Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/0c7bc871-2408-35fc-9a32-fa7a57b444bc.roa
File:                     0c7bc871-2408-35fc-9a32-fa7a57b444bc.roa (raw, json)
Hash identifier:          RLKuhu8zV4I8izvOlK7uPeoDiroY43w+aEyUzOdxCj0=
Subject key identifier:   D5:FF:65:C2:E5:C5:79:4C:B3:7E:36:ED:E7:D1:97:7F:90:0F:68:24
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F43285844DF3536B46E7182D12BF5B380
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/0c7bc871-2408-35fc-9a32-fa7a57b444bc.roa
Signing time:             Mon 12 Feb 2024 23:51:37 +0000
ROA not before:           Mon 12 Feb 2024 23:51:37 +0000
ROA not after:            Sun 12 May 2024 22:51:37 +0000
asID:                     0
IP address blocks:        2601:a011::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:df:35:36:b4:6e:71:82:d1:2b:f5:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Feb 12 23:51:37 2024 GMT
            Not After : May 12 22:51:37 2024 GMT
        Subject: CN=8f17ec05-85da-486d-9b1a-e4a20ce58af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3d:7e:fd:2a:26:87:2a:08:50:06:ac:9b:f1:
                    54:2b:9d:b7:87:0c:be:b1:1d:f7:94:3a:9f:01:87:
                    3d:f7:6e:a9:ba:0f:7c:30:23:47:37:ca:24:13:e0:
                    6b:d9:83:fc:49:f4:8b:63:bd:cc:b5:c0:53:c0:b3:
                    0c:75:62:c1:8b:89:04:e0:f1:bd:71:2c:af:2a:32:
                    38:ce:f3:48:31:f0:41:3a:ae:d6:4e:04:e6:6b:30:
                    68:ce:b4:f5:48:38:29:f3:02:53:09:bc:3e:7e:78:
                    b0:73:ef:21:66:c4:8f:bf:da:52:8b:45:d4:32:ee:
                    de:3c:1f:71:10:5b:c8:e3:45:67:35:d5:89:95:37:
                    38:4b:95:c8:34:eb:c5:9c:cf:98:c7:47:99:5f:eb:
                    d0:ee:8b:e6:69:6e:48:56:43:f0:48:ca:fc:d4:b0:
                    09:3c:dc:0c:72:b4:22:d8:b7:3d:9f:2b:85:f8:ef:
                    da:92:6f:2a:bb:7f:1e:8a:e3:bb:b2:74:e2:0c:f2:
                    a4:4d:3d:f5:7d:44:bc:2e:5c:30:8f:34:04:51:61:
                    11:5b:65:8b:e9:fe:98:27:f1:df:71:6a:b9:0d:67:
                    65:ac:09:05:64:8d:2f:05:9b:67:f4:d6:72:95:eb:
                    fd:99:3e:16:6f:19:73:34:de:d9:63:85:42:01:0b:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FF:65:C2:E5:C5:79:4C:B3:7E:36:ED:E7:D1:97:7F:90:0F:68:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/0c7bc871-2408-35fc-9a32-fa7a57b444bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a011::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:08:38:33:cf:c7:a2:f1:1e:16:70:50:b8:16:d7:7b:01:c7:
         f7:a4:1a:9e:3e:b8:b1:4f:c1:d3:d7:45:23:ce:a9:77:64:04:
         b0:d6:d3:13:e4:fa:59:c2:f6:ed:01:c7:7f:29:f4:88:c8:c7:
         b0:6b:67:7b:0c:15:4d:18:c0:da:98:4f:ef:ff:10:81:f1:49:
         e1:ad:da:66:b6:90:88:67:bc:07:1b:27:c7:c1:74:41:b2:f1:
         99:09:67:34:c0:3e:48:13:51:b4:c3:34:f4:ee:79:96:51:82:
         e9:3a:aa:a7:3b:62:13:fa:51:ba:e5:1c:26:d7:dd:9d:2b:89:
         ed:5c:15:21:44:3f:d3:d6:3a:ad:d1:c9:87:7f:da:1f:7b:9b:
         f1:1a:b7:7c:4f:9c:e8:d6:a1:b7:57:9a:03:85:28:4b:92:20:
         d4:4f:bf:85:a9:bf:3f:34:62:ff:33:97:89:42:59:e9:a4:7e:
         8b:55:d6:48:0f:f4:79:07:2b:07:23:38:f4:a8:29:70:30:e7:
         c5:82:71:57:de:63:bf:36:f0:77:74:f2:24:aa:79:47:e6:7c:
         8f:2b:f7:3f:a5:8c:23:3f:31:d6:da:d4:02:a1:58:ad:80:28:
         d3:25:62:d6:60:b2:49:4c:5e:f9:fa:13:b9:61:67:f5:01:e9:
         80:83:d3:55
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWETfNTa0bnGC0Sv1s4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk
MDRlMB4XDTI0MDIxMjIzNTEzN1oXDTI0MDUxMjIyNTEzN1owLzEtMCsGA1UEAxMk
OGYxN2VjMDUtODVkYS00ODZkLTliMWEtZTRhMjBjZTU4YWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT1+/SomhyoIUAasm/FUK523hwy+sR33lDqf
AYc9926pug98MCNHN8okE+Br2YP8SfSLY73MtcBTwLMMdWLBi4kE4PG9cSyvKjI4
zvNIMfBBOq7WTgTmazBozrT1SDgp8wJTCbw+fniwc+8hZsSPv9pSi0XUMu7ePB9x
EFvI40VnNdWJlTc4S5XINOvFnM+Yx0eZX+vQ7ovmaW5IVkPwSMr81LAJPNwMcrQi
2Lc9nyuF+O/akm8qu38eiuO7snTiDPKkTT31fUS8LlwwjzQEUWERW2WL6f6YJ/Hf
cWq5DWdlrAkFZI0vBZtn9NZylev9mT4WbxlzNN7ZY4VCAQtJXQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNX/ZcLlxXlMs3427efRl3+QD2gkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz
ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvMGM3YmM4NzEtMjQwOC0z
NWZjLTlhMzItZmE3YTU3YjQ0NGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5
NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3
ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk
NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgETBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCeCDgzz8ei8R4WcFC4Ftd7Acf3pBqePrixT8HT10Ujzql3ZASw1tMT
5PpZwvbtAcd/KfSIyMewa2d7DBVNGMDamE/v/xCB8UnhrdpmtpCIZ7wHGyfHwXRB
svGZCWc0wD5IE1G0wzT07nmWUYLpOqqnO2IT+lG65Rwm192dK4ntXBUhRD/T1jqt
0cmHf9ofe5vxGrd8T5zo1qG3V5oDhShLkiDUT7+Fqb8/NGL/M5eJQlnppH6LVdZI
D/R5BysHIzj0qClwMOfFgnFX3mO/NvB3dPIkqnlH5nyPK/c/pYwjPzHW2tQCoVit
gCjTJWLWYLJJTF75+hO5YWf1AemAg9NV
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:45 2024 by rpki-client on console-fra.rpki-client.org