Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/17749aed-654e-34e5-ad0a-371826c88734.roa
File:                     17749aed-654e-34e5-ad0a-371826c88734.roa (raw, json)
Hash identifier:          zARuQqDIJ0ZFlb7iBwmwCoyNjVERIlfQKDU+8pvQhUY=
Subject key identifier:   BC:7E:A3:38:B6:72:B7:9D:34:6F:5E:C8:79:B7:18:51:3B:84:36:40
Certificate issuer:       /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
Certificate serial:       010D0C9F432858453FA807CD5AF227B2A6819380
Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/17749aed-654e-34e5-ad0a-371826c88734.roa
Signing time:             Mon 18 Mar 2024 13:00:30 +0000
ROA not before:           Mon 18 Mar 2024 13:00:30 +0000
ROA not after:            Sun 16 Jun 2024 13:00:30 +0000
asID:                     11721
IP address blocks:        2602:fa8a:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3f:a8:07:cd:5a:f2:27:b2:a6:81:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
        Validity
            Not Before: Mar 18 13:00:30 2024 GMT
            Not After : Jun 16 13:00:30 2024 GMT
        Subject: CN=4709ea38-f387-4a04-a4d9-ee5b25e11b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:c5:8c:69:9e:28:54:29:3d:bb:9d:2b:e0:
                    22:3b:32:ef:23:4b:0e:4a:fc:e7:c8:44:8d:f3:97:
                    76:bd:e5:10:f4:ce:48:b5:ca:63:85:b7:5c:d2:a8:
                    f5:81:e0:5b:bb:10:a5:cf:43:52:bf:f9:6f:cd:90:
                    68:bc:bb:2c:5e:4d:c1:f7:e4:fc:79:9c:02:a9:9e:
                    2c:25:29:90:85:0e:20:7d:f6:f3:3c:60:d3:c5:39:
                    f3:38:8a:79:f1:29:8e:b0:15:af:3f:cd:3d:1c:8f:
                    98:3d:d6:f8:09:47:ba:1f:23:b4:e3:c4:53:47:49:
                    55:47:e9:67:2a:52:dd:28:87:ac:83:a7:08:61:bd:
                    70:8d:ae:51:11:56:35:36:e2:ad:89:67:0c:ba:6c:
                    f1:3e:89:db:fd:e4:60:8d:d0:60:e2:9f:7b:f3:be:
                    3a:5e:d1:90:ca:d7:c6:76:72:7c:22:5e:cc:d0:48:
                    6f:77:1c:9c:7f:73:d6:e2:0d:3c:58:c0:19:95:13:
                    d9:ac:06:10:04:71:bd:51:f1:b9:73:4d:2d:35:d2:
                    61:a2:37:73:a6:7f:69:98:af:dc:9c:4c:9b:b3:a5:
                    b2:4f:6f:48:d8:ab:b0:f8:7f:19:48:ec:31:56:53:
                    7c:94:df:b3:04:4b:87:07:c6:03:6e:44:9c:a5:22:
                    f0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7E:A3:38:B6:72:B7:9D:34:6F:5E:C8:79:B7:18:51:3B:84:36:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/17749aed-654e-34e5-ad0a-371826c88734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8a:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:96:4f:55:99:a9:98:7a:04:8c:df:75:4b:0b:fb:81:5f:6c:
         97:80:a9:95:51:f7:7f:4c:7e:8c:bc:74:a7:96:11:29:26:ca:
         87:fa:e7:b7:c0:d7:19:a8:51:9b:a7:1f:55:f6:fa:64:ad:f5:
         a3:df:56:0c:c1:1a:5a:6e:ac:8b:21:24:d1:37:cd:2b:ca:a7:
         0b:60:8e:65:31:55:fa:17:1d:8a:45:3c:4c:cf:49:f5:fc:ae:
         1f:e4:51:76:a1:f4:f5:2a:1f:be:b3:08:03:be:69:e3:c1:de:
         a7:ca:d1:91:e4:45:f6:47:20:4f:1e:88:5c:00:22:0f:e4:c1:
         8d:5e:f7:9c:91:2f:60:9e:e3:9e:f9:d7:5b:ba:52:12:70:72:
         27:75:2c:5d:5c:c0:2a:a1:74:88:a9:6e:51:84:ae:30:f6:a5:
         c8:40:ed:f5:3d:20:d9:25:72:1f:02:ba:0e:54:bf:c7:d5:fc:
         a1:da:6a:0b:61:b2:c1:dc:8c:a8:83:d1:b1:b1:05:04:1f:e4:
         32:30:e8:8c:4f:bb:e7:d4:ed:f7:b4:48:4e:61:c1:ee:ae:8a:
         b6:ac:b8:18:32:5d:ce:2c:56:39:76:ad:c5:81:42:1b:f5:62:
         0d:70:4a:62:60:59:59:b5:18:7c:7a:a0:fb:65:45:f4:5a:81:
         b8:45:24:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEU/qAfNWvInsqaBk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZmUzNjItODllNC00YWU4LWI5YTItNjFiMGU1NTIz
Yzc4MB4XDTI0MDMxODEzMDAzMFoXDTI0MDYxNjEzMDAzMFowLzEtMCsGA1UEAxMk
NDcwOWVhMzgtZjM4Ny00YTA0LWE0ZDktZWU1YjI1ZTExYjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq43FjGmeKFQpPbudK+AiOzLvI0sOSvznyESN
85d2veUQ9M5Itcpjhbdc0qj1geBbuxClz0NSv/lvzZBovLssXk3B9+T8eZwCqZ4s
JSmQhQ4gffbzPGDTxTnzOIp58SmOsBWvP809HI+YPdb4CUe6HyO048RTR0lVR+ln
KlLdKIesg6cIYb1wja5REVY1NuKtiWcMumzxPonb/eRgjdBg4p978746XtGQytfG
dnJ8Il7M0Ehvdxycf3PW4g08WMAZlRPZrAYQBHG9UfG5c00tNdJhojdzpn9pmK/c
nEybs6WyT29I2Kuw+H8ZSOwxVlN8lN+zBEuHB8YDbkScpSLw0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLx+ozi2credNG9eyHm3GFE7hDZAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjdm
ZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIwZTU1MjNjNzgvMTc3NDlhZWQtNjU0ZS0z
NGU1LWFkMGEtMzcxODI2Yzg4NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI3ZmUzNjItODllNC00YWU4LWI5
YTItNjFiMGU1NTIzYzc4LzkyN2ZlMzYyLTg5ZTQtNGFlOC1iOWEyLTYxYjBlNTUy
M2M3OC5jcmwwHwYDVR0jBBgwFoAUGtcHAlWwKq479wLsfcQu5WW9QqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85MjdmZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIw
ZTU1MjNjNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6igAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGKWT1WZqZh6BIzfdUsL+4FfbJeAqZVR939Mfoy8dKeWESkmyof6
57fA1xmoUZunH1X2+mSt9aPfVgzBGlpurIshJNE3zSvKpwtgjmUxVfoXHYpFPEzP
SfX8rh/kUXah9PUqH76zCAO+aePB3qfK0ZHkRfZHIE8eiFwAIg/kwY1e95yRL2Ce
457511u6UhJwcid1LF1cwCqhdIipblGErjD2pchA7fU9INklch8Cug5Uv8fV/KHa
agthssHcjKiD0bGxBQQf5DIw6IxPu+fU7fe0SE5hwe6uirasuBgyXc4sVjl2rcWB
Qhv1Yg1wSmJgWVm1GHx6oPtlRfRagbhFJII=
-----END CERTIFICATE-----
Generated at Mon May 13 17:09:58 2024 by rpki-client on console-ams.rpki-client.org