Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1ece9b12-0d51-3831-9ce3-ffac34c75e24.roa
File:                     1ece9b12-0d51-3831-9ce3-ffac34c75e24.roa (raw, json)
Hash identifier:          EsdUt+QoMSF/87iNSurF3lyC5IVlbvzA0iZ8b6ItYUk=
Subject key identifier:   24:25:D6:FC:C3:30:08:DD:9C:1A:E9:5F:10:4F:6D:79:E6:5D:95:55
Certificate issuer:       /CN=2531a4ba-6abc-447c-add8-67edc3c483ab
Certificate serial:       010D0C9F43285845DD63A42E66AFFB0826307200
Authority key identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1ece9b12-0d51-3831-9ce3-ffac34c75e24.roa
Signing time:             Tue 14 May 2024 01:00:24 +0000
ROA not before:           Tue 14 May 2024 01:00:24 +0000
ROA not after:            Mon 12 Aug 2024 01:00:24 +0000
asID:                     395585
IP address blocks:        2620:12a:c001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dd:63:a4:2e:66:af:fb:08:26:30:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2531a4ba-6abc-447c-add8-67edc3c483ab
        Validity
            Not Before: May 14 01:00:24 2024 GMT
            Not After : Aug 12 01:00:24 2024 GMT
        Subject: CN=9da75ff8-020b-4d62-9e48-93e0e4ee1466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e5:9b:a5:91:b1:cd:8e:28:a5:00:8e:a6:ec:
                    36:fa:a9:09:9d:b9:46:76:e7:14:1d:37:c8:36:f9:
                    3c:03:f0:10:0e:7c:66:18:2a:55:16:c1:6b:78:82:
                    6c:e0:26:22:f7:cc:a2:e6:38:d4:8b:4a:2d:12:6c:
                    6e:33:81:b4:91:ed:81:a8:d2:8c:98:31:08:6b:21:
                    8f:04:47:09:e5:de:85:9e:ff:4d:22:e5:93:c2:16:
                    ea:03:9f:4f:74:eb:f7:b5:3d:12:f6:4b:75:b5:c3:
                    ee:9a:c9:e2:0d:bc:05:ab:c7:97:2b:24:45:30:01:
                    96:85:3b:56:4d:2b:d6:8e:d0:25:1a:39:20:06:fb:
                    63:03:5b:e5:b3:c0:30:4a:ec:fb:7c:9c:3d:fb:8a:
                    aa:a3:72:dc:0e:38:fb:82:ee:df:6f:c6:44:84:92:
                    6e:e1:59:5f:2a:1e:53:2f:4b:61:b3:d1:c8:3d:27:
                    39:5b:c7:a8:21:b8:9f:4c:4c:10:a9:a9:e4:da:33:
                    4a:94:3a:d0:6b:13:a6:49:6e:aa:d0:0c:fa:78:9f:
                    99:5d:99:0c:c7:cf:7c:0c:2d:58:ee:b2:58:80:56:
                    10:63:7c:cf:9b:a2:72:6a:72:fe:2f:1f:92:4f:7f:
                    59:03:ef:e6:49:ec:0e:12:73:b0:25:93:bf:3c:9f:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:25:D6:FC:C3:30:08:DD:9C:1A:E9:5F:10:4F:6D:79:E6:5D:95:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1ece9b12-0d51-3831-9ce3-ffac34c75e24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl

            X509v3 Authority Key Identifier:
                keyid:9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12a:c001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a5:12:0c:fd:72:51:6e:fb:4f:d6:a0:12:b2:c4:ef:05:20:
         0d:0d:b5:94:19:fe:d2:f3:5f:7a:96:9c:9a:77:5b:cc:cf:14:
         57:c5:56:60:c0:c0:ce:59:b3:4f:df:0c:c3:b9:67:71:43:5a:
         fd:d4:1d:5e:91:8d:be:3c:6e:b5:9c:27:3c:b8:1e:27:c2:5a:
         c1:e2:ef:09:83:7c:b9:be:3d:63:8a:76:4f:eb:43:4a:e2:77:
         09:83:b7:29:79:11:5a:6d:d6:c6:20:a6:24:43:d4:e7:32:df:
         be:d5:9b:0c:48:da:46:25:93:83:40:2f:3b:3f:73:a7:bd:3b:
         89:dd:4e:6f:09:b7:94:1f:3c:8b:6b:c6:ea:18:f6:c1:a4:96:
         62:cf:35:a4:64:8c:e2:1b:01:27:54:de:db:23:24:19:65:46:
         82:b2:13:a6:2b:e4:c8:02:0f:75:08:44:4d:6f:18:bb:64:97:
         2f:c4:ba:77:62:88:b4:14:7f:88:d8:f2:62:25:ec:0b:12:eb:
         b7:f3:a0:7b:a4:7a:06:83:38:61:d7:04:88:b6:82:4c:f9:4c:
         6c:d5:93:89:24:f7:eb:95:81:88:75:9f:40:fd:9d:18:fe:8d:
         e0:68:4f:e8:20:94:e8:18:d4:97:27:1e:fc:53:29:d1:33:08:
         77:87:76:a7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXdY6QuZq/7CCYwcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzMWE0YmEtNmFiYy00NDdjLWFkZDgtNjdlZGMzYzQ4
M2FiMB4XDTI0MDUxNDAxMDAyNFoXDTI0MDgxMjAxMDAyNFowLzEtMCsGA1UEAxMk
OWRhNzVmZjgtMDIwYi00ZDYyLTllNDgtOTNlMGU0ZWUxNDY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uWbpZGxzY4opQCOpuw2+qkJnblGducUHTfI
Nvk8A/AQDnxmGCpVFsFreIJs4CYi98yi5jjUi0otEmxuM4G0ke2BqNKMmDEIayGP
BEcJ5d6Fnv9NIuWTwhbqA59PdOv3tT0S9kt1tcPumsniDbwFq8eXKyRFMAGWhTtW
TSvWjtAlGjkgBvtjA1vls8AwSuz7fJw9+4qqo3LcDjj7gu7fb8ZEhJJu4VlfKh5T
L0ths9HIPSc5W8eoIbifTEwQqank2jNKlDrQaxOmSW6q0Az6eJ+ZXZkMx898DC1Y
7rJYgFYQY3zPm6JyanL+Lx+ST39ZA+/mSewOEnOwJZO/PJ8yAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCQl1vzDMAjdnBrpXxBPbXnmXZVVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNTMx
YTRiYS02YWJjLTQ0N2MtYWRkOC02N2VkYzNjNDgzYWIvMWVjZTliMTItMGQ1MS0z
ODMxLTljZTMtZmZhYzM0Yzc1ZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjUzMWE0YmEtNmFiYy00NDdjLWFk
ZDgtNjdlZGMzYzQ4M2FiLzI1MzFhNGJhLTZhYmMtNDQ3Yy1hZGQ4LTY3ZWRjM2M0
ODNhYi5jcmwwHwYDVR0jBBgwFoAUnjqfdPlsZO1jn6yB8uQ3Qy72OwowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yNTMxYTRiYS02YWJjLTQ0N2MtYWRkOC02N2Vk
YzNjNDgzYWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKsAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHSlEgz9clFu+0/WoBKyxO8FIA0NtZQZ/tLzX3qWnJp3W8zPFFfF
VmDAwM5Zs0/fDMO5Z3FDWv3UHV6Rjb48brWcJzy4HifCWsHi7wmDfLm+PWOKdk/r
Q0ridwmDtyl5EVpt1sYgpiRD1Ocy377VmwxI2kYlk4NALzs/c6e9O4ndTm8Jt5Qf
PItrxuoY9sGklmLPNaRkjOIbASdU3tsjJBllRoKyE6Yr5MgCD3UIRE1vGLtkly/E
undiiLQUf4jY8mIl7AsS67fzoHukegaDOGHXBIi2gkz5TGzVk4kk9+uVgYh1n0D9
nRj+jeBoT+gglOgY1JcnHvxTKdEzCHeHdqc=
-----END CERTIFICATE-----
Generated at Sun Jun 2 21:16:17 2024 by rpki-client on console-ams.rpki-client.org