Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/cd88ad8b-44b2-34bf-bffb-0cce1030e755.roa
File:                     cd88ad8b-44b2-34bf-bffb-0cce1030e755.roa (raw, json)
Hash identifier:          9YAOF9EfWPllEBWvkMaPjaQMh+JoLq8Q5rFjqjqsvYc=
Subject key identifier:   7E:F1:CD:DC:80:9E:2F:DF:E8:24:4E:2D:D5:56:29:F1:8C:53:B0:83
Certificate issuer:       /CN=8cce0cef-88a2-481a-91e3-c005827c7890
Certificate serial:       010D0C9F43285847C8D9E0B43B7A25A679A03450
Authority key identifier: 4A:53:07:3E:C4:1A:A8:D0:2E:E5:D2:14:65:0B:A5:AA:16:2B:CE:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/cd88ad8b-44b2-34bf-bffb-0cce1030e755.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     18935
IP address blocks:        2602:fa96::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e0:b4:3b:7a:25:a6:79:a0:34:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cce0cef-88a2-481a-91e3-c005827c7890
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=f2c9fca9-b134-4475-ac2e-bcee626d0875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:a1:e4:b1:73:e4:e6:9b:2c:e2:b6:44:23:
                    9d:a9:0f:ba:c5:66:bb:a4:fe:5c:fb:ca:92:fb:78:
                    fe:5c:e0:e2:63:de:b9:13:a7:a0:29:92:39:f8:c2:
                    c3:24:37:4c:ef:62:8c:06:6b:0e:c4:27:ed:70:ce:
                    57:d3:5d:ff:af:2f:2d:f1:e4:63:20:1b:06:46:b3:
                    40:10:22:a9:27:e2:2e:76:72:e3:f9:2f:cc:1b:85:
                    60:95:cb:0d:93:4f:15:30:c5:9f:fa:28:55:c1:f9:
                    7c:71:ca:37:1e:36:b0:d4:3e:9b:7b:ca:57:c5:82:
                    a1:40:c3:3b:de:a6:c3:2f:d8:32:ae:bf:7d:ea:d1:
                    28:9e:20:91:32:31:80:ee:25:3e:9c:9e:4a:77:c3:
                    67:4a:a9:c7:ab:f8:5f:3c:de:fa:1d:ef:a6:fa:b4:
                    02:6a:28:a4:a7:92:d1:96:fb:a0:a1:c1:7e:4a:45:
                    8a:a8:3b:16:ef:2c:c2:6e:6f:40:dc:ea:f0:e9:cb:
                    11:0c:0d:b2:a2:a3:e3:ea:8e:15:f3:fb:26:83:45:
                    ce:40:4c:b4:94:42:82:ee:01:eb:6c:0b:65:cc:b5:
                    f9:94:65:dc:b0:a0:60:46:2a:1f:4a:bd:b3:ea:2a:
                    0f:ae:be:a4:10:93:50:92:21:3e:38:9d:4a:0f:4c:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F1:CD:DC:80:9E:2F:DF:E8:24:4E:2D:D5:56:29:F1:8C:53:B0:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/cd88ad8b-44b2-34bf-bffb-0cce1030e755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.crl

            X509v3 Authority Key Identifier:
                keyid:4A:53:07:3E:C4:1A:A8:D0:2E:E5:D2:14:65:0B:A5:AA:16:2B:CE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa96::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d6:a5:4b:3f:37:15:6f:2f:4c:c0:ef:ea:ec:af:2d:b0:83:
         3c:b3:e0:a7:01:dd:93:8f:40:18:fe:fd:7a:aa:55:1c:01:33:
         16:1b:b1:62:1f:ba:b8:74:99:e4:da:93:0c:56:16:52:b3:e1:
         d2:5f:75:7b:15:ac:80:1b:8e:5d:d7:ae:84:57:f7:14:a7:5a:
         93:a2:3e:df:1b:16:09:d9:1b:a3:10:f2:76:64:c6:78:58:5d:
         42:29:21:68:26:b0:3e:b2:66:d7:72:6e:36:51:d7:91:09:ec:
         5d:05:ce:e9:62:f6:b0:22:f1:24:73:71:8c:97:96:2d:35:44:
         3d:b5:7c:fe:ef:5c:09:c3:68:84:26:3e:2e:64:81:11:10:22:
         83:5c:79:18:ec:0c:c3:4f:05:33:9a:6f:f6:27:87:d2:b4:71:
         bf:30:95:fa:71:b2:1f:ce:fb:3f:ad:64:75:81:34:2d:49:df:
         57:02:94:86:94:bd:32:8c:57:c2:4b:95:62:ec:71:5f:1b:a2:
         88:7e:b5:68:e3:db:80:57:6c:7f:28:49:65:6f:9a:d6:1c:7b:
         09:80:0e:1c:96:12:91:5b:50:c5:55:d6:d0:f9:af:56:09:91:
         ac:ce:42:07:4c:54:e8:fb:8b:96:ae:b3:b4:94:78:a8:79:00:
         9f:fd:12:a2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfI2eC0O3olpnmgNFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGNjZTBjZWYtODhhMi00ODFhLTkxZTMtYzAwNTgyN2M3
ODkwMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk
ZjJjOWZjYTktYjEzNC00NDc1LWFjMmUtYmNlZTYyNmQwODc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj82h5LFz5OabLOK2RCOdqQ+6xWa7pP5c+8qS
+3j+XODiY965E6egKZI5+MLDJDdM72KMBmsOxCftcM5X013/ry8t8eRjIBsGRrNA
ECKpJ+IudnLj+S/MG4VglcsNk08VMMWf+ihVwfl8cco3Hjaw1D6be8pXxYKhQMM7
3qbDL9gyrr996tEoniCRMjGA7iU+nJ5Kd8NnSqnHq/hfPN76He+m+rQCaiikp5LR
lvugocF+SkWKqDsW7yzCbm9A3Orw6csRDA2yoqPj6o4V8/smg0XOQEy0lEKC7gHr
bAtlzLX5lGXcsKBgRiofSr2z6ioPrr6kEJNQkiE+OJ1KD0y2PQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFH7xzdyAni/f6CROLdVWKfGMU7CDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Nl
MGNlZi04OGEyLTQ4MWEtOTFlMy1jMDA1ODI3Yzc4OTAvY2Q4OGFkOGItNDRiMi0z
NGJmLWJmZmItMGNjZTEwMzBlNzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNjZTBjZWYtODhhMi00ODFhLTkx
ZTMtYzAwNTgyN2M3ODkwLzhjY2UwY2VmLTg4YTItNDgxYS05MWUzLWMwMDU4Mjdj
Nzg5MC5jcmwwHwYDVR0jBBgwFoAUSlMHPsQaqNAu5dIUZQulqhYrzrkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84Y2NlMGNlZi04OGEyLTQ4MWEtOTFlMy1jMDA1
ODI3Yzc4OTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6lgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABtalSz83FW8vTMDv6uyvLbCDPLPgpwHdk49AGP79eqpVHAEzFhux
Yh+6uHSZ5NqTDFYWUrPh0l91exWsgBuOXdeuhFf3FKdak6I+3xsWCdkboxDydmTG
eFhdQikhaCawPrJm13JuNlHXkQnsXQXO6WL2sCLxJHNxjJeWLTVEPbV8/u9cCcNo
hCY+LmSBERAig1x5GOwMw08FM5pv9ieH0rRxvzCV+nGyH877P61kdYE0LUnfVwKU
hpS9MoxXwkuVYuxxXxuiiH61aOPbgFdsfyhJZW+a1hx7CYAOHJYSkVtQxVXW0Pmv
VgmRrM5CB0xU6PuLlq6ztJR4qHkAn/0Sog==
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:36:01 2024 by rpki-client on console-fra.rpki-client.org