Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/62eeb3ce-66e7-33d7-8bf8-74f6942b44ba.roa
File:                     62eeb3ce-66e7-33d7-8bf8-74f6942b44ba.roa (raw, json)
Hash identifier:          edQ8h8x01RpMqa8FIJqn9c9pIElKNEm+k50l5IhIew4=
Subject key identifier:   0F:F3:53:5A:1A:39:AC:E0:5C:12:84:AD:3C:CF:86:2C:AB:EC:9E:9F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C1B58FDA12545F3BB0D00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/62eeb3ce-66e7-33d7-8bf8-74f6942b44ba.roa
Signing time:             Tue 24 Sep 2024 16:26:18 +0000
ROA not before:           Tue 24 Sep 2024 16:26:18 +0000
ROA not after:            Mon 23 Dec 2024 17:26:18 +0000
asID:                     397238
IP address blocks:        2001:502:2eda::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:1b:58:fd:a1:25:45:f3:bb:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:18 2024 GMT
            Not After : Dec 23 17:26:18 2024 GMT
        Subject: CN=f91fbdb1-549a-4a12-b9c6-ad8bdd57c4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c8:ad:41:e5:7e:d1:f8:89:78:f5:56:e0:91:
                    ed:2b:f8:7b:23:1e:80:3a:22:6c:20:1c:70:7b:46:
                    bf:41:cb:b1:28:74:41:b0:13:09:95:8e:7a:7c:e9:
                    7b:e9:f7:55:7f:d1:c0:32:66:68:f1:3b:22:cc:28:
                    c2:8e:05:b8:ac:a0:c7:93:b0:3a:54:54:a3:12:f1:
                    89:9e:b9:7f:19:e1:13:8a:2c:1c:8f:61:0d:1f:73:
                    8e:39:be:cf:ce:8a:6c:ed:a4:49:02:26:6b:00:5b:
                    5a:a4:59:43:3b:5e:0d:08:e7:b8:ad:ef:1c:20:d2:
                    69:2f:72:65:50:e8:d4:32:67:03:d5:1f:50:de:48:
                    38:e1:b3:2c:74:f9:49:8b:04:4c:0a:95:82:40:93:
                    73:c1:56:43:0b:14:b7:c0:ea:72:9b:5f:db:e7:1a:
                    ae:dc:bf:40:e5:78:79:75:a0:fe:ef:01:7a:f2:8a:
                    51:da:f7:33:eb:f6:57:d4:27:81:d2:6d:e2:ed:52:
                    c9:06:a6:17:a1:4b:7e:28:3a:90:fb:6f:56:bd:8c:
                    51:5d:39:52:88:36:56:4d:f3:57:25:1d:6a:ae:3f:
                    bf:99:87:64:fa:50:3d:19:bc:d9:51:9b:bb:bf:e7:
                    32:66:78:23:8d:57:a7:96:1a:1c:00:c2:fb:9c:1c:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F3:53:5A:1A:39:AC:E0:5C:12:84:AD:3C:CF:86:2C:AB:EC:9E:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/62eeb3ce-66e7-33d7-8bf8-74f6942b44ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:91:84:85:cc:2c:7d:7f:1c:fe:de:32:28:f2:0a:80:fc:e8:
         34:65:79:e1:66:c7:14:ac:f7:47:a0:3c:de:42:1e:e4:d1:3e:
         1b:17:16:7d:2a:15:19:ce:53:67:a3:58:84:93:f9:38:7e:1d:
         b6:03:20:1d:3c:a6:16:f8:8c:50:b9:90:8e:85:39:3e:cb:44:
         f0:e2:3c:34:77:b3:7a:71:62:e0:e3:f1:95:dd:6e:0a:01:89:
         3d:22:a4:96:b6:f6:32:e5:ad:42:38:78:19:d6:0a:c5:d0:ab:
         62:ba:09:a1:dc:31:bf:b7:b9:17:e1:66:1c:b3:6b:67:d6:f4:
         33:2e:d9:7b:0d:c5:32:dc:1f:a1:f0:5d:df:96:d0:29:d2:35:
         45:ea:1c:0a:2b:2c:b3:85:c4:65:cd:ff:82:82:fa:39:23:9d:
         93:87:16:b7:13:b6:74:a2:c8:66:a2:6a:ea:c2:fd:9b:b1:6d:
         7c:d8:5e:66:cf:92:ed:b4:8b:00:60:cd:51:72:7c:c4:d5:f3:
         60:33:fb:e7:9d:a6:26:2b:d5:1e:0a:4a:b8:76:58:cb:27:e8:
         cf:08:72:e4:bd:f1:62:19:66:81:b7:be:6d:55:a4:1b:95:4c:
         06:88:61:a4:17:54:bc:8c:e1:98:71:93:20:59:26:2e:17:ea:
         0f:ca:21:91
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdSfBtY/aElRfO7DQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDkyNDE2MjYxOFoXDTI0MTIyMzE3MjYxOFowLzEtMCsGA1UEAxMk
ZjkxZmJkYjEtNTQ5YS00YTEyLWI5YzYtYWQ4YmRkNTdjNGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MitQeV+0fiJePVW4JHtK/h7Ix6AOiJsIBxw
e0a/QcuxKHRBsBMJlY56fOl76fdVf9HAMmZo8TsizCjCjgW4rKDHk7A6VFSjEvGJ
nrl/GeETiiwcj2ENH3OOOb7Pzops7aRJAiZrAFtapFlDO14NCOe4re8cINJpL3Jl
UOjUMmcD1R9Q3kg44bMsdPlJiwRMCpWCQJNzwVZDCxS3wOpym1/b5xqu3L9A5Xh5
daD+7wF68opR2vcz6/ZX1CeB0m3i7VLJBqYXoUt+KDqQ+29WvYxRXTlSiDZWTfNX
JR1qrj+/mYdk+lA9GbzZUZu7v+cyZngjjVenlhocAML7nBxBlQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA/zU1oaOazgXBKErTzPhiyr7J6fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjJlZWIzY2UtNjZlNy0z
M2Q3LThiZjgtNzRmNjk0MmI0NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAi7a
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABGRhIXMLH1/HP7eMijyCoD86DRleeFmxxSs90egPN5CHuTRPhsX
Fn0qFRnOU2ejWIST+Th+HbYDIB08phb4jFC5kI6FOT7LRPDiPDR3s3pxYuDj8ZXd
bgoBiT0ipJa29jLlrUI4eBnWCsXQq2K6CaHcMb+3uRfhZhyza2fW9DMu2XsNxTLc
H6HwXd+W0CnSNUXqHAorLLOFxGXN/4KC+jkjnZOHFrcTtnSiyGaiaurC/ZuxbXzY
XmbPku20iwBgzVFyfMTV82Az++edpiYr1R4KSrh2WMsn6M8IcuS98WIZZoG3vm1V
pBuVTAaIYaQXVLyM4ZhxkyBZJi4X6g/KIZE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:05 2024 by rpki-client on console-fra.rpki-client.org