Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a10dd3c7-391a-32a9-85ba-fc4e6e7daf68.roa
File:                     a10dd3c7-391a-32a9-85ba-fc4e6e7daf68.roa (raw, json)
Hash identifier:          w377GQNwnf3Ty7I/y+9wJv8t++poeJLjjK/nYj1wNEs=
Subject key identifier:   9D:85:5E:42:C4:2D:25:97:65:57:09:41:88:55:E1:8B:4A:07:AC:38
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845347D49A78137AB2985502E80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a10dd3c7-391a-32a9-85ba-fc4e6e7daf68.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        2001:568:202::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:49:a7:81:37:ab:29:85:50:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=98f758c9-6a4a-4a38-9895-87ec54e1fda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:12:23:95:b6:d7:02:be:7d:64:f3:4f:7b:
                    bb:55:9f:cd:63:6c:70:ca:3a:4d:c0:54:e6:2c:55:
                    ea:5e:b3:60:50:ca:a0:87:9c:1e:6a:cd:78:1b:5c:
                    2c:51:01:4e:33:73:93:1a:dd:d6:1d:93:7b:bb:16:
                    35:d8:2f:f1:ce:0f:a0:de:d9:eb:c4:13:4e:ab:8f:
                    1e:80:eb:81:f8:bb:5c:5a:83:0f:1e:ab:24:28:e5:
                    d1:64:52:36:a2:72:58:24:c5:cb:fd:e1:f4:19:84:
                    48:3d:45:d5:5a:f7:be:d6:69:3d:62:9d:46:3b:b0:
                    d4:a1:1f:19:e8:8f:91:06:e2:fa:62:d3:59:e0:40:
                    3a:a9:6d:22:3a:91:fa:99:2e:c8:13:45:97:bf:11:
                    3d:ef:3b:e9:12:4e:43:87:df:4e:98:0f:7c:2c:04:
                    af:ab:c2:e5:70:62:6f:d8:2a:83:d0:ad:73:b6:75:
                    38:cf:dd:9e:5a:f5:5d:68:13:01:87:b1:83:29:ea:
                    8f:c2:93:d2:ea:8e:09:67:37:d5:5b:92:18:17:71:
                    99:6e:b6:7a:99:96:e6:ef:3c:59:9c:31:07:87:f5:
                    22:d6:3e:9d:43:21:1a:08:94:d2:dd:9c:03:0c:63:
                    00:ab:13:a7:ba:20:01:02:a6:4c:20:bd:19:11:d8:
                    fb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:85:5E:42:C4:2D:25:97:65:57:09:41:88:55:E1:8B:4A:07:AC:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a10dd3c7-391a-32a9-85ba-fc4e6e7daf68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:568:202::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:71:d6:70:e6:84:cf:20:02:9a:95:25:db:74:83:6b:0c:81:
         82:19:68:b0:52:8b:4c:76:1d:10:ca:9c:f7:01:1b:57:50:3d:
         b6:c8:20:68:21:79:d2:7f:c1:f0:58:0b:99:78:e9:c8:1f:1b:
         44:b5:91:89:da:a0:5e:1f:38:a7:ed:8f:26:fe:a2:f1:9e:06:
         67:3e:c2:7f:e1:be:36:11:df:d6:71:02:be:22:91:e4:78:16:
         39:ef:69:0f:3a:31:12:39:18:65:e9:3d:af:34:03:e6:c8:73:
         d4:82:bc:e1:1a:ff:2a:43:fc:50:4d:1b:94:ce:37:17:f4:1c:
         d5:41:12:83:a4:82:ea:2e:ba:02:4b:71:9c:95:4f:5a:e7:93:
         50:65:3a:87:78:ae:56:8b:ed:67:9a:23:50:05:17:12:45:bd:
         d6:fe:be:3f:80:1c:31:f8:bd:fc:de:fc:44:9b:1b:e0:ce:2f:
         f0:75:41:64:bd:46:ad:58:6f:5b:28:0e:a1:10:ed:ff:a7:28:
         1b:19:0d:ad:84:3a:01:47:81:ef:95:e2:0a:8c:a3:01:2f:58:
         cf:38:cc:49:e1:10:29:50:05:99:7a:f9:43:1c:3f:fd:51:58:
         88:70:44:6c:03:30:3f:6a:ed:8a:eb:5b:4b:9e:ed:eb:72:03:
         5e:2d:7b:a3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEU0fUmngTerKYVQLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxNDEzMDAzMFoXDTI0MDYxMjEzMDAzMFowLzEtMCsGA1UEAxMk
OThmNzU4YzktNmE0YS00YTM4LTk4OTUtODdlYzU0ZTFmZGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwsSI5W21wK+fWTzT3u7VZ/NY2xwyjpNwFTm
LFXqXrNgUMqgh5weas14G1wsUQFOM3OTGt3WHZN7uxY12C/xzg+g3tnrxBNOq48e
gOuB+LtcWoMPHqskKOXRZFI2onJYJMXL/eH0GYRIPUXVWve+1mk9Yp1GO7DUoR8Z
6I+RBuL6YtNZ4EA6qW0iOpH6mS7IE0WXvxE97zvpEk5Dh99OmA98LASvq8LlcGJv
2CqD0K1ztnU4z92eWvVdaBMBh7GDKeqPwpPS6o4JZzfVW5IYF3GZbrZ6mZbm7zxZ
nDEHh/Ui1j6dQyEaCJTS3ZwDDGMAqxOnuiABAqZMIL0ZEdj7bQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ2FXkLELSWXZVcJQYhV4YtKB6w4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTEwZGQzYzctMzkxYS0z
MmE5LTg1YmEtZmM0ZTZlN2RhZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaAIC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHJx1nDmhM8gApqVJdt0g2sMgYIZaLBSi0x2HRDKnPcBG1dQPbbI
IGghedJ/wfBYC5l46cgfG0S1kYnaoF4fOKftjyb+ovGeBmc+wn/hvjYR39ZxAr4i
keR4FjnvaQ86MRI5GGXpPa80A+bIc9SCvOEa/ypD/FBNG5TONxf0HNVBEoOkguou
ugJLcZyVT1rnk1BlOod4rlaL7WeaI1AFFxJFvdb+vj+AHDH4vfze/ESbG+DOL/B1
QWS9Rq1Yb1soDqEQ7f+nKBsZDa2EOgFHge+V4gqMowEvWM84zEnhEClQBZl6+UMc
P/1RWIhwRGwDMD9q7YrrW0ue7etyA14te6M=
-----END CERTIFICATE-----
Generated at Sun May 19 01:55:03 2024 by rpki-client on console-fra.rpki-client.org