Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/c5144e10-cda3-3f1f-ad54-72216455023f.roa
File:                     c5144e10-cda3-3f1f-ad54-72216455023f.roa (raw, json)
Hash identifier:          UFaMwFjkJL73GoJU/j0Khgn1lUE68wk9U1PpCrVS6Mk=
Subject key identifier:   28:AC:69:83:0F:16:F2:DB:55:1F:5C:DC:CB:60:8E:4E:BB:D0:A5:0C
Certificate issuer:       /CN=cbe51a2e-768b-4b93-baac-8cae43186078
Certificate serial:       010D0C9F43285847299B1AECB4580AFA7C986280
Authority key identifier: C9:95:CD:3F:9F:7E:84:04:FF:F1:FC:17:A5:0C:DC:3F:E2:2F:56:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/c5144e10-cda3-3f1f-ad54-72216455023f.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     394923
IP address blocks:        2602:ff52::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:1a:ec:b4:58:0a:fa:7c:98:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe51a2e-768b-4b93-baac-8cae43186078
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=b9060e21-965f-484f-a89c-2b3eda422704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:83:8e:56:7e:40:35:1c:99:79:fe:55:c6:2f:
                    97:0b:2e:4e:82:ed:6f:6c:6a:ea:10:1a:36:1f:5b:
                    33:81:59:05:5e:00:46:04:7b:cc:db:2b:cd:09:7f:
                    13:81:fc:43:53:ba:48:ec:50:24:63:8d:91:35:9f:
                    54:a5:a2:95:93:d9:e3:ed:d9:a6:94:e7:78:c6:e7:
                    5d:29:f0:39:19:8f:ee:8f:28:9b:9f:fe:19:d3:df:
                    59:e7:35:91:f1:48:cc:0b:6a:03:19:7f:32:f4:2e:
                    d1:77:59:e1:e2:be:69:56:d3:e8:94:bd:b4:27:ba:
                    9d:fa:b7:92:d7:48:75:31:13:74:df:4d:c8:aa:e5:
                    56:2b:44:cd:61:d5:4e:b6:9b:42:fb:a0:a6:0f:50:
                    01:80:73:2f:fd:9e:78:04:b0:08:03:c1:53:c6:7d:
                    c9:a5:b1:a1:03:cf:eb:19:0c:9e:aa:36:11:f1:b3:
                    7a:c5:38:e3:fc:65:a3:41:49:28:72:c0:f5:c6:01:
                    8a:3d:96:67:2b:25:6a:d0:ca:f3:f9:94:14:cf:83:
                    cd:2e:be:46:bd:00:df:75:42:cb:3e:49:4e:c3:3a:
                    bd:58:31:31:fc:34:69:9b:62:98:5f:6b:0b:0b:cb:
                    fe:27:8e:db:ab:ba:85:ae:75:9d:55:af:c7:31:aa:
                    f3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AC:69:83:0F:16:F2:DB:55:1F:5C:DC:CB:60:8E:4E:BB:D0:A5:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/c5144e10-cda3-3f1f-ad54-72216455023f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.crl

            X509v3 Authority Key Identifier:
                keyid:C9:95:CD:3F:9F:7E:84:04:FF:F1:FC:17:A5:0C:DC:3F:E2:2F:56:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff52::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:b1:d1:31:9f:1b:d6:1e:28:5d:77:10:e0:0a:71:2e:bd:71:
         44:d4:1d:fe:8f:c6:55:77:7f:01:0b:92:4f:40:b4:cc:18:68:
         d5:78:d5:c5:1c:f3:b6:e5:2d:7b:d4:8d:b8:8d:9e:1c:b9:2f:
         82:68:f3:bd:f7:c9:05:c1:46:bb:56:46:c8:36:36:32:be:8e:
         4f:80:7a:2e:dc:b6:56:80:cc:42:9a:04:24:78:e9:2b:c7:f9:
         b7:05:ab:75:e3:d1:41:29:9a:d0:a3:1e:90:91:45:a1:da:22:
         30:12:eb:db:1b:66:1c:ec:45:9b:b9:f2:f2:6a:f5:e1:a6:d5:
         b9:da:b4:1d:c2:d3:a5:ff:e0:09:97:d1:57:d2:cc:e3:ca:d3:
         98:73:1c:28:e5:86:1b:0a:90:d4:b9:df:c5:69:de:7f:60:73:
         65:8e:0a:df:4a:81:e6:a1:97:7e:0f:7b:6b:88:2f:2c:76:fd:
         21:3f:4d:4c:7e:e2:4e:75:5a:a3:6b:9a:46:8e:5a:b0:ca:55:
         9d:16:4e:b7:b1:bf:3c:cd:d6:b9:7b:58:4b:d2:cd:d9:a5:e5:
         df:ee:70:d3:8c:cf:e9:29:58:61:0a:4c:01:f7:2f:28:d7:60:
         07:57:c3:e4:a2:7d:70:35:b8:3e:ee:a6:f7:b1:15:26:68:7a:
         78:9d:55:ff
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEcpmxrstFgK+nyYYoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JlNTFhMmUtNzY4Yi00YjkzLWJhYWMtOGNhZTQzMTg2
MDc4MB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk
YjkwNjBlMjEtOTY1Zi00ODRmLWE4OWMtMmIzZWRhNDIyNzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIOOVn5ANRyZef5Vxi+XCy5Ogu1vbGrqEBo2
H1szgVkFXgBGBHvM2yvNCX8TgfxDU7pI7FAkY42RNZ9UpaKVk9nj7dmmlOd4xudd
KfA5GY/ujyibn/4Z099Z5zWR8UjMC2oDGX8y9C7Rd1nh4r5pVtPolL20J7qd+reS
10h1MRN0303IquVWK0TNYdVOtptC+6CmD1ABgHMv/Z54BLAIA8FTxn3JpbGhA8/r
GQyeqjYR8bN6xTjj/GWjQUkocsD1xgGKPZZnKyVq0Mrz+ZQUz4PNLr5GvQDfdULL
PklOwzq9WDEx/DRpm2KYX2sLC8v+J47bq7qFrnWdVa/HMarz0wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCisaYMPFvLbVR9c3Mtgjk670KUMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmU1
MWEyZS03NjhiLTRiOTMtYmFhYy04Y2FlNDMxODYwNzgvYzUxNDRlMTAtY2RhMy0z
ZjFmLWFkNTQtNzIyMTY0NTUwMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JlNTFhMmUtNzY4Yi00YjkzLWJh
YWMtOGNhZTQzMTg2MDc4L2NiZTUxYTJlLTc2OGItNGI5My1iYWFjLThjYWU0MzE4
NjA3OC5jcmwwHwYDVR0jBBgwFoAUyZXNP59+hAT/8fwXpQzcP+IvVuMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmU1MWEyZS03NjhiLTRiOTMtYmFhYy04Y2Fl
NDMxODYwNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/UgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAlbHRMZ8b1h4oXXcQ4ApxLr1xRNQd/o/GVXd/AQuST0C0zBho1XjV
xRzztuUte9SNuI2eHLkvgmjzvffJBcFGu1ZGyDY2Mr6OT4B6Lty2VoDMQpoEJHjp
K8f5twWrdePRQSma0KMekJFFodoiMBLr2xtmHOxFm7ny8mr14abVudq0HcLTpf/g
CZfRV9LM48rTmHMcKOWGGwqQ1LnfxWnef2BzZY4K30qB5qGXfg97a4gvLHb9IT9N
TH7iTnVao2uaRo5asMpVnRZOt7G/PM3WuXtYS9LN2aXl3+5w04zP6SlYYQpMAfcv
KNdgB1fD5KJ9cDW4Pu6m97EVJmh6eJ1V/w==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:52 2024 by rpki-client on console-ams.rpki-client.org