Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/778fe380-e1e5-369c-9007-f01318ff8a6c.roa
File:                     778fe380-e1e5-369c-9007-f01318ff8a6c.roa (raw, json)
Hash identifier:          NX4Pq+nT6Zo5k9LFVcRnH+MWH8EhxdM6klJxmwgqunY=
Subject key identifier:   DB:F6:4C:32:B5:25:68:9C:9D:8A:4E:B7:61:B1:27:4D:52:9F:B5:77
Certificate issuer:       /CN=483acfc7-39d2-4411-8cda-97152f12ce16
Certificate serial:       010D0C9F43285847213B24C4BD5AEFFE9076E58C
Authority key identifier: CF:CE:BC:D0:44:F4:46:17:80:0A:66:51:B0:57:13:33:07:B2:41:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/778fe380-e1e5-369c-9007-f01318ff8a6c.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     267
IP address blocks:        2602:fe55::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/483acfc7-39d2-4411-8cda-97152f12ce16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/483acfc7-39d2-4411-8cda-97152f12ce16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:24:c4:bd:5a:ef:fe:90:76:e5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=483acfc7-39d2-4411-8cda-97152f12ce16
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=356fd60f-6eab-4d85-ab54-1703d41679e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0d:95:e4:1a:df:d7:91:f2:3b:67:85:6f:61:
                    4b:bf:47:00:e9:fb:37:a1:e6:e3:77:71:93:24:ea:
                    02:b5:3f:d0:bf:db:2b:c8:bb:53:99:36:57:ba:a8:
                    d1:f5:46:b0:f5:03:2d:9d:29:d7:a0:de:d7:e8:7c:
                    c4:f4:1b:61:82:dc:1a:95:b9:c6:9c:c1:ba:f7:ea:
                    88:99:37:a6:24:0a:b5:05:c8:59:2f:a7:e6:f9:01:
                    5f:92:92:3c:61:18:49:50:1b:d0:67:06:30:db:6f:
                    30:a8:3a:5d:35:47:79:4d:6f:4a:54:36:e4:47:18:
                    51:68:e3:ed:d7:7c:3c:9d:b3:1c:dc:ea:52:44:1a:
                    be:42:95:ac:4f:4b:c8:73:a7:b1:c4:93:f5:fd:18:
                    5c:8b:49:cd:f6:48:2c:73:9a:3b:6f:34:c1:8a:d7:
                    34:14:45:f0:04:e5:64:e9:0c:09:98:6e:22:e2:60:
                    5f:3c:ad:5a:af:3f:3f:ea:69:9f:b5:64:b0:cb:4a:
                    e8:2c:ef:98:69:c6:5b:ad:d3:43:7b:d9:db:10:30:
                    56:d9:15:e5:58:69:78:95:6f:70:c9:53:4f:14:32:
                    70:d5:16:13:ab:84:f1:dc:bd:f6:b9:be:64:ba:20:
                    44:f3:55:a7:97:8b:ef:a4:3f:bd:99:0c:02:88:b0:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F6:4C:32:B5:25:68:9C:9D:8A:4E:B7:61:B1:27:4D:52:9F:B5:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/778fe380-e1e5-369c-9007-f01318ff8a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/483acfc7-39d2-4411-8cda-97152f12ce16.crl

            X509v3 Authority Key Identifier:
                keyid:CF:CE:BC:D0:44:F4:46:17:80:0A:66:51:B0:57:13:33:07:B2:41:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe55::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:af:39:c0:50:42:76:1a:f5:9b:e2:76:3a:98:2b:a6:2d:71:
         1f:ac:b6:43:cf:45:4a:b2:4d:40:86:9d:7e:c5:33:3d:1f:a9:
         6a:9f:6b:4c:5c:a6:6c:fb:92:2b:02:aa:01:cb:ec:d1:8c:7b:
         5b:9f:19:16:e7:93:55:3b:72:e1:bd:7c:ce:6e:28:f9:9e:67:
         d9:bd:36:9c:e9:2b:57:2b:fe:10:fe:43:74:89:70:a0:42:b9:
         58:31:c3:26:2c:a5:f9:45:53:3a:14:8f:fa:d8:35:0d:e6:13:
         f9:a9:95:8d:6b:c2:2e:cf:3a:ce:f1:6d:2f:b4:97:7b:8e:00:
         7f:dc:ef:60:38:15:09:f2:fe:35:27:61:d2:4b:17:d0:ce:d6:
         48:a8:da:ae:a2:5c:55:72:ee:2e:3d:72:41:65:61:c9:d0:66:
         aa:22:f8:a5:03:15:4b:be:7a:22:67:e0:3a:c9:16:b9:01:1a:
         48:1c:ff:76:94:53:90:a4:4e:31:87:29:bb:04:5f:9a:a3:04:
         73:81:3a:7a:a7:f4:df:8c:63:f4:81:6f:1b:70:b8:52:ad:39:
         d1:ef:7c:58:85:17:15:72:85:39:07:85:b8:17:f3:07:86:10:
         56:49:1a:43:17:da:3e:8c:0a:c4:06:69:27:34:6d:20:9e:fa:
         07:04:b3:ad
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEchOyTEvVrv/pB25YwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDgzYWNmYzctMzlkMi00NDExLThjZGEtOTcxNTJmMTJj
ZTE2MB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk
MzU2ZmQ2MGYtNmVhYi00ZDg1LWFiNTQtMTcwM2Q0MTY3OWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig2V5Brf15HyO2eFb2FLv0cA6fs3oebjd3GT
JOoCtT/Qv9sryLtTmTZXuqjR9Uaw9QMtnSnXoN7X6HzE9BthgtwalbnGnMG69+qI
mTemJAq1BchZL6fm+QFfkpI8YRhJUBvQZwYw228wqDpdNUd5TW9KVDbkRxhRaOPt
13w8nbMc3OpSRBq+QpWsT0vIc6exxJP1/Rhci0nN9kgsc5o7bzTBitc0FEXwBOVk
6QwJmG4i4mBfPK1arz8/6mmftWSwy0roLO+YacZbrdNDe9nbEDBW2RXlWGl4lW9w
yVNPFDJw1RYTq4Tx3L32ub5kuiBE81Wnl4vvpD+9mQwCiLCBbQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNv2TDK1JWicnYpOt2GxJ01Sn7V3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ODNh
Y2ZjNy0zOWQyLTQ0MTEtOGNkYS05NzE1MmYxMmNlMTYvNzc4ZmUzODAtZTFlNS0z
NjljLTkwMDctZjAxMzE4ZmY4YTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDgzYWNmYzctMzlkMi00NDExLThj
ZGEtOTcxNTJmMTJjZTE2LzQ4M2FjZmM3LTM5ZDItNDQxMS04Y2RhLTk3MTUyZjEy
Y2UxNi5jcmwwHwYDVR0jBBgwFoAUz8680ET0RheACmZRsFcTMweyQS4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80ODNhY2ZjNy0zOWQyLTQ0MTEtOGNkYS05NzE1
MmYxMmNlMTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL+VQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAoa85wFBCdhr1m+J2Opgrpi1xH6y2Q89FSrJNQIadfsUzPR+pap9r
TFymbPuSKwKqAcvs0Yx7W58ZFueTVTty4b18zm4o+Z5n2b02nOkrVyv+EP5DdIlw
oEK5WDHDJiyl+UVTOhSP+tg1DeYT+amVjWvCLs86zvFtL7SXe44Af9zvYDgVCfL+
NSdh0ksX0M7WSKjarqJcVXLuLj1yQWVhydBmqiL4pQMVS756ImfgOskWuQEaSBz/
dpRTkKROMYcpuwRfmqMEc4E6eqf034xj9IFvG3C4Uq050e98WIUXFXKFOQeFuBfz
B4YQVkkaQxfaPowKxAZpJzRtIJ76BwSzrQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:15 2024 by rpki-client on console-ams.rpki-client.org