Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa
File:                     83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa (raw, json)
Hash identifier:          qxEAO0tF6bT4XM+y3sPOS4QkyGbYdmHpBnTC0dLci/0=
Subject key identifier:   B2:A9:B0:2C:99:10:45:79:BF:D6:FC:98:FD:ED:AC:A7:04:55:9A:D0
Certificate issuer:       /CN=643914aa-5306-4352-8a01-3ac381827191
Certificate serial:       010D0C9F432858479D76BEA9582C7AEA4083E400
Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     198005
IP address blocks:        2602:fbc7:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:be:a9:58:2c:7a:ea:40:83:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643914aa-5306-4352-8a01-3ac381827191
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=71023d78-86e5-4a16-ac90-0a86f3817404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:66:b4:eb:f2:4e:87:ed:b4:eb:31:c3:70:db:
                    56:c5:91:97:78:cb:c5:0e:87:87:22:3b:5a:bd:2b:
                    50:7d:3b:82:b8:61:70:46:2c:1d:b5:90:e6:17:e0:
                    f5:a1:92:d5:08:93:f7:1f:a3:31:1c:18:21:e1:51:
                    b3:4b:da:7b:14:af:20:b2:63:a0:d5:0b:ef:b1:9d:
                    ac:df:b8:4b:26:99:72:3c:2f:c7:f9:f4:60:a4:41:
                    a9:7c:e0:d1:61:41:74:c3:a9:c3:b8:f8:a8:ce:a0:
                    81:94:68:3d:94:72:b2:a9:02:8b:1f:c3:3d:b3:cb:
                    7c:ca:f3:2c:e3:e9:a2:c9:fc:21:47:7b:aa:13:bc:
                    e4:41:ea:57:59:f5:a1:3f:d8:c9:c8:24:81:f0:b8:
                    75:af:ea:17:66:75:6d:d9:f2:df:94:26:15:80:99:
                    6f:21:63:98:69:17:51:bf:89:c1:40:4e:1d:2c:45:
                    ca:f5:5c:2c:fc:a1:a1:1b:db:02:4d:2b:c8:2d:3e:
                    da:01:07:fd:d8:11:86:21:8a:33:c8:d3:85:4a:12:
                    5d:79:70:35:de:b7:03:f4:a8:4a:92:19:f2:df:07:
                    e4:89:38:6c:a1:17:14:a0:3b:64:54:1a:63:c2:0d:
                    61:3e:5e:fd:fa:8a:21:c4:e2:1f:5a:31:7c:06:28:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A9:B0:2C:99:10:45:79:BF:D6:FC:98:FD:ED:AC:A7:04:55:9A:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl

            X509v3 Authority Key Identifier:
                keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbc7:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4a:ad:21:7d:45:d5:ed:29:3f:6f:39:cc:45:e8:c0:a1:e2:
         c9:bc:0c:08:dc:d5:ea:52:a5:97:eb:5b:2e:cb:a5:cb:c4:bd:
         08:6f:c8:9e:ab:02:ec:70:4b:bb:06:90:8e:3a:f1:8f:b7:51:
         95:66:29:25:db:f2:ec:fd:cb:cb:84:27:f9:d9:da:85:ff:b9:
         64:29:f0:40:f5:ff:ce:c3:8c:80:94:1c:6c:bc:df:5f:6f:50:
         14:df:39:13:4a:d6:14:93:3a:96:2a:48:8c:cc:03:4d:78:94:
         e5:79:3c:7e:f1:db:1f:25:43:1b:1b:3b:08:54:87:0b:e5:01:
         34:ac:35:10:db:e6:d3:72:1e:e6:77:0d:ff:71:d0:79:1d:db:
         c6:24:45:2e:b4:6f:40:6b:38:d9:d9:ae:09:c1:e4:a4:a6:e3:
         1a:3d:3f:f9:06:cf:66:05:1d:1d:d6:6b:b3:7e:15:43:8f:a7:
         93:58:9e:bf:33:f0:f9:df:c7:d2:97:8d:e3:a0:a6:80:71:2f:
         0e:dc:5a:bd:09:8b:4d:e6:65:3a:ac:2f:5d:b6:c1:6e:85:fc:
         d7:f3:07:fb:3e:bd:c2:02:2f:10:3e:89:ba:24:a2:27:4c:a2:
         1b:7d:f2:93:1b:90:ac:c3:82:fc:71:85:eb:65:e6:46:53:61:
         77:f5:1b:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeddr6pWCx66kCD5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQzOTE0YWEtNTMwNi00MzUyLThhMDEtM2FjMzgxODI3
MTkxMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
NzEwMjNkNzgtODZlNS00YTE2LWFjOTAtMGE4NmYzODE3NDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ga06/JOh+206zHDcNtWxZGXeMvFDoeHIjta
vStQfTuCuGFwRiwdtZDmF+D1oZLVCJP3H6MxHBgh4VGzS9p7FK8gsmOg1QvvsZ2s
37hLJplyPC/H+fRgpEGpfODRYUF0w6nDuPiozqCBlGg9lHKyqQKLH8M9s8t8yvMs
4+miyfwhR3uqE7zkQepXWfWhP9jJyCSB8Lh1r+oXZnVt2fLflCYVgJlvIWOYaRdR
v4nBQE4dLEXK9Vws/KGhG9sCTSvILT7aAQf92BGGIYozyNOFShJdeXA13rcD9KhK
khny3wfkiThsoRcUoDtkVBpjwg1hPl79+oohxOIfWjF8BigrHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLKpsCyZEEV5v9b8mP3trKcEVZrQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NDM5
MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4MjcxOTEvODNiY2VjOTktZGUyZS0z
YzMwLTk3OGMtZjZmNmUxMmZmMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjQzOTE0YWEtNTMwNi00MzUyLThh
MDEtM2FjMzgxODI3MTkxLzY0MzkxNGFhLTUzMDYtNDM1Mi04YTAxLTNhYzM4MTgy
NzE5MS5jcmwwHwYDVR0jBBgwFoAU6ypHSeXO8IXeGteSyakttOVzF3EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMz
ODE4MjcxOTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7xwAH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFxKrSF9RdXtKT9vOcxF6MCh4sm8DAjc1epSpZfrWy7LpcvEvQhv
yJ6rAuxwS7sGkI468Y+3UZVmKSXb8uz9y8uEJ/nZ2oX/uWQp8ED1/87DjICUHGy8
319vUBTfORNK1hSTOpYqSIzMA014lOV5PH7x2x8lQxsbOwhUhwvlATSsNRDb5tNy
HuZ3Df9x0Hkd28YkRS60b0BrONnZrgnB5KSm4xo9P/kGz2YFHR3Wa7N+FUOPp5NY
nr8z8Pnfx9KXjeOgpoBxLw7cWr0Ji03mZTqsL122wW6F/NfzB/s+vcICLxA+ibok
oidMoht98pMbkKzDgvxxhetl5kZTYXf1G5g=
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:51 2024 by rpki-client on console-fra.rpki-client.org