Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/70f6ce32-914d-3ade-aaec-7242de0d75b2.roa
File:                     70f6ce32-914d-3ade-aaec-7242de0d75b2.roa (raw, json)
Hash identifier:          fpcIAG6RpZygfencgnz+B5KEPXnn5X9UFWuCpb8nDb8=
Subject key identifier:   22:52:C3:6B:B0:55:A0:E8:42:C2:94:8B:DD:55:25:6E:51:C6:A5:BD
Certificate issuer:       /CN=747306d8-f469-4e78-a1fc-d958dfc4f31b
Certificate serial:       010D0C9F43285847C7749164D4CCBA26211B6A80
Authority key identifier: 3A:6B:C4:F3:A8:7E:D4:46:1E:35:DC:C5:58:63:4A:AE:8A:B6:94:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/70f6ce32-914d-3ade-aaec-7242de0d75b2.roa
Signing time:             Tue 05 Nov 2024 14:00:38 +0000
ROA not before:           Tue 05 Nov 2024 14:00:38 +0000
ROA not after:            Mon 03 Feb 2025 14:00:38 +0000
asID:                     30581
IP address blocks:        2602:2a3:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/747306d8-f469-4e78-a1fc-d958dfc4f31b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/747306d8-f469-4e78-a1fc-d958dfc4f31b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c7:74:91:64:d4:cc:ba:26:21:1b:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747306d8-f469-4e78-a1fc-d958dfc4f31b
        Validity
            Not Before: Nov  5 14:00:38 2024 GMT
            Not After : Feb  3 14:00:38 2025 GMT
        Subject: CN=b7c2fb79-7667-4688-8a8a-ce9b6181bb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:1c:69:66:97:04:ee:72:7e:a8:33:68:42:
                    e6:a4:72:60:f0:d9:2e:4a:58:e3:c5:4d:d3:e5:91:
                    89:ff:5d:68:14:cd:7b:18:ea:7e:79:aa:f5:44:2e:
                    a6:b7:f6:b0:af:ae:ba:e3:b3:b2:90:a1:83:9e:8a:
                    e6:28:fa:cf:97:ca:32:4a:a2:0a:4e:c6:84:85:6c:
                    f1:1b:6b:f7:8b:cc:0b:35:52:a4:a2:7b:c1:74:eb:
                    97:96:55:ad:6e:81:57:99:57:0a:61:3d:4f:af:94:
                    a5:a7:2b:6b:59:d0:79:6b:c0:82:82:45:c0:37:e2:
                    9e:57:0f:14:8f:6b:21:34:b7:66:1f:71:9e:b9:3b:
                    ca:ce:7f:9d:e7:f0:8a:a1:c3:e2:b8:a2:8b:e6:2d:
                    dd:7e:83:41:a4:47:4a:23:85:98:62:8a:0b:19:02:
                    d1:5a:b1:ab:c3:bb:9a:01:1f:9d:9c:60:1e:5c:09:
                    3e:93:1f:fe:77:a2:9c:0f:02:d1:2b:63:33:88:dd:
                    0a:9c:85:c7:cf:3d:88:6d:87:76:5b:c0:de:83:85:
                    57:f4:03:b7:af:47:55:b9:74:42:6e:36:18:14:57:
                    6a:44:d6:f3:46:e0:d9:6c:48:b8:cd:ba:3c:72:cd:
                    e8:af:bd:c5:3d:b8:d5:33:f8:01:4e:c2:a0:7f:73:
                    35:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:52:C3:6B:B0:55:A0:E8:42:C2:94:8B:DD:55:25:6E:51:C6:A5:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/70f6ce32-914d-3ade-aaec-7242de0d75b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/747306d8-f469-4e78-a1fc-d958dfc4f31b.crl

            X509v3 Authority Key Identifier:
                keyid:3A:6B:C4:F3:A8:7E:D4:46:1E:35:DC:C5:58:63:4A:AE:8A:B6:94:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9d:5d:a3:cd:4e:81:21:0c:dd:3a:75:d8:86:35:ff:51:ba:
         16:05:c1:3a:f9:35:48:10:25:9d:5f:46:55:71:d6:b7:54:10:
         27:da:8b:5f:ac:cc:21:c2:2b:81:46:d5:e1:bf:58:6d:d5:06:
         75:cc:e9:e6:d3:8a:5b:ea:a9:ff:0f:6e:01:f4:e3:c7:24:71:
         c3:b7:1f:bb:5f:e7:9b:e8:e7:7f:dd:12:83:91:b3:92:29:b9:
         26:49:66:88:6f:36:c2:20:f4:e1:57:ba:91:d1:81:c9:83:ce:
         84:49:59:ec:fc:2c:14:01:f8:99:42:f8:b3:d9:c8:fa:42:54:
         dd:95:95:ec:6f:a5:3e:2c:d0:55:b5:80:8d:5c:1c:67:44:9a:
         48:05:55:70:ff:41:72:18:f3:cd:4e:4d:1e:bf:23:74:cf:23:
         55:f0:6b:69:58:5c:80:a8:dd:90:e6:7f:be:f0:df:09:62:52:
         fd:c5:5d:57:3c:0e:e5:57:62:a7:60:46:b3:04:be:85:25:60:
         0a:b9:b2:81:a5:19:01:48:a3:03:66:52:8d:88:fd:fb:39:77:
         e7:a9:52:ef:14:56:dc:e9:f2:30:5d:2d:d9:37:1f:2f:cc:27:
         ca:86:2c:93:32:aa:a6:a4:63:74:7a:0c:9b:4d:55:0d:4c:a7:
         8c:47:9c:23
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfHdJFk1My6JiEbaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ3MzA2ZDgtZjQ2OS00ZTc4LWExZmMtZDk1OGRmYzRm
MzFiMB4XDTI0MTEwNTE0MDAzOFoXDTI1MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk
YjdjMmZiNzktNzY2Ny00Njg4LThhOGEtY2U5YjYxODFiYjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV4caWaXBO5yfqgzaELmpHJg8NkuSljjxU3T
5ZGJ/11oFM17GOp+ear1RC6mt/awr66647OykKGDnormKPrPl8oySqIKTsaEhWzx
G2v3i8wLNVKkonvBdOuXllWtboFXmVcKYT1Pr5SlpytrWdB5a8CCgkXAN+KeVw8U
j2shNLdmH3GeuTvKzn+d5/CKocPiuKKL5i3dfoNBpEdKI4WYYooLGQLRWrGrw7ua
AR+dnGAeXAk+kx/+d6KcDwLRK2MziN0KnIXHzz2IbYd2W8Deg4VX9AO3r0dVuXRC
bjYYFFdqRNbzRuDZbEi4zbo8cs3or73FPbjVM/gBTsKgf3M1cQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCJSw2uwVaDoQsKUi91VJW5RxqW9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NDcz
MDZkOC1mNDY5LTRlNzgtYTFmYy1kOTU4ZGZjNGYzMWIvNzBmNmNlMzItOTE0ZC0z
YWRlLWFhZWMtNzI0MmRlMGQ3NWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzQ3MzA2ZDgtZjQ2OS00ZTc4LWEx
ZmMtZDk1OGRmYzRmMzFiLzc0NzMwNmQ4LWY0NjktNGU3OC1hMWZjLWQ5NThkZmM0
ZjMxYi5jcmwwHwYDVR0jBBgwFoAUOmvE86h+1EYeNdzFWGNKroq2lKwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83NDczMDZkOC1mNDY5LTRlNzgtYTFmYy1kOTU4
ZGZjNGYzMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICowAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH+dXaPNToEhDN06ddiGNf9RuhYFwTr5NUgQJZ1fRlVx1rdUECfa
i1+szCHCK4FG1eG/WG3VBnXM6ebTilvqqf8PbgH048ckccO3H7tf55vo53/dEoOR
s5IpuSZJZohvNsIg9OFXupHRgcmDzoRJWez8LBQB+JlC+LPZyPpCVN2VlexvpT4s
0FW1gI1cHGdEmkgFVXD/QXIY881OTR6/I3TPI1Xwa2lYXICo3ZDmf77w3wliUv3F
XVc8DuVXYqdgRrMEvoUlYAq5soGlGQFIowNmUo2I/fs5d+epUu8UVtzp8jBdLdk3
Hy/MJ8qGLJMyqqakY3R6DJtNVQ1Mp4xHnCM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:26 2024 by rpki-client on console-ams.rpki-client.org