Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/9b80910a-c961-3f48-a86d-c22bed50832e.roa
File:                     9b80910a-c961-3f48-a86d-c22bed50832e.roa (raw, json)
Hash identifier:          nwDUDGv0r8agUfwelU537rQN4zE9hO6CzmnO/UI/5UE=
Subject key identifier:   C1:DD:B3:DE:B7:10:2C:CC:B4:8E:6B:5C:72:BA:2E:F6:94:11:1A:52
Certificate issuer:       /CN=957cea5b-f9fd-4bbf-ae7f-7b11c690b624
Certificate serial:       010D0C9F43285847C34489F340DE7DC777357400
Authority key identifier: 6E:F4:EB:38:A3:36:70:E5:F4:1D:04:52:10:1F:E3:EC:B5:94:B1:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/9b80910a-c961-3f48-a86d-c22bed50832e.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     393610
IP address blocks:        2602:fb6c::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:89:f3:40:de:7d:c7:77:35:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957cea5b-f9fd-4bbf-ae7f-7b11c690b624
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=d4417741-f0d4-43c7-a31c-8f1702744d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:6a:eb:fa:95:a1:6b:a1:af:e7:64:cc:34:
                    dd:fc:91:4b:ce:ec:20:c5:8d:f4:99:54:52:9c:15:
                    da:bc:ea:1d:94:f3:f5:1c:39:54:c0:5d:92:80:93:
                    36:8e:2a:19:ed:8d:2a:d2:84:0c:e1:73:48:cb:2c:
                    0e:3c:bd:90:d7:bc:aa:16:e4:7f:be:51:96:57:7f:
                    5a:10:3b:cb:03:ef:4b:f5:3d:4d:5d:31:a9:ad:64:
                    d1:e4:91:de:ad:04:f2:2f:ea:45:61:ff:f9:04:06:
                    36:32:d5:52:39:48:ed:84:a2:61:47:12:01:71:70:
                    03:86:5e:6a:ef:eb:62:a2:a4:aa:b8:c7:67:7b:cb:
                    f9:8c:2a:d1:dd:2b:94:16:f8:37:4c:c2:f4:74:b9:
                    97:39:96:a7:3d:9b:38:d0:74:5d:a4:92:e8:1d:04:
                    3c:6c:87:d8:97:38:25:d3:53:2c:90:60:7f:84:44:
                    de:e1:29:ef:6b:0b:56:a2:73:e7:16:2f:cc:44:f9:
                    b7:46:a9:2f:97:2b:f7:df:a2:c3:b8:65:51:c2:14:
                    fe:eb:29:b4:3d:b9:07:95:6d:ed:79:0c:e7:05:83:
                    5b:41:6c:b1:50:07:a9:f0:bf:0a:f4:fa:63:9a:fd:
                    05:3b:11:36:2d:38:90:6b:92:af:a3:33:64:fe:a0:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DD:B3:DE:B7:10:2C:CC:B4:8E:6B:5C:72:BA:2E:F6:94:11:1A:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/9b80910a-c961-3f48-a86d-c22bed50832e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.crl

            X509v3 Authority Key Identifier:
                keyid:6E:F4:EB:38:A3:36:70:E5:F4:1D:04:52:10:1F:E3:EC:B5:94:B1:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb6c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f1:29:54:83:94:2e:0c:81:25:f2:34:24:74:20:bc:30:4a:
         a1:23:6e:65:97:67:b1:88:a3:4a:84:82:5e:28:f0:47:91:3e:
         92:19:60:01:de:10:3c:0f:6f:86:61:93:39:ae:3d:24:29:9d:
         a3:6c:c4:aa:a7:56:11:49:7c:58:75:92:66:74:87:7a:85:ab:
         b9:b7:73:b1:8c:1c:05:35:c9:4e:fe:f1:b0:1c:dc:e8:8c:f6:
         1b:5a:ed:d5:33:c6:8c:db:b8:4b:6f:5d:f4:65:e4:4a:09:61:
         94:88:90:e1:cc:eb:35:f8:00:02:cd:27:12:9e:f0:12:5d:d9:
         ed:37:92:86:9a:a6:bc:37:ac:28:74:40:28:33:da:70:a0:c6:
         11:10:1f:ad:7f:2e:f2:15:a1:48:0e:f2:95:ea:9b:23:48:b2:
         b0:f5:36:3e:fa:50:9c:1e:eb:2f:d5:13:38:92:ab:8a:de:a5:
         53:36:73:af:4d:9c:36:39:03:3b:dc:78:5e:b5:55:db:7d:e5:
         3e:5b:88:2a:de:2a:ea:fc:9b:10:3d:2e:14:dd:fd:8d:d1:b3:
         d6:37:6c:80:67:48:40:9c:21:a4:50:d6:b5:fa:29:49:97:86:
         09:c1:fb:aa:cb:ec:06:c7:dd:e1:c3:8a:d4:96:48:ae:6b:f4:
         72:18:73:b3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfDRInzQN59x3c1dAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTU3Y2VhNWItZjlmZC00YmJmLWFlN2YtN2IxMWM2OTBi
NjI0MB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk
ZDQ0MTc3NDEtZjBkNC00M2M3LWEzMWMtOGYxNzAyNzQ0ZDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEBq6/qVoWuhr+dkzDTd/JFLzuwgxY30mVRS
nBXavOodlPP1HDlUwF2SgJM2jioZ7Y0q0oQM4XNIyywOPL2Q17yqFuR/vlGWV39a
EDvLA+9L9T1NXTGprWTR5JHerQTyL+pFYf/5BAY2MtVSOUjthKJhRxIBcXADhl5q
7+tioqSquMdne8v5jCrR3SuUFvg3TML0dLmXOZanPZs40HRdpJLoHQQ8bIfYlzgl
01MskGB/hETe4SnvawtWonPnFi/MRPm3Rqkvlyv336LDuGVRwhT+6ym0PbkHlW3t
eQznBYNbQWyxUAep8L8K9Ppjmv0FOxE2LTiQa5KvozNk/qDWZwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMHds963ECzMtI5rXHK6LvaUERpSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85NTdj
ZWE1Yi1mOWZkLTRiYmYtYWU3Zi03YjExYzY5MGI2MjQvOWI4MDkxMGEtYzk2MS0z
ZjQ4LWE4NmQtYzIyYmVkNTA4MzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTU3Y2VhNWItZjlmZC00YmJmLWFl
N2YtN2IxMWM2OTBiNjI0Lzk1N2NlYTViLWY5ZmQtNGJiZi1hZTdmLTdiMTFjNjkw
YjYyNC5jcmwwHwYDVR0jBBgwFoAUbvTrOKM2cOX0HQRSEB/j7LWUsWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85NTdjZWE1Yi1mOWZkLTRiYmYtYWU3Zi03YjEx
YzY5MGI2MjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7bAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQ/EpVIOULgyBJfI0JHQgvDBKoSNuZZdnsYijSoSCXijwR5E+khlg
Ad4QPA9vhmGTOa49JCmdo2zEqqdWEUl8WHWSZnSHeoWrubdzsYwcBTXJTv7xsBzc
6Iz2G1rt1TPGjNu4S29d9GXkSglhlIiQ4czrNfgAAs0nEp7wEl3Z7TeShpqmvDes
KHRAKDPacKDGERAfrX8u8hWhSA7yleqbI0iysPU2PvpQnB7rL9UTOJKrit6lUzZz
r02cNjkDO9x4XrVV233lPluIKt4q6vybED0uFN39jdGz1jdsgGdIQJwhpFDWtfop
SZeGCcH7qsvsBsfd4cOK1JZIrmv0chhzsw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:22 2024 by rpki-client on console-ams.rpki-client.org