Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/7f817960-8820-34d1-ac4b-4b54a36c7f22.roa
File:                     7f817960-8820-34d1-ac4b-4b54a36c7f22.roa (raw, json)
Hash identifier:          Bwggq29mQ1Ry+L0VGgKLG3DOhrKfmUuSQWid6qksKAQ=
Subject key identifier:   DD:39:B6:DF:1E:D5:81:14:68:3C:21:6D:6C:DE:26:D0:2B:8E:02:78
Certificate issuer:       /CN=98fa46f5-eef1-4569-9795-c233e7e74658
Certificate serial:       010D0C9F4328584563F31439D589F9C0516E8040
Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/7f817960-8820-34d1-ac4b-4b54a36c7f22.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        2602:802:2008::/48 maxlen: 48
                          2602:802:2007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:14:39:d5:89:f9:c0:51:6e:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=6fade1ed-9c64-4105-b47d-b86666cf7b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:35:9d:0a:e0:6d:f8:fa:29:45:f1:46:31:a2:
                    bc:93:0a:0a:2e:71:89:c0:66:fe:8e:a5:7d:5d:ae:
                    95:86:9b:ed:5f:3d:39:1b:fe:20:78:14:32:5b:83:
                    7c:3f:4f:07:02:01:d5:d5:da:80:93:b0:06:1a:29:
                    bf:bc:f7:22:d2:b7:05:50:2f:f4:bc:cc:94:6a:5a:
                    92:5d:5a:8f:af:96:3b:56:f0:fe:d2:87:cb:01:ca:
                    fe:c1:9b:a0:ef:67:d3:26:d6:67:94:3e:d5:8e:97:
                    19:c0:5c:10:71:eb:b4:44:6d:99:45:d5:6a:f9:90:
                    cd:84:49:af:1d:c1:e9:98:39:f7:fa:e0:f5:82:1a:
                    a9:c9:6d:38:c7:ec:fe:33:28:d5:f8:ff:be:78:c2:
                    97:2a:46:b8:73:29:58:a4:d1:16:f8:b8:27:1b:24:
                    ea:f7:f1:66:98:ae:ae:b3:4e:b3:21:60:b1:cf:a0:
                    ed:0f:06:0e:75:00:13:53:ed:e2:dc:b9:f8:7c:91:
                    20:e7:54:07:2d:fc:c7:af:90:e9:74:bc:7a:e7:43:
                    65:31:63:43:43:de:46:0d:fd:8d:28:51:e9:59:65:
                    a1:76:f2:dc:fa:77:4f:0d:cc:a9:59:02:c5:59:34:
                    ac:95:f4:6d:3d:79:7f:a1:7d:3a:e2:0f:80:3d:5b:
                    a8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:39:B6:DF:1E:D5:81:14:68:3C:21:6D:6C:DE:26:D0:2B:8E:02:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/7f817960-8820-34d1-ac4b-4b54a36c7f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl

            X509v3 Authority Key Identifier:
                keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:802:2007::-2602:802:2008:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e3:bc:13:0c:91:8f:e4:ed:b2:6d:35:61:68:64:d2:ad:89:
         5f:12:6c:8d:25:b1:4c:87:14:ed:b2:d3:49:ef:11:74:79:69:
         40:7a:79:e6:bc:b8:24:90:11:40:d2:b6:9e:4f:4f:78:15:cf:
         bb:ba:c1:fe:bc:6d:50:8e:d7:b4:92:89:cc:fe:03:2b:69:46:
         6f:ac:80:1c:d8:db:1e:4e:92:65:e3:d6:93:40:a1:a5:a8:a3:
         f0:1f:a6:9d:32:bc:ef:d7:4a:61:77:75:03:7d:9f:f8:ea:fb:
         dd:ee:22:bd:c0:5d:34:42:a8:5c:95:20:5a:1c:8a:9f:4d:cd:
         d4:34:e3:18:9b:b6:57:96:c6:86:99:04:fb:43:84:b2:7c:87:
         45:7a:66:46:e1:9a:d9:7a:1a:fa:49:87:23:c8:79:2b:bc:9d:
         d3:21:15:5a:3b:0b:a5:de:4c:bc:45:60:e0:f4:d6:7d:06:9c:
         fa:e0:59:82:d6:f5:15:b3:06:92:9c:11:fc:a1:10:ee:dd:f0:
         f9:ef:6f:fb:96:9b:79:42:77:e3:4b:a6:ec:0d:46:5e:5a:9a:
         bc:24:20:a1:0f:81:ac:5f:58:be:84:42:79:91:f4:e5:fd:c1:
         d4:a3:10:1d:8b:ee:0b:d8:a0:87:5e:87:46:49:73:00:04:8b:
         b5:fa:b0:e4
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEVj8xQ51Yn5wFFugEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThmYTQ2ZjUtZWVmMS00NTY5LTk3OTUtYzIzM2U3ZTc0
NjU4MB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk
NmZhZGUxZWQtOWM2NC00MTA1LWI0N2QtYjg2NjY2Y2Y3YjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzWdCuBt+PopRfFGMaK8kwoKLnGJwGb+jqV9
Xa6VhpvtXz05G/4geBQyW4N8P08HAgHV1dqAk7AGGim/vPci0rcFUC/0vMyUalqS
XVqPr5Y7VvD+0ofLAcr+wZug72fTJtZnlD7VjpcZwFwQceu0RG2ZRdVq+ZDNhEmv
HcHpmDn3+uD1ghqpyW04x+z+MyjV+P++eMKXKka4cylYpNEW+LgnGyTq9/FmmK6u
s06zIWCxz6DtDwYOdQATU+3i3Ln4fJEg51QHLfzHr5DpdLx650NlMWNDQ95GDf2N
KFHpWWWhdvLc+ndPDcypWQLFWTSslfRtPXl/oX064g+APVuoRQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFN05tt8e1YEUaDwhbWzeJtArjgJ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OGZh
NDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMzZTdlNzQ2NTgvN2Y4MTc5NjAtODgyMC0z
NGQxLWFjNGItNGI1NGEzNmM3ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOThmYTQ2ZjUtZWVmMS00NTY5LTk3
OTUtYzIzM2U3ZTc0NjU4Lzk4ZmE0NmY1LWVlZjEtNDU2OS05Nzk1LWMyMzNlN2U3
NDY1OC5jcmwwHwYDVR0jBBgwFoAU7OSTqAumkvxNATZs2wNLowCQhHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85OGZhNDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMz
ZTdlNzQ2NTguY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmAggC
IAcDBwAmAggCIAgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEANuO8EwyRj+Ttsm01YWhk0q2JXxJsjSWxTIcU
7bLTSe8RdHlpQHp55ry4JJARQNK2nk9PeBXPu7rB/rxtUI7XtJKJzP4DK2lGb6yA
HNjbHk6SZePWk0Chpaij8B+mnTK879dKYXd1A32f+Or73e4ivcBdNEKoXJUgWhyK
n03N1DTjGJu2V5bGhpkE+0OEsnyHRXpmRuGa2Xoa+kmHI8h5K7yd0yEVWjsLpd5M
vEVg4PTWfQac+uBZgtb1FbMGkpwR/KEQ7t3w+e9v+5abeUJ340um7A1GXlqavCQg
oQ+BrF9YvoRCeZH05f3B1KMQHYvuC9igh16HRklzAASLtfqw5A==
-----END CERTIFICATE-----
Generated at Thu May 2 14:58:17 2024 by rpki-client on console-fra.rpki-client.org