Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/51089f1a-f2a8-3abc-b045-b183b19a05ab.roa
File:                     51089f1a-f2a8-3abc-b045-b183b19a05ab.roa (raw, json)
Hash identifier:          TWLSISeREOE7MQHhKU4a/B0UUU44O95aZ+p1ZL1yd4U=
Subject key identifier:   03:9A:C3:AA:7F:83:E4:B5:37:5D:FD:CD:48:6E:12:8C:F6:21:AA:40
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285845628D8B029FEC68D9CDB06850
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/51089f1a-f2a8-3abc-b045-b183b19a05ab.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     0
IP address blocks:        2605:6c00:303:303::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:8b:02:9f:ec:68:d9:cd:b0:68:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=25bcd333-f90b-4801-a300-1d5383fe8d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:f2:c9:11:80:4f:e7:f8:c1:42:a0:28:54:
                    0c:6f:5d:75:17:0a:b6:1d:cc:2e:f8:5e:6c:ee:f7:
                    2f:8b:10:c6:00:fe:8d:32:a0:c4:1a:3d:30:f1:e0:
                    7b:91:11:fb:70:be:03:da:a4:7c:75:93:47:f1:79:
                    19:85:ff:95:b0:0b:10:5f:8c:1c:c4:6b:f5:5e:01:
                    9d:d9:7b:b4:7e:b3:1c:59:e2:d5:0b:ec:c4:65:3b:
                    b1:92:af:a0:4d:8f:ee:8a:3a:a2:d8:dd:b8:f2:16:
                    65:03:86:8b:f7:a8:ee:82:e9:2b:5f:3b:e5:c3:68:
                    76:a0:c7:d0:ae:18:50:bd:2e:a3:17:aa:f2:b3:90:
                    25:b5:9f:62:a2:ab:e9:ee:ba:e1:54:46:31:27:de:
                    e5:2c:c5:20:b2:50:fd:a8:d6:e5:c9:16:f6:5c:b1:
                    df:a5:12:57:57:c3:67:11:a7:38:18:9d:8b:65:ea:
                    bc:a2:c2:78:bb:ad:e3:e5:47:ff:27:ce:97:7c:f7:
                    a3:2c:5a:97:d0:35:94:46:b4:6b:99:c9:1a:2b:b4:
                    0e:4a:85:9d:b8:ef:c7:6d:e6:0d:88:3f:0c:c3:86:
                    7d:87:59:b0:81:19:a0:c3:1f:85:97:cc:43:ce:31:
                    68:47:8d:42:bd:d3:a3:59:66:7c:f9:e8:20:78:fa:
                    90:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9A:C3:AA:7F:83:E4:B5:37:5D:FD:CD:48:6E:12:8C:F6:21:AA:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/51089f1a-f2a8-3abc-b045-b183b19a05ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:303:303::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3b:f1:0a:53:3d:84:c3:83:c4:ca:6e:c6:bd:73:4c:cf:9e:
         e2:98:8b:11:0c:fb:73:86:a7:1b:80:24:bc:17:df:39:5b:6d:
         d8:fa:10:77:ea:75:36:0c:04:ea:7f:6a:be:79:67:b8:a6:c5:
         cf:48:5b:93:a9:6b:c9:ca:a1:ad:34:90:da:5d:da:e0:cd:d0:
         53:ed:79:41:94:c8:15:90:86:27:fa:fb:36:d0:bd:4f:2a:11:
         68:03:d4:96:07:60:e9:bc:cf:0d:c1:33:48:91:32:ee:f8:0e:
         51:e7:99:03:7c:80:f8:f8:fc:bf:e3:06:f6:11:cd:c5:6a:bc:
         3c:4d:27:1a:fe:10:0d:17:ad:84:64:01:73:67:ad:a4:30:c0:
         f2:e0:7d:91:f3:eb:08:de:59:d5:d7:67:c3:74:0a:f5:e7:aa:
         7d:9c:2e:15:2e:53:7b:d8:70:03:5d:87:a0:9e:66:26:8d:f8:
         c1:fa:11:8a:86:42:60:a1:28:b1:a0:67:b4:10:92:d9:c8:43:
         5d:26:ed:ba:1e:bd:20:f6:81:5d:5b:07:f0:e1:f7:95:e1:a1:
         5d:e8:4c:7b:54:63:62:2d:99:fb:70:d7:28:5e:59:d5:74:0f:
         8b:4c:7c:97:bd:f0:7e:34:87:27:3d:da:00:9e:d3:04:35:6f:
         89:96:de:4d
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEVijYsCn+xo2c2waFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MjViY2QzMzMtZjkwYi00ODAxLWEzMDAtMWQ1MzgzZmU4ZDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphryyRGAT+f4wUKgKFQMb111Fwq2Hcwu+F5s
7vcvixDGAP6NMqDEGj0w8eB7kRH7cL4D2qR8dZNH8XkZhf+VsAsQX4wcxGv1XgGd
2Xu0frMcWeLVC+zEZTuxkq+gTY/uijqi2N248hZlA4aL96jugukrXzvlw2h2oMfQ
rhhQvS6jF6rys5AltZ9ioqvp7rrhVEYxJ97lLMUgslD9qNblyRb2XLHfpRJXV8Nn
Eac4GJ2LZeq8osJ4u63j5Uf/J86XfPejLFqX0DWURrRrmckaK7QOSoWduO/HbeYN
iD8Mw4Z9h1mwgRmgwx+Fl8xDzjFoR41CvdOjWWZ8+eggePqQuQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFAOaw6p/g+S1N139zUhuEoz2IapAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvNTEwODlmMWEtZjJhOC0z
YWJjLWIwNDUtYjE4M2IxOWEwNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgVsAAMD
AwMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAEDvxClM9hMODxMpuxr1zTM+e4piLEQz7c4anG4AkvBffOVtt
2PoQd+p1NgwE6n9qvnlnuKbFz0hbk6lrycqhrTSQ2l3a4M3QU+15QZTIFZCGJ/r7
NtC9TyoRaAPUlgdg6bzPDcEzSJEy7vgOUeeZA3yA+Pj8v+MG9hHNxWq8PE0nGv4Q
DRethGQBc2etpDDA8uB9kfPrCN5Z1ddnw3QK9eeqfZwuFS5Te9hwA12HoJ5mJo34
wfoRioZCYKEosaBntBCS2chDXSbtuh69IPaBXVsH8OH3leGhXehMe1RjYi2Z+3DX
KF5Z1XQPi0x8l73wfjSHJz3aAJ7TBDVviZbeTQ==
-----END CERTIFICATE-----
Generated at Sat May 4 03:01:23 2024 by rpki-client on console-fra.rpki-client.org