Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/1806c907-f51b-3ddd-9700-176341f778ee.roa
File:                     1806c907-f51b-3ddd-9700-176341f778ee.roa (raw, json)
Hash identifier:          Jkqgoo56DLbruPBeR2uVmHo8jj9SpR6eZj/V8s2uPHY=
Subject key identifier:   FF:9E:2F:92:1A:98:4C:F9:B2:F4:40:78:20:F9:97:EA:5B:56:E0:29
Certificate issuer:       /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
Certificate serial:       010D0C9F4328584522759778D092A4BFB4ED9680
Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/1806c907-f51b-3ddd-9700-176341f778ee.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     62597
IP address blocks:        2620:4d:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:97:78:d0:92:a4:bf:b4:ed:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=643c5b9c-8425-4340-92bc-4c1b92b5d7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:07:55:af:4b:e5:9d:a3:6d:b9:0f:de:d8:
                    6f:96:84:d5:60:78:9c:37:70:49:4e:e1:5a:29:7f:
                    60:e1:b2:36:b8:38:3b:13:a1:17:62:ef:0a:e1:b6:
                    2c:5e:fe:0d:65:ba:da:4b:a8:58:39:35:6a:07:df:
                    81:bc:94:ab:70:80:48:38:a1:4b:ed:b9:71:aa:c2:
                    78:ea:d6:8b:88:b3:47:c3:31:3a:da:f9:ee:f5:57:
                    ab:62:ba:f5:a9:b9:53:86:f6:c8:8c:0f:0c:bd:56:
                    eb:38:99:01:fb:b6:39:51:d9:c9:0d:71:b0:84:d0:
                    5b:b1:4f:55:39:09:1b:bd:24:1a:2f:05:23:6b:d0:
                    6d:a7:e5:5a:63:06:2d:ad:bf:c5:b1:af:e2:65:c3:
                    c9:90:12:35:33:62:8f:f9:92:6f:9f:54:14:32:61:
                    98:05:f8:e3:0c:11:83:84:16:14:8c:55:92:b3:86:
                    ad:23:da:d7:bc:90:44:18:ac:b0:8f:1e:dd:5d:e3:
                    45:09:45:3a:7a:c3:c3:52:6a:fb:f6:08:66:a2:0c:
                    3a:d4:43:4b:94:5e:37:7d:6f:7a:87:51:96:f7:50:
                    80:c1:1d:66:31:4f:e5:b2:33:5b:a5:fc:5f:dd:13:
                    57:f9:30:3a:e5:c0:15:58:d4:56:57:fd:d2:fe:21:
                    99:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9E:2F:92:1A:98:4C:F9:B2:F4:40:78:20:F9:97:EA:5B:56:E0:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/1806c907-f51b-3ddd-9700-176341f778ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl

            X509v3 Authority Key Identifier:
                keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4d:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:fe:af:09:56:bc:8d:87:a6:99:25:3a:8a:fe:d8:71:d4:0e:
         fa:d6:9c:f2:45:98:a8:93:2a:79:a0:8f:ed:02:9a:ea:ef:5b:
         d4:bf:c0:ce:ad:75:e1:88:c4:f8:67:21:a0:0d:5b:88:85:28:
         d9:5d:44:da:7e:c4:79:d3:a7:4d:a0:ea:bb:3a:9a:e8:3a:08:
         de:d4:ce:7c:f9:91:49:75:46:f6:61:f2:42:37:c2:fc:fa:bb:
         7d:68:1e:ea:1f:da:1e:97:8c:6f:e2:d7:ae:c3:f5:1b:36:51:
         10:fb:3d:8f:45:5e:b7:c0:15:db:0b:8b:75:75:58:53:a7:0c:
         13:16:2f:d8:f8:2d:2b:8f:70:f4:07:90:29:ed:0b:ae:9f:51:
         be:c3:40:df:df:c3:bb:eb:f4:5c:4d:a1:a9:b4:0d:d9:09:02:
         ff:86:48:24:c4:e2:86:6b:30:62:09:5e:be:3b:88:2e:c2:8b:
         5a:15:b9:22:20:52:2e:15:fc:36:26:e0:8e:5f:eb:09:4d:a8:
         7b:b9:7d:0c:4d:55:b1:52:e9:0c:ec:dd:0b:7b:ad:e3:34:5f:
         be:6a:cf:8e:b7:bb:cd:c2:5c:b4:42:1d:6e:49:ae:4c:8a:da:
         56:c4:40:b0:2e:7e:95:e0:25:2a:6f:86:b4:c7:50:8a:76:75:
         66:fb:0a:ab
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEUidZd40JKkv7TtloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2
M2VhMB4XDTI0MDMwODAyMDAyNloXDTI0MDYwNjAxMDAyNlowLzEtMCsGA1UEAxMk
NjQzYzViOWMtODQyNS00MzQwLTkyYmMtNGMxYjkyYjVkN2U4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uYHVa9L5Z2jbbkP3thvloTVYHicN3BJTuFa
KX9g4bI2uDg7E6EXYu8K4bYsXv4NZbraS6hYOTVqB9+BvJSrcIBIOKFL7blxqsJ4
6taLiLNHwzE62vnu9VerYrr1qblThvbIjA8MvVbrOJkB+7Y5UdnJDXGwhNBbsU9V
OQkbvSQaLwUja9Btp+VaYwYtrb/Fsa/iZcPJkBI1M2KP+ZJvn1QUMmGYBfjjDBGD
hBYUjFWSs4atI9rXvJBEGKywjx7dXeNFCUU6esPDUmr79ghmogw61ENLlF43fW96
h1GW91CAwR1mMU/lsjNbpfxf3RNX+TA65cAVWNRWV/3S/iGZ3wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFP+eL5IamEz5svRAeCD5l+pbVuApMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi
NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvMTgwNmM5MDctZjUxYi0z
ZGRkLTk3MDAtMTc2MzQxZjc3OGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj
N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy
NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx
ZGNiMjYzZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiAATUAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWP6vCVa8jYemmSU6iv7YcdQO+tac8kWYqJMqeaCP7QKa6u9b1L/A
zq114YjE+GchoA1biIUo2V1E2n7EedOnTaDquzqa6DoI3tTOfPmRSXVG9mHyQjfC
/Pq7fWge6h/aHpeMb+LXrsP1GzZREPs9j0Vet8AV2wuLdXVYU6cMExYv2PgtK49w
9AeQKe0Lrp9RvsNA39/Du+v0XE2hqbQN2QkC/4ZIJMTihmswYglevjuILsKLWhW5
IiBSLhX8Nibgjl/rCU2oe7l9DE1VsVLpDOzdC3ut4zRfvmrPjre7zcJctEIdbkmu
TIraVsRAsC5+leAlKm+GtMdQinZ1ZvsKqw==
-----END CERTIFICATE-----
Generated at Sat May 18 15:35:46 2024 by rpki-client on console-fra.rpki-client.org