Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a3e5e46a-dd84-34eb-9259-02fea641d879.roa
File:                     a3e5e46a-dd84-34eb-9259-02fea641d879.roa (raw, json)
Hash identifier:          xAyOMg1JWIMNBNmZ/VSgIunOTYmxJUPq4r7vrg1jFJY=
Subject key identifier:   B9:C9:28:A1:8B:0F:E6:E9:5A:88:20:0E:5C:6E:7E:6C:70:96:7E:62
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285845E88E5F2B6C07C55DEF0A2EC0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a3e5e46a-dd84-34eb-9259-02fea641d879.roa
Signing time:             Sat 18 May 2024 01:00:27 +0000
ROA not before:           Sat 18 May 2024 01:00:27 +0000
ROA not after:            Fri 16 Aug 2024 01:00:27 +0000
asID:                     396356
IP address blocks:        2607:740:45::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e8:8e:5f:2b:6c:07:c5:5d:ef:0a:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: May 18 01:00:27 2024 GMT
            Not After : Aug 16 01:00:27 2024 GMT
        Subject: CN=103e1f20-bbf1-4e29-959a-de62cd09e4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:03:5f:46:58:f2:41:de:8c:ee:a6:c2:17:1a:
                    d3:b0:bc:87:bc:bc:e1:8c:4f:da:d2:5e:2c:08:a3:
                    e4:5a:8b:be:5d:e7:86:27:cc:51:e7:42:08:d4:64:
                    a2:52:03:e9:f0:87:cb:94:c3:10:b7:96:c7:13:3d:
                    f7:68:77:a5:4a:1a:e7:81:7a:86:a7:47:78:b7:21:
                    0d:4e:a8:b5:e0:2e:53:7a:61:c6:a9:e5:47:16:e6:
                    11:84:ed:b7:ce:0f:9e:dd:f6:40:d1:e5:f0:02:64:
                    c4:16:6e:dd:94:03:14:4e:b5:e2:3d:49:94:a2:40:
                    c3:1e:ef:b3:aa:27:80:cd:e3:c1:21:f1:a4:fe:f4:
                    32:24:c2:46:2a:c9:65:22:47:a4:f0:fa:8e:25:67:
                    0f:83:48:e0:c9:27:eb:ef:40:a6:d4:81:a0:e1:b1:
                    37:01:e6:17:46:d2:85:5d:77:29:33:01:cd:9e:bc:
                    e4:69:b3:e1:6b:35:bd:7f:1e:cd:df:1d:f6:2f:33:
                    53:47:97:a2:e6:d6:47:5b:c7:14:08:5d:3e:dc:e9:
                    63:de:72:0b:f1:2c:c4:00:e3:ee:79:ca:bd:60:9c:
                    51:77:72:25:e1:ca:a6:aa:19:dc:88:67:7b:2f:62:
                    0f:c6:91:11:c5:0e:72:55:23:a5:03:1b:38:f5:11:
                    26:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C9:28:A1:8B:0F:E6:E9:5A:88:20:0E:5C:6E:7E:6C:70:96:7E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a3e5e46a-dd84-34eb-9259-02fea641d879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:45::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:bf:d9:b8:1c:0b:db:3f:bd:b5:fd:22:d0:fa:62:95:a0:ec:
         8b:8e:f7:30:aa:14:37:be:2e:9b:01:fc:64:8b:68:1a:b2:f7:
         1c:94:f2:e6:95:8d:3c:7e:d2:d7:34:15:ca:46:8f:04:30:e7:
         d4:e8:44:fb:01:b6:07:4c:53:db:c1:f7:c9:a9:ce:c0:f1:03:
         74:9e:5e:1a:e4:d3:77:71:85:da:0b:90:33:4d:b6:98:d6:40:
         34:9f:34:a4:94:af:f8:82:3f:09:e9:ad:29:7c:37:ab:15:f4:
         95:d4:e2:12:98:63:30:75:e0:94:fc:12:e7:dd:6a:94:0c:4b:
         c3:f2:1b:c2:a2:4f:9e:5b:92:41:d1:13:84:00:83:07:42:80:
         54:7c:f8:f5:78:f3:14:03:57:cf:87:f7:32:de:8f:e4:d6:ab:
         67:49:59:30:9d:cb:a1:ad:82:47:72:d0:c7:9f:b1:9c:e9:51:
         eb:0e:37:ca:2b:30:5d:05:bd:ca:6b:01:3c:72:79:09:b9:67:
         0c:42:e6:8c:73:9c:4f:f1:63:fa:95:7c:db:2f:1c:ef:60:ee:
         76:05:8c:70:84:ce:da:82:01:e3:a9:e9:e0:8a:92:20:1a:97:
         f8:e7:5f:de:a2:71:9e:6c:3b:0d:7d:95:19:d9:ba:23:7a:dc:
         1f:53:fa:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXojl8rbAfFXe8KLsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI0MDUxODAxMDAyN1oXDTI0MDgxNjAxMDAyN1owLzEtMCsGA1UEAxMk
MTAzZTFmMjAtYmJmMS00ZTI5LTk1OWEtZGU2MmNkMDllNGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gNfRljyQd6M7qbCFxrTsLyHvLzhjE/a0l4s
CKPkWou+XeeGJ8xR50II1GSiUgPp8IfLlMMQt5bHEz33aHelShrngXqGp0d4tyEN
Tqi14C5TemHGqeVHFuYRhO23zg+e3fZA0eXwAmTEFm7dlAMUTrXiPUmUokDDHu+z
qieAzePBIfGk/vQyJMJGKsllIkek8PqOJWcPg0jgySfr70Cm1IGg4bE3AeYXRtKF
XXcpMwHNnrzkabPhazW9fx7N3x32LzNTR5ei5tZHW8cUCF0+3Olj3nIL8SzEAOPu
ecq9YJxRd3Il4cqmqhnciGd7L2IPxpERxQ5yVSOlAxs49REm5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLnJKKGLD+bpWoggDlxufmxwln5iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTNlNWU0NmEtZGQ4NC0z
NGViLTkyNTktMDJmZWE2NDFkODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACO/2bgcC9s/vbX9ItD6YpWg7IuO9zCqFDe+LpsB/GSLaBqy9xyU
8uaVjTx+0tc0FcpGjwQw59ToRPsBtgdMU9vB98mpzsDxA3SeXhrk03dxhdoLkDNN
tpjWQDSfNKSUr/iCPwnprSl8N6sV9JXU4hKYYzB14JT8EufdapQMS8PyG8KiT55b
kkHRE4QAgwdCgFR8+PV48xQDV8+H9zLej+TWq2dJWTCdy6Gtgkdy0MefsZzpUesO
N8orMF0FvcprATxyeQm5ZwxC5oxznE/xY/qVfNsvHO9g7nYFjHCEztqCAeOp6eCK
kiAal/jnX96icZ5sOw19lRnZuiN63B9T+us=
-----END CERTIFICATE-----
Generated at Thu May 23 17:57:27 2024 by rpki-client on console-fra.rpki-client.org