Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6e47fe5d-d664-31f9-ab57-4bcbf8d213fc.roa
File:                     6e47fe5d-d664-31f9-ab57-4bcbf8d213fc.roa (raw, json)
Hash identifier:          0hL8F4WoFwsIDSnGb/JD+gspnJJl7U5v34TTh38Pfd0=
Subject key identifier:   64:EA:DD:E6:37:98:33:33:16:12:B6:A4:86:4B:69:59:05:86:75:AE
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285845E193CEBD9B9ECB1CDC70DA78
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6e47fe5d-d664-31f9-ab57-4bcbf8d213fc.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     62651
IP address blocks:        2604:c980::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:ce:bd:9b:9e:cb:1c:dc:70:da:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=3050d642-56cb-4c8b-a7c3-b6ecc53a5ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6f:42:0b:19:a9:67:7e:81:a4:d7:ac:0b:29:
                    16:8b:b2:17:c7:31:8f:8a:e1:f5:ed:a7:ed:a9:c2:
                    15:fb:d8:f6:8a:3a:1a:a8:46:c3:20:bd:bd:53:81:
                    5c:ba:98:d7:f0:bd:7f:66:98:5b:47:0a:05:71:71:
                    7f:97:98:7b:24:6f:1d:b5:be:bd:40:51:fc:36:9e:
                    0b:2e:3e:32:9c:3d:00:04:5b:4d:2e:1e:93:9a:57:
                    2d:79:78:ee:d3:a6:90:1c:d9:a7:87:d0:0e:1e:0b:
                    41:6d:b8:0a:50:15:8f:40:55:4a:6f:1f:64:95:04:
                    24:88:fc:0e:7f:b8:c2:ea:63:57:4b:d6:69:a2:78:
                    e4:e5:fd:27:98:30:40:cf:0e:64:c2:35:5b:a3:4c:
                    00:f3:3f:9b:83:85:f0:52:bc:db:dd:74:b1:b1:ab:
                    6b:e5:0e:e9:c8:67:a8:ea:a5:49:cc:19:e0:9e:bf:
                    f3:e7:c1:af:c3:2d:5f:1b:49:b5:84:1f:ad:af:b9:
                    8f:a5:c3:7d:9e:ba:e9:e6:d1:aa:12:31:55:30:05:
                    4a:5a:56:4f:fb:45:a2:90:88:cc:9a:26:a9:eb:3b:
                    7e:16:6c:79:33:04:ed:12:44:89:8f:64:d0:18:3d:
                    1f:0b:df:92:79:24:6f:77:f8:2f:1f:cb:47:33:48:
                    df:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EA:DD:E6:37:98:33:33:16:12:B6:A4:86:4B:69:59:05:86:75:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6e47fe5d-d664-31f9-ab57-4bcbf8d213fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:d7:04:20:60:ef:73:32:4c:79:0d:ae:48:d7:cd:74:98:
         7e:b5:39:98:b4:64:25:d1:cc:46:69:6f:bc:ab:99:b1:9a:16:
         38:08:a3:70:ed:f0:3d:19:cb:fe:cc:2d:23:f1:e8:82:89:58:
         24:d2:07:23:89:8b:94:08:8c:5b:37:1e:9e:ed:04:50:38:e1:
         ac:f6:0e:ee:63:f8:a0:3d:1f:86:1c:5b:1b:51:c4:48:f6:cf:
         59:4d:fb:c1:38:3b:6b:37:06:f5:f4:49:55:6f:bc:09:ee:3c:
         0e:83:23:e3:a2:d6:40:0b:b1:8c:21:1a:be:c2:b3:55:9e:7b:
         33:8b:56:18:e8:4e:41:0c:a4:16:5f:ac:bb:6a:a1:db:5e:c1:
         57:06:27:c4:f1:35:e5:ec:61:7c:db:b5:32:b4:68:37:b9:06:
         74:6a:ff:cd:66:67:a6:be:bf:a8:35:63:5a:03:13:cf:d4:0d:
         cf:57:04:8c:81:e7:27:26:67:14:d7:62:8d:b6:10:7b:ea:c8:
         af:99:e2:80:ec:fb:f7:f3:4e:42:e4:7e:c3:5c:32:53:b5:85:
         8d:cc:9c:c3:40:a9:c9:6a:68:c0:87:40:98:46:cd:44:2c:cb:
         40:1d:3d:7d:86:8c:3e:b2:04:01:46:f7:29:98:8b:17:fa:f9:
         d8:67:af:ae
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEXhk869m57LHNxw2ngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI0MDUxNTEzMDAzNFoXDTI0MDgxMzEzMDAzNFowLzEtMCsGA1UEAxMk
MzA1MGQ2NDItNTZjYi00YzhiLWE3YzMtYjZlY2M1M2E1YWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim9CCxmpZ36BpNesCykWi7IXxzGPiuH17aft
qcIV+9j2ijoaqEbDIL29U4FcupjX8L1/ZphbRwoFcXF/l5h7JG8dtb69QFH8Np4L
Lj4ynD0ABFtNLh6TmlcteXju06aQHNmnh9AOHgtBbbgKUBWPQFVKbx9klQQkiPwO
f7jC6mNXS9Zponjk5f0nmDBAzw5kwjVbo0wA8z+bg4XwUrzb3XSxsatr5Q7pyGeo
6qVJzBngnr/z58Gvwy1fG0m1hB+tr7mPpcN9nrrp5tGqEjFVMAVKWlZP+0WikIjM
miap6zt+Fmx5MwTtEkSJj2TQGD0fC9+SeSRvd/gvH8tHM0jfZwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGTq3eY3mDMzFhK2pIZLaVkFhnWuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNmU0N2ZlNWQtZDY2NC0z
MWY5LWFiNTctNGJjYmY4ZDIxM2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTJgAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAW87XBCBg73MyTHkNrkjXzXSYfrU5mLRkJdHMRmlvvKuZsZoWOAij
cO3wPRnL/swtI/HogolYJNIHI4mLlAiMWzcenu0EUDjhrPYO7mP4oD0fhhxbG1HE
SPbPWU37wTg7azcG9fRJVW+8Ce48DoMj46LWQAuxjCEavsKzVZ57M4tWGOhOQQyk
Fl+su2qh217BVwYnxPE15exhfNu1MrRoN7kGdGr/zWZnpr6/qDVjWgMTz9QNz1cE
jIHnJyZnFNdijbYQe+rIr5nigOz79/NOQuR+w1wyU7WFjcycw0CpyWpowIdAmEbN
RCzLQB09fYaMPrIEAUb3KZiLF/r52Gevrg==
-----END CERTIFICATE-----
Generated at Sat May 18 15:35:02 2024 by rpki-client on console-fra.rpki-client.org