Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/169ed4b0-10f1-3ee0-8d25-70aed14567e8.roa
File:                     169ed4b0-10f1-3ee0-8d25-70aed14567e8.roa (raw, json)
Hash identifier:          n4oZr0xU0Mx6JPybYAAVS+CblClUEO0P/kRJW1rHiNc=
Subject key identifier:   65:87:60:5C:F1:B4:0A:04:40:58:40:85:DA:A1:C2:FF:50:B5:DE:9F
Certificate issuer:       /CN=f0dba087-0567-4455-9983-ac2ca8102281
Certificate serial:       010D0C9F432858451FAAEB51E5F38E19C3FFD240
Authority key identifier: 72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/169ed4b0-10f1-3ee0-8d25-70aed14567e8.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     210715
IP address blocks:        2602:fa87:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:aa:eb:51:e5:f3:8e:19:c3:ff:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dba087-0567-4455-9983-ac2ca8102281
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=1c7747de-dca4-4c38-8bb1-10e2f8750982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:21:97:ac:0c:98:a6:b2:28:9b:12:2c:ae:ea:
                    c3:2f:69:df:24:53:31:a7:58:e3:77:ef:1c:33:c7:
                    77:cf:b0:3f:36:d6:a7:13:38:22:8a:67:fc:b0:21:
                    2e:ca:7f:1d:13:d5:dc:f4:c3:51:47:83:d2:78:c7:
                    5e:7b:81:52:e1:47:5b:79:b8:7b:1b:e5:8f:8b:4c:
                    40:95:e4:69:18:0c:61:62:ef:ac:47:90:4b:1e:79:
                    6e:b3:9e:eb:c9:56:3a:57:fb:ca:ca:2c:78:1b:6d:
                    ac:88:b3:c2:92:19:09:c9:d0:70:e0:19:e6:37:4f:
                    df:b5:68:1d:08:15:8c:78:3a:1e:47:11:b8:84:d5:
                    d0:81:87:5a:bc:07:2e:85:67:2f:67:29:2c:19:c8:
                    1d:1f:a3:06:b4:c6:4b:ec:aa:9c:48:c2:4c:67:bc:
                    3c:7c:13:c6:21:b4:66:5d:6b:fe:b3:75:28:c5:4f:
                    b2:c2:08:d8:fd:e8:13:d3:5c:e6:90:96:d9:82:f1:
                    62:07:a6:cd:5d:35:4c:77:d5:1a:e6:0e:b7:49:7a:
                    f1:7a:46:0c:03:de:a8:29:b9:25:ef:56:56:de:f4:
                    48:c5:7d:56:14:ec:48:9b:d4:32:65:65:30:80:ca:
                    d4:27:5e:d2:56:1e:f0:90:12:13:d7:ff:81:9c:8f:
                    0a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:87:60:5C:F1:B4:0A:04:40:58:40:85:DA:A1:C2:FF:50:B5:DE:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/169ed4b0-10f1-3ee0-8d25-70aed14567e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.crl

            X509v3 Authority Key Identifier:
                keyid:72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa87:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c1:fd:d3:43:5e:86:b8:37:11:f0:36:19:3f:4c:55:c5:24:
         e7:bd:67:6a:b7:98:44:9f:92:b2:25:cd:fc:de:31:75:07:ae:
         03:72:71:6d:45:c7:83:70:7a:84:38:ce:44:c7:26:68:15:a0:
         89:d9:30:ab:9f:80:38:f9:53:b0:18:21:eb:c2:2a:d1:be:5d:
         7b:e0:f6:84:b9:1a:44:cb:7a:2f:42:be:37:58:f3:b2:6f:16:
         75:a0:d3:f0:84:f8:8d:c0:f3:e2:a7:6c:30:88:1d:06:85:4d:
         e0:ed:87:67:3b:fc:27:06:9c:a5:de:5b:ab:9e:80:02:d7:99:
         c4:cc:8d:c1:c2:8a:ed:f4:80:df:b0:02:30:46:1c:4a:f8:1c:
         44:fd:0b:2b:31:29:a3:8e:79:ce:96:12:29:bf:16:87:89:2f:
         58:c1:9d:3c:63:11:67:a4:aa:02:12:fc:8c:87:79:b1:b3:45:
         91:c2:a8:e4:b7:b7:d7:67:44:1c:29:ab:30:06:ce:21:37:47:
         2d:40:8b:2b:56:74:32:1d:73:78:3e:a3:d9:00:0d:5a:10:2a:
         82:9b:21:85:75:3c:8d:69:43:3f:aa:33:9d:36:d5:cc:ef:d8:
         d6:43:b0:59:54:67:f6:52:65:33:43:ae:4e:29:f4:14:0d:de:
         76:b5:14:ad
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfqutR5fOOGcP/0kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBkYmEwODctMDU2Ny00NDU1LTk5ODMtYWMyY2E4MTAy
MjgxMB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
MWM3NzQ3ZGUtZGNhNC00YzM4LThiYjEtMTBlMmY4NzUwOTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSGXrAyYprIomxIsrurDL2nfJFMxp1jjd+8c
M8d3z7A/NtanEzgiimf8sCEuyn8dE9Xc9MNRR4PSeMdee4FS4Udbebh7G+WPi0xA
leRpGAxhYu+sR5BLHnlus57ryVY6V/vKyix4G22siLPCkhkJydBw4BnmN0/ftWgd
CBWMeDoeRxG4hNXQgYdavAcuhWcvZyksGcgdH6MGtMZL7KqcSMJMZ7w8fBPGIbRm
XWv+s3UoxU+ywgjY/egT01zmkJbZgvFiB6bNXTVMd9Ua5g63SXrxekYMA96oKbkl
71ZW3vRIxX1WFOxIm9QyZWUwgMrUJ17SVh7wkBIT1/+BnI8K8QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGWHYFzxtAoEQFhAhdqhwv9Qtd6fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMGRi
YTA4Ny0wNTY3LTQ0NTUtOTk4My1hYzJjYTgxMDIyODEvMTY5ZWQ0YjAtMTBmMS0z
ZWUwLThkMjUtNzBhZWQxNDU2N2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjBkYmEwODctMDU2Ny00NDU1LTk5
ODMtYWMyY2E4MTAyMjgxL2YwZGJhMDg3LTA1NjctNDQ1NS05OTgzLWFjMmNhODEw
MjI4MS5jcmwwHwYDVR0jBBgwFoAUctxorsq+0ASvVM/MPnMNSfu9YakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mMGRiYTA4Ny0wNTY3LTQ0NTUtOTk4My1hYzJj
YTgxMDIyODEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6hwAF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI7B/dNDXoa4NxHwNhk/TFXFJOe9Z2q3mESfkrIlzfzeMXUHrgNy
cW1Fx4NweoQ4zkTHJmgVoInZMKufgDj5U7AYIevCKtG+XXvg9oS5GkTLei9CvjdY
87JvFnWg0/CE+I3A8+KnbDCIHQaFTeDth2c7/CcGnKXeW6uegALXmcTMjcHCiu30
gN+wAjBGHEr4HET9CysxKaOOec6WEim/FoeJL1jBnTxjEWekqgIS/IyHebGzRZHC
qOS3t9dnRBwpqzAGziE3Ry1AiytWdDIdc3g+o9kADVoQKoKbIYV1PI1pQz+qM502
1czv2NZDsFlUZ/ZSZTNDrk4p9BQN3na1FK0=
-----END CERTIFICATE-----
Generated at Wed May 22 20:15:01 2024 by rpki-client on console-ams.rpki-client.org