Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4cd887-d510-330c-80db-d55ce3cbc70e.roa
File:                     da4cd887-d510-330c-80db-d55ce3cbc70e.roa (raw, json)
Hash identifier:          ZYQ5yScw8EAeEAz32PJY/HQHpQl47wCAVxj0zl6wTZQ=
Subject key identifier:   88:14:B4:AA:6F:C5:A5:11:84:96:6B:21:D4:A7:46:C9:8A:28:51:F7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452BD7B8BA070579732EADDE20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4cd887-d510-330c-80db-d55ce3cbc70e.roa
Signing time:             Mon 11 Mar 2024 10:40:29 +0000
ROA not before:           Mon 11 Mar 2024 10:40:29 +0000
ROA not after:            Sun 09 Jun 2024 10:40:29 +0000
asID:                     20940
IP address blocks:        2600:1488:c030::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2b:d7:b8:ba:07:05:79:73:2e:ad:de:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 10:40:29 2024 GMT
            Not After : Jun  9 10:40:29 2024 GMT
        Subject: CN=809bed95-d011-4c93-a5dd-21b9b0f920c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c5:0a:ec:97:fd:5d:96:4c:1f:54:d4:74:f4:
                    79:b0:09:cb:be:34:f3:2a:40:ea:a0:62:79:ca:77:
                    23:aa:af:87:cb:7d:fc:78:12:0d:d5:b5:26:24:97:
                    1e:c0:a7:2e:91:e1:06:a0:81:c9:84:62:ca:83:ca:
                    c2:75:ff:3f:a6:22:2b:3d:9a:82:82:a5:0e:26:41:
                    6d:d9:ec:81:f0:90:b7:e7:77:51:5c:38:d9:0f:61:
                    78:54:f8:75:0f:dd:83:61:e1:7a:d3:c3:f3:64:0b:
                    bd:62:5d:d7:16:1c:a7:91:59:19:ab:0a:8b:1a:63:
                    a6:bc:f2:29:a1:c3:62:b9:71:c2:72:48:d4:e0:d9:
                    fc:0f:27:10:7f:ed:c7:e3:7a:e0:23:6e:27:e7:2f:
                    ca:c1:4d:d6:95:ae:f0:8c:6a:88:15:5c:5c:c0:63:
                    5f:dd:3e:e6:28:9c:fc:11:8d:66:d0:76:42:dc:81:
                    d9:cd:4f:3f:85:39:3f:09:8e:24:1c:a9:ee:67:1e:
                    0a:0a:41:e1:cd:f1:ca:25:0a:73:8f:d5:92:be:ab:
                    80:a6:87:1b:5b:8f:f8:96:aa:6f:68:03:64:76:2e:
                    37:c1:4e:da:d4:ad:fc:90:dc:f5:55:97:37:ae:c8:
                    5a:c2:0c:1f:e1:2e:21:fd:e6:4f:16:ff:11:99:18:
                    1a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:14:B4:AA:6F:C5:A5:11:84:96:6B:21:D4:A7:46:C9:8A:28:51:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4cd887-d510-330c-80db-d55ce3cbc70e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:c030::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:9d:71:d1:39:e8:6c:48:52:21:fc:c9:20:7d:03:89:6e:99:
         8a:5a:27:d4:3a:65:35:39:43:a4:b3:2e:43:4e:86:3f:63:4b:
         d4:88:45:00:b3:5e:6c:46:e9:8b:2d:44:1b:d5:36:39:10:60:
         87:3e:4a:1b:a3:9b:ce:1a:5d:40:10:39:53:28:5f:b9:5c:5f:
         0c:15:36:df:de:c4:29:1f:d3:9a:b5:89:20:1b:92:cc:2c:3d:
         98:9d:33:f0:f5:01:f1:fc:8f:ac:88:cf:d5:c6:bd:a9:57:9f:
         ae:95:a0:36:2d:ba:d9:bc:f1:c7:9f:c1:6b:60:17:34:52:2b:
         bd:fe:9a:3a:fe:a6:76:08:71:4b:db:c8:30:fc:bb:f6:17:d9:
         78:45:83:9f:40:dc:c3:82:27:ba:e1:54:1e:b0:d8:b3:4b:10:
         71:c5:a8:b1:30:a3:2a:25:f6:60:c9:7a:ed:00:65:7f:3e:21:
         4c:dd:88:51:9d:26:11:8b:ce:df:b2:78:d1:b1:eb:61:f4:5c:
         9e:a7:65:4e:60:9d:ed:cb:a4:d5:50:98:14:7f:42:f2:68:7b:
         79:08:a8:55:36:f3:42:9c:77:96:c9:62:53:bf:41:ad:15:70:
         ca:ff:87:f8:ed:15:71:ae:3a:a6:84:74:72:38:98:37:bd:88:
         b4:bd:ce:a2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUr17i6BwV5cy6t3iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDMxMTEwNDAyOVoXDTI0MDYwOTEwNDAyOVowLzEtMCsGA1UEAxMk
ODA5YmVkOTUtZDAxMS00YzkzLWE1ZGQtMjFiOWIwZjkyMGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sUK7Jf9XZZMH1TUdPR5sAnLvjTzKkDqoGJ5
yncjqq+Hy338eBIN1bUmJJcewKcukeEGoIHJhGLKg8rCdf8/piIrPZqCgqUOJkFt
2eyB8JC353dRXDjZD2F4VPh1D92DYeF608PzZAu9Yl3XFhynkVkZqwqLGmOmvPIp
ocNiuXHCckjU4Nn8DycQf+3H43rgI24n5y/KwU3Wla7wjGqIFVxcwGNf3T7mKJz8
EY1m0HZC3IHZzU8/hTk/CY4kHKnuZx4KCkHhzfHKJQpzj9WSvquApocbW4/4lqpv
aANkdi43wU7a1K38kNz1VZc3rshawgwf4S4h/eZPFv8RmRgaNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIgUtKpvxaURhJZrIdSnRsmKKFH3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGE0Y2Q4ODctZDUxMC0z
MzBjLTgwZGItZDU1Y2UzY2JjNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiMAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI+dcdE56GxIUiH8ySB9A4lumYpaJ9Q6ZTU5Q6SzLkNOhj9jS9SI
RQCzXmxG6YstRBvVNjkQYIc+Shujm84aXUAQOVMoX7lcXwwVNt/exCkf05q1iSAb
kswsPZidM/D1AfH8j6yIz9XGvalXn66VoDYtutm88cefwWtgFzRSK73+mjr+pnYI
cUvbyDD8u/YX2XhFg59A3MOCJ7rhVB6w2LNLEHHFqLEwoyol9mDJeu0AZX8+IUzd
iFGdJhGLzt+yeNGx62H0XJ6nZU5gne3LpNVQmBR/QvJoe3kIqFU280Kcd5bJYlO/
Qa0VcMr/h/jtFXGuOqaEdHI4mDe9iLS9zqI=
-----END CERTIFICATE-----
Generated at Fri May 17 21:41:23 2024 by rpki-client on console-fra.rpki-client.org