ERLU0AWnP/eYQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFndjoPUuGugXJrUi023z3j2IM/YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2
NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvMTRjY2Y5ZTMtMzUwMS0z
ZDQ5LWIzOTQtN2UxNDA1ZDYzODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw
MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5
NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm
M2MxOTQyNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL+wwIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJFYQMsR8r/N+UWhpZjofYqGq/BBwJlpOg0GrKkrLJvcn00Drxf/b
9CAw1D35G2Ysf1GQZxuu9IL3KHEt65RhK91x8eQB0atJWPKjUDk/Coxi5BnRkReo
SPuFQ1xro4sMIGnhKTZ2FrSP+gtMFMPgEsFjidj95Hcn0YBefVw7yTLISo4KHu2M
0TJi/2eWNRccTvtPw3iFiOdan9aJ2QCFfDddeAy6zJyMbd6+/HUYnaRtP7GoegAy
indqTrofvq+Z+U76YgyeMs6OOblC8cz8lMwraA8L0DI47mW7H255CVPOTgvfTmCM
UsT7vmwZEE8cVrjcM9plZsgw+5dwu4oKWQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:36 2024 by rpki-client on console-fra.rpki-client.org