Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa
File:                     38aa2871-1127-35de-be08-5b917c38fae4.roa (raw, json)
Hash identifier:          LwnnxNcOHjN7WAM7qZtpAFQYcGsgc/6Eo3MrzGOXbeA=
Subject key identifier:   B8:B6:09:CA:13:DF:5B:D7:42:1A:92:A4:A1:27:38:1E:99:32:B1:03
Certificate issuer:       /CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce
Certificate serial:       010D0C9F432858456F1DC7FCA79E6C76252B7BC0
Authority key identifier: A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        2602:2df::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:c7:fc:a7:9e:6c:76:25:2b:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=2fb5f792-0a31-4947-b120-86a1e2a18d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:82:62:17:05:68:27:16:12:87:6f:1a:e0:85:
                    dd:8f:35:80:c1:53:15:70:bb:86:45:c9:58:87:2f:
                    32:b8:30:c8:1e:bc:ee:17:04:05:3a:84:b2:d4:70:
                    70:3c:38:76:52:d6:e0:cf:87:b9:24:2c:b5:76:3d:
                    a4:a3:3b:20:5b:1d:85:d9:8d:ac:2e:78:8d:56:23:
                    05:b7:b2:32:6f:22:46:f8:e0:d4:b6:b3:e3:bd:73:
                    0b:ee:f8:20:1e:35:7c:35:48:ac:53:56:db:e8:43:
                    c5:2f:fd:b3:b6:ef:f9:85:7f:c6:33:0c:f8:a0:92:
                    3a:b9:c7:86:c4:35:e6:99:b7:36:bf:67:e7:ac:49:
                    ca:08:5f:eb:90:1b:96:b9:96:89:cf:43:58:b6:fd:
                    38:b7:b9:ba:5e:85:b8:61:af:a8:16:09:6c:c4:60:
                    ec:78:93:ae:c8:5a:bb:13:04:c0:c1:f8:92:47:fa:
                    f5:c7:0a:9c:5d:c5:ff:ad:33:fe:70:b5:e3:39:af:
                    30:4d:7d:25:ae:dc:58:b8:67:c7:5b:d3:63:d8:3a:
                    61:62:2b:48:c0:e8:a8:f0:e2:dd:95:ea:34:b9:37:
                    e5:2c:fb:f4:54:a9:c8:de:f6:95:9d:92:a3:fa:f5:
                    72:54:4d:50:44:84:a6:da:64:8e:c5:68:cd:7b:5b:
                    5b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B6:09:CA:13:DF:5B:D7:42:1A:92:A4:A1:27:38:1E:99:32:B1:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.crl

            X509v3 Authority Key Identifier:
                keyid:A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2df::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:fa:c1:f0:53:0c:68:76:f7:30:99:ea:4b:df:33:1a:f2:0b:
         a4:08:20:49:64:a2:9b:3d:b5:30:24:b3:f5:b3:86:8a:92:1e:
         3b:86:a9:87:84:87:2e:08:e7:f4:b7:ee:96:3f:05:2f:81:43:
         89:b3:dc:24:ba:5f:9a:6e:bf:78:e7:db:d0:9e:cb:60:83:43:
         63:6d:e9:d2:55:ae:0d:bc:67:91:18:43:52:cc:06:70:70:b6:
         f3:16:22:94:29:4b:83:85:76:39:1f:a5:e5:a4:dd:09:ba:cd:
         cf:7d:71:cf:7b:16:80:82:81:45:9c:6f:92:1a:b0:8d:df:e0:
         09:75:d1:21:6b:ad:f6:8f:ff:ad:aa:9e:79:e4:90:3b:34:6e:
         c8:51:66:43:4c:f2:03:05:b1:c4:fd:e0:71:ea:35:9c:42:98:
         1e:bc:e0:1f:ed:b5:e6:0e:7c:11:c2:5e:7d:40:77:7e:91:52:
         8d:fe:48:d7:1f:f1:5f:18:30:d3:ff:88:b6:23:14:8a:2a:9c:
         3c:0a:16:a4:e1:bd:3a:fc:2c:c4:21:1e:c6:3b:38:a7:16:d0:
         ca:3c:05:b5:3d:d8:14:7f:d2:f6:bb:61:ef:56:54:70:86:96:
         33:0e:f1:e2:3e:3a:02:e4:93:39:ca:ce:e9:f0:f6:8c:e6:fd:
         dc:9a:f6:64
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVvHcf8p55sdiUre8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDQzZTkzZDYtNDdmMy00ZGZmLWE3ZDItZDdkZTRhMmEw
NGNlMB4XDTI0MDQwNDEzMDAzNloXDTI0MDcwMzEzMDAzNlowLzEtMCsGA1UEAxMk
MmZiNWY3OTItMGEzMS00OTQ3LWIxMjAtODZhMWUyYTE4ZDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYJiFwVoJxYSh28a4IXdjzWAwVMVcLuGRclY
hy8yuDDIHrzuFwQFOoSy1HBwPDh2Utbgz4e5JCy1dj2kozsgWx2F2Y2sLniNViMF
t7IybyJG+ODUtrPjvXML7vggHjV8NUisU1bb6EPFL/2ztu/5hX/GMwz4oJI6uceG
xDXmmbc2v2fnrEnKCF/rkBuWuZaJz0NYtv04t7m6XoW4Ya+oFglsxGDseJOuyFq7
EwTAwfiSR/r1xwqcXcX/rTP+cLXjOa8wTX0lrtxYuGfHW9Nj2DphYitIwOio8OLd
leo0uTflLPv0VKnI3vaVnZKj+vVyVE1QRISm2mSOxWjNe1tb5QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLi2CcoT31vXQhqSpKEnOB6ZMrEDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NDNl
OTNkNi00N2YzLTRkZmYtYTdkMi1kN2RlNGEyYTA0Y2UvMzhhYTI4NzEtMTEyNy0z
NWRlLWJlMDgtNWI5MTdjMzhmYWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDQzZTkzZDYtNDdmMy00ZGZmLWE3
ZDItZDdkZTRhMmEwNGNlLzQ0M2U5M2Q2LTQ3ZjMtNGRmZi1hN2QyLWQ3ZGU0YTJh
MDRjZS5jcmwwHwYDVR0jBBgwFoAUoHZOjRPy6znnFgLswCZditWT4lswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80NDNlOTNkNi00N2YzLTRkZmYtYTdkMi1kN2Rl
NGEyYTA0Y2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIC3wAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVfrB8FMMaHb3MJnqS98zGvILpAggSWSimz21MCSz9bOGipIeO4ap
h4SHLgjn9Lfulj8FL4FDibPcJLpfmm6/eOfb0J7LYINDY23p0lWuDbxnkRhDUswG
cHC28xYilClLg4V2OR+l5aTdCbrNz31xz3sWgIKBRZxvkhqwjd/gCXXRIWut9o//
raqeeeSQOzRuyFFmQ0zyAwWxxP3gceo1nEKYHrzgH+215g58EcJefUB3fpFSjf5I
1x/xXxgw0/+ItiMUiiqcPAoWpOG9OvwsxCEexjs4pxbQyjwFtT3YFH/S9rth71ZU
cIaWMw7x4j46AuSTOcrO6fD2jOb93Jr2ZA==
-----END CERTIFICATE-----
Generated at Fri May 3 01:53:59 2024 by rpki-client on console-fra.rpki-client.org