Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/4df9691b-0f6a-354e-b38d-0c7e45565229.roa
File:                     4df9691b-0f6a-354e-b38d-0c7e45565229.roa (raw, json)
Hash identifier:          jixH7rJy/XSLaQCQ4sXqii1H65WlBwbnDv1Sc1ugVv8=
Subject key identifier:   F3:F9:3A:5C:DC:E5:70:71:67:BB:C9:84:DB:6A:D2:BA:91:C6:7A:1A
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F432858457A487D1D2DB75F35E9EC3700
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/4df9691b-0f6a-354e-b38d-0c7e45565229.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     63062
IP address blocks:        2001:5b0:1ff4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:7d:1d:2d:b7:5f:35:e9:ec:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=120bb35c-750e-4c61-a956-bb02f7df25e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cc:b3:89:5b:4e:35:1e:c7:f4:34:62:84:40:
                    07:9c:03:69:c3:eb:5a:a2:2f:0f:8b:40:a9:de:5f:
                    8c:41:a5:84:be:68:21:59:1f:79:6f:54:2b:16:5f:
                    fc:31:59:74:d3:f8:7e:42:c2:7d:a5:09:32:ed:54:
                    13:d6:33:51:87:35:02:0b:4c:39:0e:55:95:58:63:
                    8a:c2:64:36:de:f5:a6:cd:f4:9a:ad:5c:2e:ed:fa:
                    0b:16:67:45:9d:4e:ff:ca:f5:a2:07:bc:63:be:4d:
                    38:e2:b2:5d:ff:a5:0d:e6:a9:43:b8:7a:b8:90:55:
                    b7:b0:64:de:1b:8f:c5:c8:65:ae:e8:9b:e0:a8:80:
                    49:c4:67:f3:a8:8f:78:0b:6c:a5:d5:7c:2b:4e:33:
                    42:d6:6c:da:f8:70:74:2a:06:78:0b:f5:77:11:8f:
                    70:03:9b:0b:f3:75:fc:a9:9b:e6:a3:c6:9c:20:ca:
                    2c:db:dc:4b:e3:31:30:73:53:0a:82:ce:e8:cf:a0:
                    05:14:ca:62:7f:d7:8e:a4:01:b3:6c:76:31:1c:99:
                    fb:4f:fb:eb:0f:a8:5c:59:42:09:07:26:0c:e7:c6:
                    eb:51:ad:19:77:db:53:62:fc:06:eb:c0:87:1d:f0:
                    1d:3a:90:33:44:52:e9:e0:28:fa:8f:c6:1e:5e:ad:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F9:3A:5C:DC:E5:70:71:67:BB:C9:84:DB:6A:D2:BA:91:C6:7A:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/4df9691b-0f6a-354e-b38d-0c7e45565229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5b0:1ff4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:65:39:2a:74:55:73:e0:34:d7:68:ff:79:e4:4a:52:53:8b:
         10:29:9c:24:de:da:60:a5:52:2d:c2:22:75:78:83:a0:d8:d2:
         93:c0:72:d6:41:d8:0d:35:9a:e4:89:70:8b:f4:81:3f:6a:b0:
         db:13:a2:18:32:a4:da:f8:61:fd:6e:3c:42:b3:f2:32:58:d3:
         be:24:a0:8d:86:7c:dd:c6:66:b2:24:74:02:3a:eb:4b:90:7d:
         be:16:5a:21:dd:7d:6c:76:3c:37:e6:33:40:4d:8b:bd:f0:ec:
         76:7e:6a:f3:7c:c4:e0:6d:01:1c:ed:77:38:c4:20:37:2f:5e:
         66:5b:f6:fb:b9:a8:8a:6a:25:d6:d5:75:43:24:bd:38:6e:eb:
         72:c9:5b:40:e2:32:57:9c:46:cc:3c:50:98:f6:25:c6:87:ed:
         0a:d5:47:ff:a9:39:ca:56:b5:86:3f:95:5d:d7:60:58:ea:59:
         d0:88:a3:27:29:15:62:5c:b0:fc:87:23:e5:b3:52:8f:09:d7:
         4a:3e:e1:ae:e0:49:ec:e7:0a:c0:cd:93:ad:74:68:0f:dc:c3:
         f8:eb:bb:48:b0:c3:9d:7e:62:91:98:4d:9e:3e:15:73:6e:41:
         ef:cc:4e:c3:a0:0f:30:f5:95:01:00:67:9d:c3:4f:3d:ab:f1:
         e5:64:c4:85
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV6SH0dLbdfNensNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk
MTIwYmIzNWMtNzUwZS00YzYxLWE5NTYtYmIwMmY3ZGYyNWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMyziVtONR7H9DRihEAHnANpw+taoi8Pi0Cp
3l+MQaWEvmghWR95b1QrFl/8MVl00/h+QsJ9pQky7VQT1jNRhzUCC0w5DlWVWGOK
wmQ23vWmzfSarVwu7foLFmdFnU7/yvWiB7xjvk044rJd/6UN5qlDuHq4kFW3sGTe
G4/FyGWu6JvgqIBJxGfzqI94C2yl1XwrTjNC1mza+HB0KgZ4C/V3EY9wA5sL83X8
qZvmo8acIMos29xL4zEwc1MKgs7oz6AFFMpif9eOpAGzbHYxHJn7T/vrD6hcWUIJ
ByYM58brUa0Zd9tTYvwG68CHHfAdOpAzRFLp4Cj6j8YeXq0RlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPP5Olzc5XBxZ7vJhNtq0rqRxnoaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvNGRmOTY5MWItMGY2YS0z
NTRlLWIzOGQtMGM3ZTQ1NTY1MjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFsB/0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHZlOSp0VXPgNNdo/3nkSlJTixApnCTe2mClUi3CInV4g6DY0pPA
ctZB2A01muSJcIv0gT9qsNsTohgypNr4Yf1uPEKz8jJY074koI2GfN3GZrIkdAI6
60uQfb4WWiHdfWx2PDfmM0BNi73w7HZ+avN8xOBtARztdzjEIDcvXmZb9vu5qIpq
JdbVdUMkvThu63LJW0DiMlecRsw8UJj2JcaH7QrVR/+pOcpWtYY/lV3XYFjqWdCI
oycpFWJcsPyHI+WzUo8J10o+4a7gSeznCsDNk610aA/cw/jru0iww51+YpGYTZ4+
FXNuQe/MTsOgDzD1lQEAZ53DTz2r8eVkxIU=
-----END CERTIFICATE-----
Generated at Sat May 18 01:32:40 2024 by rpki-client on console-fra.rpki-client.org