Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa
File:                     6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa (raw, json)
Hash identifier:          qmrMgVgPr1HQIfaR1XquNCxuE1Cd+gAxlEKaDo5Hev8=
Subject key identifier:   2D:E9:C9:45:DD:E1:46:3C:9E:AD:B1:CC:AF:20:79:CE:24:2C:38:B3
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285845777DC67F30DC7DA737268C00
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     12129
IP address blocks:        2607:f790:e000::/36 maxlen: 36
                          2607:f790::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c6:7f:30:dc:7d:a7:37:26:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=39e7fc26-7442-4f44-9f52-e15ce8418b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:a3:35:87:75:4b:82:bb:79:6b:28:a1:93:
                    b6:87:d8:cf:70:da:61:40:23:fc:62:a5:bc:a5:db:
                    6d:16:1a:88:e9:1b:7a:20:f0:41:ed:f0:14:cf:4e:
                    66:48:8a:2c:3c:a0:5e:b5:78:be:cc:e2:03:68:83:
                    da:2f:ea:db:fe:a2:fc:24:08:e7:6c:91:ec:01:48:
                    ee:f6:d9:d6:86:5e:e9:90:7b:b3:62:99:4c:41:17:
                    7b:1d:d4:31:1d:46:3f:f8:db:2b:b3:e1:e9:0a:39:
                    3c:0f:e6:77:ed:56:80:32:29:ba:f9:4b:dd:13:41:
                    63:1e:2f:43:fb:81:97:72:c1:fa:ac:ee:37:e3:0a:
                    c7:40:ca:a0:7f:92:b9:e8:f1:62:34:bb:7b:55:ba:
                    45:c3:88:92:f3:ad:b7:7d:fc:b7:77:d8:f5:ff:54:
                    58:e0:67:48:85:1a:26:10:e3:79:a0:fc:81:78:db:
                    bc:24:c3:71:03:38:08:68:05:09:5e:4d:bc:a8:ed:
                    84:b4:23:e2:2f:d1:ff:b5:e4:d4:65:a4:d8:04:06:
                    67:b3:65:6c:14:81:2d:c8:63:9f:4f:3f:96:30:75:
                    44:87:aa:d1:2b:81:df:f5:48:b9:03:47:fa:23:cc:
                    fe:9f:74:7f:d5:96:08:d9:e5:53:c4:dc:7a:50:7c:
                    66:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E9:C9:45:DD:E1:46:3C:9E:AD:B1:CC:AF:20:79:CE:24:2C:38:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f790::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c6:21:6f:94:33:03:c7:f5:ea:91:aa:35:41:52:fd:77:8a:
         d8:55:ba:f3:0a:5d:5e:89:86:bd:1a:45:3d:2c:70:f8:73:84:
         67:a8:32:92:ea:bb:ba:79:0d:16:ce:b3:59:bb:87:12:24:b0:
         b6:7d:69:1b:d9:15:2d:aa:12:75:c7:1e:e6:6b:e3:bf:d9:92:
         b2:0b:ce:d4:ac:7f:46:ce:40:e5:3a:cb:9f:5b:51:2f:2e:ea:
         63:74:75:40:c5:d3:4d:61:3b:5e:ce:bf:b1:59:fd:8d:56:b3:
         ca:4f:f8:f4:ca:ce:c4:d6:cc:e5:6d:d5:b1:20:7b:2b:05:d5:
         71:33:0e:30:3d:17:dd:b7:8c:b7:a7:4b:d3:49:a3:ab:28:b7:
         e8:ef:8f:8f:b5:da:15:35:e1:7d:08:a5:95:fd:66:ed:ac:31:
         ed:08:ed:0b:7a:d0:09:d3:fc:6b:6f:94:60:16:57:f4:85:32:
         07:98:95:e5:da:b3:4b:b9:be:ff:1a:7d:5b:cb:ca:45:99:86:
         7c:56:2f:88:04:d2:19:5d:33:03:c9:e1:22:11:75:df:9e:ff:
         7d:2a:06:1f:50:9b:62:4a:a1:b0:62:86:f0:c8:8c:98:3c:df:
         88:3f:a4:90:c8:46:90:bc:02:7b:f7:4f:89:a3:e4:25:92:63:
         37:87:c0:23
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEV3fcZ/MNx9pzcmjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
MzllN2ZjMjYtNzQ0Mi00ZjQ0LTlmNTItZTE1Y2U4NDE4YjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoqjNYd1S4K7eWsooZO2h9jPcNphQCP8YqW8
pdttFhqI6Rt6IPBB7fAUz05mSIosPKBetXi+zOIDaIPaL+rb/qL8JAjnbJHsAUju
9tnWhl7pkHuzYplMQRd7HdQxHUY/+Nsrs+HpCjk8D+Z37VaAMim6+UvdE0FjHi9D
+4GXcsH6rO434wrHQMqgf5K56PFiNLt7VbpFw4iS8623ffy3d9j1/1RY4GdIhRom
EON5oPyBeNu8JMNxAzgIaAUJXk28qO2EtCPiL9H/teTUZaTYBAZns2VsFIEtyGOf
Tz+WMHVEh6rRK4Hf9Ui5A0f6I8z+n3R/1ZYI2eVTxNx6UHxmowIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFC3pyUXd4UY8nq2xzK8gec4kLDizMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNmJhOTRkZjMtMzVjNi0z
MmMyLWE3YzAtZTFiMDgxN2YwNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf3kDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBOxiFvlDMDx/Xqkao1QVL9d4rYVbrzCl1eiYa9GkU9LHD4c4RnqDKS
6ru6eQ0WzrNZu4cSJLC2fWkb2RUtqhJ1xx7ma+O/2ZKyC87UrH9GzkDlOsufW1Ev
LupjdHVAxdNNYTtezr+xWf2NVrPKT/j0ys7E1szlbdWxIHsrBdVxMw4wPRfdt4y3
p0vTSaOrKLfo74+PtdoVNeF9CKWV/WbtrDHtCO0LetAJ0/xrb5RgFlf0hTIHmJXl
2rNLub7/Gn1by8pFmYZ8Vi+IBNIZXTMDyeEiEXXfnv99KgYfUJtiSqGwYobwyIyY
PN+IP6SQyEaQvAJ790+Jo+QlkmM3h8Aj
-----END CERTIFICATE-----
Generated at Thu May 2 03:30:09 2024 by rpki-client on console-ams.rpki-client.org