Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa
File:                     c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa (raw, json)
Hash identifier:          n+LMki0Z2vjR63pOLsB3o9H7ICQOkT6O73w0pFT25eo=
Subject key identifier:   8F:6F:AB:DC:7A:7E:EC:FC:96:DA:74:A6:C0:37:A5:75:6F:95:A4:AC
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F43285844DF34DA15823027DC572C4880
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa
Signing time:             Mon 12 Feb 2024 23:50:53 +0000
ROA not before:           Mon 12 Feb 2024 23:50:53 +0000
ROA not after:            Sun 12 May 2024 22:50:53 +0000
asID:                     0
IP address blocks:        2601:a003::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:df:34:da:15:82:30:27:dc:57:2c:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Feb 12 23:50:53 2024 GMT
            Not After : May 12 22:50:53 2024 GMT
        Subject: CN=c80a781b-7a49-41f2-8db0-6b1acfbc5093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d6:c9:df:55:32:74:3d:84:b3:76:4c:3e:b9:
                    f9:f5:8c:32:03:23:9f:75:54:61:b4:83:bd:a9:81:
                    9a:fc:50:d1:bf:e7:0d:e7:c1:0f:b5:39:00:b3:dd:
                    93:d0:34:4f:f8:ab:70:29:8d:b4:71:f4:7a:2d:f4:
                    b7:95:c0:3b:9a:79:2a:54:93:4e:51:e4:fe:7e:9a:
                    31:65:7c:5c:24:de:21:a3:37:4b:80:08:41:ac:35:
                    cb:61:ed:37:62:ef:ed:7f:8e:92:39:97:4b:d1:bf:
                    ad:0d:29:65:17:cd:7e:e8:f2:ea:0e:b7:4e:a3:7a:
                    6c:fc:2e:52:07:c1:ac:31:fe:56:9c:ce:70:12:1c:
                    07:3f:dc:73:56:37:dc:11:c1:4f:2e:db:31:a5:0e:
                    3c:78:19:c9:85:6f:7d:bc:8d:99:5f:4c:a2:56:3a:
                    42:13:7b:e2:2e:a4:62:bf:37:ab:b5:de:d7:d8:96:
                    02:eb:ec:ab:f2:64:c4:a2:21:cd:8f:02:ee:85:72:
                    62:b6:5a:79:a8:ce:57:15:2e:c7:cd:54:6c:e8:ee:
                    1a:f5:23:8a:2c:5f:b0:12:28:11:3d:6b:38:54:bb:
                    29:fc:f4:17:6a:e6:1f:56:a6:a7:8b:29:9e:86:a1:
                    54:ba:5b:d9:07:55:5a:c8:61:15:f7:c0:7b:10:13:
                    f0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6F:AB:DC:7A:7E:EC:FC:96:DA:74:A6:C0:37:A5:75:6F:95:A4:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a003::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:10:79:c0:93:8a:7f:70:e9:44:6f:b7:ec:ee:24:47:cd:31:
         a8:a7:67:47:a3:79:45:37:3d:81:d6:c5:6f:f6:44:64:97:07:
         56:a9:8e:d5:0f:98:8a:f2:bd:c1:b4:10:26:89:2b:b5:59:6c:
         b6:9e:c6:4f:ae:54:27:7a:f2:b0:3f:5a:1b:9e:38:6c:06:84:
         b7:8c:0a:db:06:fd:8f:0e:15:a4:7d:81:19:65:28:be:e5:15:
         19:0a:9f:b9:8c:53:a0:13:c3:05:f5:b7:f0:8d:42:85:ff:8a:
         e5:40:94:b2:2d:ac:68:7b:98:ad:1d:05:66:f6:4d:9c:e3:6b:
         64:15:47:ad:a9:44:56:d0:25:17:4b:80:b6:54:8e:ba:d4:fa:
         b8:99:5f:0b:79:51:ce:8c:43:52:e8:39:29:3d:35:6a:71:97:
         e0:37:80:f8:43:37:d6:bd:a4:98:7b:b2:85:ad:85:4c:f2:a8:
         f4:f1:db:ce:5d:30:55:df:51:1a:70:ba:9d:e9:bd:6a:b0:3d:
         f5:3c:a4:20:12:ad:46:d5:7e:57:1a:4e:db:a2:98:5d:0d:ac:
         be:a6:ca:72:54:5e:1f:a2:87:ad:7b:e9:d0:32:5b:17:64:33:
         02:0a:b1:cf:4f:71:e2:da:9c:a5:dc:09:a0:96:13:bb:aa:55:
         ed:e4:7a:5e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWETfNNoVgjAn3FcsSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk
MDRlMB4XDTI0MDIxMjIzNTA1M1oXDTI0MDUxMjIyNTA1M1owLzEtMCsGA1UEAxMk
YzgwYTc4MWItN2E0OS00MWYyLThkYjAtNmIxYWNmYmM1MDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidbJ31UydD2Es3ZMPrn59YwyAyOfdVRhtIO9
qYGa/FDRv+cN58EPtTkAs92T0DRP+KtwKY20cfR6LfS3lcA7mnkqVJNOUeT+fpox
ZXxcJN4hozdLgAhBrDXLYe03Yu/tf46SOZdL0b+tDSllF81+6PLqDrdOo3ps/C5S
B8GsMf5WnM5wEhwHP9xzVjfcEcFPLtsxpQ48eBnJhW99vI2ZX0yiVjpCE3viLqRi
vzertd7X2JYC6+yr8mTEoiHNjwLuhXJitlp5qM5XFS7HzVRs6O4a9SOKLF+wEigR
PWs4VLsp/PQXauYfVqaniymehqFUulvZB1VayGEV98B7EBPwfwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFI9vq9x6fuz8ltp0psA3pXVvlaSsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz
ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYzhhOGM4YjQtZTRiNC0z
MDExLTk5ZWEtYmI2NDVmOTE3NzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5
NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3
ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk
NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgAzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBtEHnAk4p/cOlEb7fs7iRHzTGop2dHo3lFNz2B1sVv9kRklwdWqY7V
D5iK8r3BtBAmiSu1WWy2nsZPrlQnevKwP1obnjhsBoS3jArbBv2PDhWkfYEZZSi+
5RUZCp+5jFOgE8MF9bfwjUKF/4rlQJSyLaxoe5itHQVm9k2c42tkFUetqURW0CUX
S4C2VI661Pq4mV8LeVHOjENS6DkpPTVqcZfgN4D4QzfWvaSYe7KFrYVM8qj08dvO
XTBV31EacLqd6b1qsD31PKQgEq1G1X5XGk7bophdDay+pspyVF4fooete+nQMlsX
ZDMCCrHPT3Hi2pyl3AmglhO7qlXt5Hpe
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:45 2024 by rpki-client on console-fra.rpki-client.org