Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7eb99614-9875-37e5-a726-4c2a6c756b63.roa
File:                     7eb99614-9875-37e5-a726-4c2a6c756b63.roa (raw, json)
Hash identifier:          9gVIehDu5DAmT9LOVjZ1BkfPT+qM32H2ln4cxWi6VrU=
Subject key identifier:   09:76:23:43:82:20:88:78:5D:23:1B:D2:45:14:06:AF:6C:3D:F0:F8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC9193E6E3D65E50C040D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7eb99614-9875-37e5-a726-4c2a6c756b63.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     701
IP address blocks:        2600:4040:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:19:3e:6e:3d:65:e5:0c:04:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=b7d627ff-0a86-48d3-a019-dcacc1fcff48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7f:3a:48:09:4a:fc:41:1e:92:4e:98:03:68:
                    be:39:57:47:5a:e4:3e:32:bd:5a:b2:5e:e3:ff:69:
                    8f:1d:cb:d6:d0:89:5f:35:f7:d8:a2:81:f3:9a:03:
                    77:3b:df:43:d5:d0:7d:a0:ce:34:13:f4:c5:47:cd:
                    f1:83:10:2e:57:56:4b:bd:ac:17:2f:a8:68:30:29:
                    50:7b:1b:e1:7c:72:80:ea:d0:dd:dd:cc:67:7f:9b:
                    38:f0:f7:dc:2d:23:6e:08:05:d8:3d:fb:c4:89:52:
                    fa:0f:fd:5a:c0:7c:ae:e8:34:ed:27:11:17:c0:cf:
                    4a:03:35:bf:e4:e1:8d:df:8e:8c:39:22:7e:f6:a1:
                    6f:4d:50:f8:42:0a:8e:c1:4e:5e:6e:03:56:d4:30:
                    af:e5:d2:eb:0f:ac:4f:0c:8b:f0:e0:4a:42:56:60:
                    b8:ab:6d:37:38:02:94:40:a2:b5:41:af:8a:cd:a5:
                    37:db:18:72:16:7d:8a:38:c1:2d:b6:1a:ee:3c:fd:
                    4d:23:7b:fb:1c:3e:70:0e:96:d7:41:4b:01:a7:ec:
                    5e:17:62:46:71:2f:bd:f6:fb:81:ae:9f:de:2c:b1:
                    5a:0d:90:73:c8:ab:f3:f2:f2:56:2c:2d:23:29:e9:
                    ea:78:b5:c1:6e:69:7e:d7:85:0f:1e:54:78:3b:70:
                    34:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:76:23:43:82:20:88:78:5D:23:1B:D2:45:14:06:AF:6C:3D:F0:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7eb99614-9875-37e5-a726-4c2a6c756b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d1:24:97:8c:c7:ca:fb:65:d1:64:14:46:e4:b2:0a:6d:76:
         70:f1:e9:c0:75:93:db:a4:1e:87:54:9c:62:3d:60:5e:c2:21:
         c7:61:50:68:c2:b6:ed:9d:d8:48:18:15:e0:db:07:ff:38:11:
         7f:2f:d2:8d:41:bb:a6:09:a3:3b:17:27:43:a3:4a:b2:b2:f1:
         d5:42:5e:29:ba:0e:af:48:ca:93:95:19:9c:9c:d0:f0:23:2b:
         89:aa:ed:18:2c:0a:81:69:71:fc:00:cd:4d:63:6a:5d:07:90:
         6b:b8:72:4b:99:6f:14:64:88:57:23:6f:c4:0b:4c:35:88:31:
         fd:0d:7c:e7:0d:fb:c8:c9:db:2d:16:59:41:89:3f:b2:75:da:
         ab:fe:f0:a3:b7:8b:9c:58:c5:98:0e:39:1c:bc:aa:a1:ae:e4:
         72:f3:e6:02:da:8a:c4:6e:91:f2:b8:a0:31:ad:5a:79:ec:8b:
         83:7c:7a:5f:cd:df:2c:b0:b3:7f:2f:19:34:d6:9e:6a:e7:eb:
         87:1a:53:3a:e8:05:64:7a:d2:b3:3a:2e:9d:71:fc:13:46:42:
         83:62:3e:e2:72:39:c5:71:f3:31:11:55:ea:19:b5:9f:7a:26:
         2b:6c:95:0e:7c:59:a0:86:52:f7:bc:eb:12:26:83:a4:fd:fa:
         23:7d:b3:da
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEXeyRk+bj1l5QwEDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk
YjdkNjI3ZmYtMGE4Ni00OGQzLWEwMTktZGNhY2MxZmNmZjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX86SAlK/EEekk6YA2i+OVdHWuQ+Mr1asl7j
/2mPHcvW0IlfNffYooHzmgN3O99D1dB9oM40E/TFR83xgxAuV1ZLvawXL6hoMClQ
exvhfHKA6tDd3cxnf5s48PfcLSNuCAXYPfvEiVL6D/1awHyu6DTtJxEXwM9KAzW/
5OGN346MOSJ+9qFvTVD4QgqOwU5ebgNW1DCv5dLrD6xPDIvw4EpCVmC4q203OAKU
QKK1Qa+KzaU32xhyFn2KOMEtthruPP1NI3v7HD5wDpbXQUsBp+xeF2JGcS+99vuB
rp/eLLFaDZBzyKvz8vJWLC0jKenqeLXBbml+14UPHlR4O3A04QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAl2I0OCIIh4XSMb0kUUBq9sPfD4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2ViOTk2MTQtOTg3NS0z
N2U1LWE3MjYtNGMyYTZjNzU2YjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgBAQFAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVNEkl4zHyvtl0WQURuSyCm12cPHpwHWT26Qeh1ScYj1gXsIhx2FQ
aMK27Z3YSBgV4NsH/zgRfy/SjUG7pgmjOxcnQ6NKsrLx1UJeKboOr0jKk5UZnJzQ
8CMriartGCwKgWlx/ADNTWNqXQeQa7hyS5lvFGSIVyNvxAtMNYgx/Q185w37yMnb
LRZZQYk/snXaq/7wo7eLnFjFmA45HLyqoa7kcvPmAtqKxG6R8rigMa1aeeyLg3x6
X83fLLCzfy8ZNNaeaufrhxpTOugFZHrSszounXH8E0ZCg2I+4nI5xXHzMRFV6hm1
n3omK2yVDnxZoIZS97zrEiaDpP36I32z2g==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:33:58 2024 by rpki-client on console-fra.rpki-client.org