Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
File:                     7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa (raw, json)
Hash identifier:          afDPShAXLylSpGp2Yta88T5mTAbinozEuJNv2EHfR+A=
Subject key identifier:   66:DB:1E:D5:65:AC:0B:27:F1:DD:68:36:16:20:D5:E3:2D:10:39:6C
Certificate issuer:       /CN=e175b8e9-bd62-4026-9a15-873e2b01713b
Certificate serial:       010D0C9F43285845CE6631D2C0BC1E484A983F00
Authority key identifier: 2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
Signing time:             Wed 08 May 2024 16:08:30 +0000
ROA not before:           Wed 08 May 2024 16:08:30 +0000
ROA not after:            Tue 06 Aug 2024 16:08:30 +0000
asID:                     3464
IP address blocks:        2607:f808::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:66:31:d2:c0:bc:1e:48:4a:98:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e175b8e9-bd62-4026-9a15-873e2b01713b
        Validity
            Not Before: May  8 16:08:30 2024 GMT
            Not After : Aug  6 16:08:30 2024 GMT
        Subject: CN=9ea5e878-9d84-495d-800f-5dcffcdbcb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:de:84:f8:f1:f4:e0:94:6f:e4:18:2f:0e:
                    cc:a1:f5:26:d6:a5:16:27:ab:ff:b5:a8:6c:26:cf:
                    a7:fc:27:f7:1b:5f:bd:4f:06:59:f0:04:2d:0e:37:
                    5b:77:a7:70:d9:f2:ce:00:df:ce:dc:b7:bc:a0:e5:
                    59:c5:62:0d:21:44:51:41:ef:65:cf:9a:dc:27:a4:
                    7c:60:f6:e4:cc:4c:a5:e4:d9:33:f3:e6:78:34:be:
                    7a:a8:4c:bf:85:07:f1:92:d9:e7:80:1d:2a:24:57:
                    0d:f3:db:7e:7b:0f:f9:13:c2:ef:8f:db:22:cc:2e:
                    1d:6c:8c:63:f0:86:c7:07:f8:04:5d:df:6f:a1:d5:
                    a1:fa:c6:f4:ff:6a:ca:c9:87:97:9e:ac:6e:77:01:
                    d3:a4:e2:dc:df:98:bf:b1:93:c7:89:05:1f:a8:64:
                    b7:2b:0d:d3:b3:ae:f8:f2:6a:15:9e:2c:fb:8b:96:
                    b8:b0:21:09:87:5f:d4:23:af:65:29:4b:58:c5:96:
                    de:df:1c:a0:3b:db:18:89:c3:01:1f:53:74:92:dd:
                    87:f5:e9:1c:b3:0f:70:e0:8b:89:63:a0:6d:11:b6:
                    bd:1a:bf:b8:31:fe:92:e7:c4:4d:3f:06:c3:93:4b:
                    e9:05:ba:5e:40:d3:db:60:53:2c:48:cc:ac:21:65:
                    50:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DB:1E:D5:65:AC:0B:27:F1:DD:68:36:16:20:D5:E3:2D:10:39:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f808::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ab:15:e7:38:25:c7:7f:74:27:f5:1c:6d:6a:3e:8a:d4:ec:
         6f:93:f3:ea:02:d3:c6:18:e4:55:70:f4:8b:4a:0e:cf:33:10:
         67:7d:ce:8a:8c:d4:4d:3a:e2:2e:c4:78:f3:b3:60:52:ec:20:
         ab:9c:4a:29:98:08:aa:15:fb:1c:15:a3:d9:d6:9c:54:92:be:
         f7:54:42:66:13:5e:9f:81:3e:b6:f6:cf:6a:91:e7:37:6f:15:
         7f:24:c0:9d:88:28:fb:df:91:dd:12:19:cf:0d:a7:09:11:0e:
         b5:12:a9:a0:a3:f6:51:ba:42:f0:51:72:4a:48:1a:f4:fa:99:
         49:04:e0:08:39:fc:4b:1b:c9:e6:6c:60:82:dd:bc:31:d8:05:
         d9:c4:88:2a:60:00:aa:09:cc:ee:25:01:38:d5:54:08:12:39:
         15:25:b7:c5:30:9a:7f:31:80:43:7f:40:4c:af:9b:dd:39:81:
         01:45:2c:e8:98:75:68:15:95:4d:2c:ef:17:60:33:fe:c4:54:
         c8:d4:35:82:65:f6:fc:58:55:ce:50:f0:d0:31:16:e3:a6:7d:
         7b:49:2f:85:90:62:1b:c4:7b:cf:8a:7b:b9:94:c4:5b:e6:ef:
         ee:7e:4e:d0:ba:ab:1a:cb:4a:27:e1:27:a8:85:2f:a3:1f:38:
         b6:cf:f5:81
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEXOZjHSwLweSEqYPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE3NWI4ZTktYmQ2Mi00MDI2LTlhMTUtODczZTJiMDE3
MTNiMB4XDTI0MDUwODE2MDgzMFoXDTI0MDgwNjE2MDgzMFowLzEtMCsGA1UEAxMk
OWVhNWU4NzgtOWQ4NC00OTVkLTgwMGYtNWRjZmZjZGJjYjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr3ehPjx9OCUb+QYLw7MofUm1qUWJ6v/tahs
Js+n/Cf3G1+9TwZZ8AQtDjdbd6dw2fLOAN/O3Le8oOVZxWINIURRQe9lz5rcJ6R8
YPbkzEyl5Nkz8+Z4NL56qEy/hQfxktnngB0qJFcN89t+ew/5E8Lvj9sizC4dbIxj
8IbHB/gEXd9vodWh+sb0/2rKyYeXnqxudwHTpOLc35i/sZPHiQUfqGS3Kw3Ts674
8moVniz7i5a4sCEJh1/UI69lKUtYxZbe3xygO9sYicMBH1N0kt2H9ekcsw9w4IuJ
Y6BtEba9Gr+4Mf6S58RNPwbDk0vpBbpeQNPbYFMsSMysIWVQKQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGbbHtVlrAsn8d1oNhYg1eMtEDlsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lMTc1
YjhlOS1iZDYyLTQwMjYtOWExNS04NzNlMmIwMTcxM2IvN2ZiZjQ0YmItMDFiMy0z
ZmRiLTljZjctNTM0NDNlOWJlNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTE3NWI4ZTktYmQ2Mi00MDI2LTlh
MTUtODczZTJiMDE3MTNiL2UxNzViOGU5LWJkNjItNDAyNi05YTE1LTg3M2UyYjAx
NzEzYi5jcmwwHwYDVR0jBBgwFoAUKrzVBHhVMsHVWTWnbohKSquffBUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lMTc1YjhlOS1iZDYyLTQwMjYtOWExNS04NzNl
MmIwMTcxM2IuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf4CDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBmqxXnOCXHf3Qn9Rxtaj6K1Oxvk/PqAtPGGORVcPSLSg7PMxBnfc6K
jNRNOuIuxHjzs2BS7CCrnEopmAiqFfscFaPZ1pxUkr73VEJmE16fgT629s9qkec3
bxV/JMCdiCj735HdEhnPDacJEQ61Eqmgo/ZRukLwUXJKSBr0+plJBOAIOfxLG8nm
bGCC3bwx2AXZxIgqYACqCczuJQE41VQIEjkVJbfFMJp/MYBDf0BMr5vdOYEBRSzo
mHVoFZVNLO8XYDP+xFTI1DWCZfb8WFXOUPDQMRbjpn17SS+FkGIbxHvPinu5lMRb
5u/ufk7Quqsay0on4SeohS+jHzi2z/WB
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:37:02 2024 by rpki-client on console-fra.rpki-client.org