Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa
File:                     2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa (raw, json)
Hash identifier:          hMOkuPBG/toDqrjaWQlxdHd0o+CdhIT3d9KonvdG8Qw=
Subject key identifier:   FF:0C:8D:6B:CE:BC:0E:C1:62:24:3D:EC:28:29:44:B4:D9:6D:E9:38
Certificate issuer:       /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Certificate serial:       010D0C9F432858450EEAD0D7311D123F6E7E7700
Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     394840
IP address blocks:        2607:bd80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:d0:d7:31:1d:12:3f:6e:7e:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=ae37ba62-7424-438e-8ca0-425d76174900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9b:b6:cd:ea:44:2d:67:c4:5c:ef:cb:97:32:
                    ee:39:e9:46:ea:00:52:52:b0:99:ad:f7:f7:21:40:
                    5c:77:b0:94:53:fe:b1:7f:98:06:a3:c4:9d:6b:9e:
                    6d:41:41:f5:e8:14:c3:9d:07:ee:31:d4:b6:77:6d:
                    29:1e:8c:6c:ed:03:a1:8d:08:25:a1:dc:ea:ee:3f:
                    13:3a:af:24:e1:62:e0:9e:d2:a9:d2:0f:9e:05:5b:
                    e5:a1:c7:d6:08:90:fe:01:a0:c3:fd:19:9d:f2:cb:
                    13:c2:ad:7b:90:15:bb:d2:49:ef:8e:a5:56:b8:28:
                    13:eb:23:43:a4:ac:63:f6:66:d3:16:ad:28:2e:28:
                    f9:8c:6b:04:72:38:f0:60:6f:32:3f:40:78:f5:34:
                    c5:f8:d3:b7:19:98:3e:9c:0a:d5:29:af:7a:1a:15:
                    92:4d:1f:a5:11:d5:92:0c:04:01:68:48:70:44:54:
                    79:fa:19:4d:5d:e4:66:36:ef:f6:aa:b3:db:f4:12:
                    94:fb:d1:36:37:8e:8c:0a:32:42:28:14:91:8e:06:
                    e8:15:20:f7:c3:42:37:8c:2a:8d:8e:27:50:bb:99:
                    8f:ef:6c:2e:28:25:b6:0c:ca:df:87:ce:7f:7f:a6:
                    5e:69:c4:d6:76:37:eb:cb:ee:4e:2c:27:71:fd:a4:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0C:8D:6B:CE:BC:0E:C1:62:24:3D:EC:28:29:44:B4:D9:6D:E9:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl

            X509v3 Authority Key Identifier:
                keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:05:01:af:de:3a:7d:0f:09:5b:ab:98:50:aa:2d:be:8d:37:
         d0:19:cd:be:4d:60:b0:01:46:dd:80:33:1b:48:73:fa:53:18:
         d8:fb:9f:29:18:a9:79:24:50:2e:cc:fc:dc:f8:a3:4c:d1:db:
         4e:3f:88:bd:66:2a:ff:ab:ba:34:44:88:3b:20:df:3a:21:e4:
         de:40:ac:79:d9:05:de:21:d2:dd:7b:45:03:68:ea:a4:ff:45:
         b8:63:59:56:41:4c:dc:99:97:3a:d5:7f:9d:91:69:e6:df:41:
         05:ee:f0:81:68:16:56:cc:fa:bd:cb:3b:2c:79:63:37:c0:22:
         54:a4:3e:42:d4:6a:e6:77:bb:4c:de:20:66:8b:1a:57:2b:b8:
         12:11:13:7f:ee:96:29:01:b4:42:43:a6:e1:a0:3c:59:a3:cd:
         10:26:b0:ef:f5:c1:e7:87:27:67:b6:a1:b9:50:17:77:42:c2:
         4b:1e:33:7e:e9:e2:71:cd:13:7c:c1:0d:3d:bf:f3:81:60:b3:
         9b:cb:72:ad:f5:9a:57:e8:9e:8a:8d:69:8b:50:47:65:75:9c:
         bf:b3:81:76:8a:eb:01:ac:57:4d:68:ff:00:10:7b:16:55:c4:
         e3:d4:0e:21:72:3c:d8:62:d3:48:01:2f:0d:1b:fb:2e:c9:ba:
         39:f8:a2:d7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEUO6tDXMR0SP25+dwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWYwNDk2YTgtMGNhOS00NWVjLTgyMGYtOGU4OGMzNmU1
OGIwMB4XDTI0MDMwMTAyMDAyN1oXDTI0MDUzMDAxMDAyN1owLzEtMCsGA1UEAxMk
YWUzN2JhNjItNzQyNC00MzhlLThjYTAtNDI1ZDc2MTc0OTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zu2zepELWfEXO/LlzLuOelG6gBSUrCZrff3
IUBcd7CUU/6xf5gGo8Sda55tQUH16BTDnQfuMdS2d20pHoxs7QOhjQglodzq7j8T
Oq8k4WLgntKp0g+eBVvlocfWCJD+AaDD/Rmd8ssTwq17kBW70knvjqVWuCgT6yND
pKxj9mbTFq0oLij5jGsEcjjwYG8yP0B49TTF+NO3GZg+nArVKa96GhWSTR+lEdWS
DAQBaEhwRFR5+hlNXeRmNu/2qrPb9BKU+9E2N46MCjJCKBSRjgboFSD3w0I3jCqN
jidQu5mP72wuKCW2DMrfh85/f6ZeacTWdjfry+5OLCdx/aSlIQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFP8MjWvOvA7BYiQ97CgpRLTZbek4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0
OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4YzM2ZTU4YjAvMmJjN2ZmMDctOWFhZi0z
ZTVlLTgwYWEtMjEyNmEwZGRhNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWYwNDk2YTgtMGNhOS00NWVjLTgy
MGYtOGU4OGMzNmU1OGIwLzFmMDQ5NmE4LTBjYTktNDVlYy04MjBmLThlODhjMzZl
NThiMC5jcmwwHwYDVR0jBBgwFoAUBdmyloInvfkN9+9ROqjQq8Wh1YwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4
YzM2ZTU4YjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge9gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAFBQGv3jp9Dwlbq5hQqi2+jTfQGc2+TWCwAUbdgDMbSHP6UxjY+58p
GKl5JFAuzPzc+KNM0dtOP4i9Zir/q7o0RIg7IN86IeTeQKx52QXeIdLde0UDaOqk
/0W4Y1lWQUzcmZc61X+dkWnm30EF7vCBaBZWzPq9yzsseWM3wCJUpD5C1Grmd7tM
3iBmixpXK7gSERN/7pYpAbRCQ6bhoDxZo80QJrDv9cHnhydntqG5UBd3QsJLHjN+
6eJxzRN8wQ09v/OBYLOby3Kt9ZpX6J6KjWmLUEdldZy/s4F2iusBrFdNaP8AEHsW
VcTj1A4hcjzYYtNIAS8NG/suybo5+KLX
-----END CERTIFICATE-----
Generated at Wed May 15 17:50:32 2024 by rpki-client on console-fra.rpki-client.org