Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/3ad9341e-9252-312b-87e8-71586b49f810.roa
File:                     3ad9341e-9252-312b-87e8-71586b49f810.roa (raw, json)
Hash identifier:          kn1zUBDXQa7RWK/Y0BVV9qzRhcycJXD50TVzpwr28aU=
Subject key identifier:   83:E1:67:BD:7E:E9:3B:6B:75:5C:80:FA:D4:E2:39:71:24:C6:34:98
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F4328584515E5911CABEC589BCCAE4780
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/3ad9341e-9252-312b-87e8-71586b49f810.roa
Signing time:             Sun 03 Mar 2024 14:00:31 +0000
ROA not before:           Sun 03 Mar 2024 14:00:31 +0000
ROA not after:            Sat 01 Jun 2024 13:00:31 +0000
asID:                     15267
IP address blocks:        2605:3400:8000::/33 maxlen: 33
                          2605:3400::/32 maxlen: 32
                          2605:3400::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:15:e5:91:1c:ab:ec:58:9b:cc:ae:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Mar  3 14:00:31 2024 GMT
            Not After : Jun  1 13:00:31 2024 GMT
        Subject: CN=31b41dff-aeba-4f8b-8cfd-14da3bae5b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:96:af:7d:13:a4:c7:2f:fe:63:6f:c5:9d:
                    ec:f4:06:fb:24:71:a3:13:ae:e5:9a:8d:7f:56:ff:
                    f3:a8:7b:62:61:07:f5:a8:f3:ec:d0:13:c3:be:41:
                    f5:f9:20:6b:8d:38:63:de:6b:6e:bd:3b:87:7f:97:
                    4e:04:e0:ca:13:74:3c:1c:1b:63:b4:55:b3:b0:ba:
                    8d:8f:26:8d:18:42:ee:fe:1a:b3:b6:9d:10:aa:69:
                    78:29:6c:10:77:9d:a3:4e:b1:52:e9:3f:a1:e7:cb:
                    01:e1:a4:e5:6a:90:db:d3:be:8a:fd:9d:63:e0:26:
                    73:de:e8:b9:51:c7:44:0b:fe:c5:da:d2:cb:36:64:
                    dc:66:76:5b:5e:f4:a3:54:78:29:b7:d3:db:f1:58:
                    24:06:89:b0:8d:33:6a:c8:71:8d:b3:2f:31:09:1a:
                    19:e2:a6:d1:97:65:23:7d:b5:b5:78:9b:bf:ad:f3:
                    a5:6f:02:98:e1:8e:bc:93:74:8b:ae:32:73:49:11:
                    f3:75:eb:95:f9:61:8e:35:0e:3b:f3:cb:85:7b:e7:
                    b2:4c:be:cb:c0:eb:14:c5:ba:5d:89:14:f3:49:bb:
                    22:11:5b:30:93:9f:91:2a:5d:60:47:f0:61:b1:04:
                    6b:e7:a8:7a:75:bf:30:ff:39:f3:e7:c2:d7:9b:d7:
                    65:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E1:67:BD:7E:E9:3B:6B:75:5C:80:FA:D4:E2:39:71:24:C6:34:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/3ad9341e-9252-312b-87e8-71586b49f810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:3a:be:cc:20:5c:21:fd:e3:40:3d:48:84:60:2c:47:50:5b:
         c7:52:81:03:7a:e9:da:47:8c:4e:66:aa:1b:ca:af:81:0b:0f:
         ea:a3:2a:ea:05:4a:cf:f9:d4:ac:5b:4c:7f:59:5f:b8:85:12:
         c7:c1:b9:00:0b:6b:45:c6:ad:3b:f0:47:57:ac:43:78:f7:de:
         73:e9:82:16:9a:ea:2a:2e:2b:fb:1e:8f:ce:f5:c6:bf:9d:00:
         03:64:d8:d4:08:45:b7:60:e5:9a:a4:a8:d7:7e:3a:ea:ff:79:
         26:de:de:7d:73:fd:6a:16:89:d1:38:d7:ed:95:8a:ca:25:e7:
         05:0d:3b:ba:3a:74:4e:9c:cf:87:11:21:c3:0f:e1:a6:ba:6f:
         fd:f2:65:88:57:4e:50:98:bf:62:46:3a:9d:70:d8:1c:65:ae:
         53:57:16:c1:b7:c6:a1:27:5a:ca:76:72:5c:3b:62:b3:99:f1:
         4b:29:6d:e7:a5:ac:a2:c1:2e:54:26:b9:11:98:4a:ad:87:06:
         bc:f2:c8:c2:db:44:f2:01:c7:25:e4:97:83:85:21:c7:a7:dc:
         cb:fd:e6:27:05:7f:2d:d9:64:b7:b0:d4:4f:ea:4c:25:83:29:
         7e:62:a8:53:66:11:fd:fb:47:38:64:e1:ef:40:37:26:73:78:
         10:6e:2c:5a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEUV5ZEcq+xYm8yuR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ1NTA0MzgtMTBlZi00NDRmLWI3ODUtZjdiYzZlYmEw
OGU3MB4XDTI0MDMwMzE0MDAzMVoXDTI0MDYwMTEzMDAzMVowLzEtMCsGA1UEAxMk
MzFiNDFkZmYtYWViYS00ZjhiLThjZmQtMTRkYTNiYWU1YjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc+Wr30TpMcv/mNvxZ3s9Ab7JHGjE67lmo1/
Vv/zqHtiYQf1qPPs0BPDvkH1+SBrjThj3mtuvTuHf5dOBODKE3Q8HBtjtFWzsLqN
jyaNGELu/hqztp0Qqml4KWwQd52jTrFS6T+h58sB4aTlapDb076K/Z1j4CZz3ui5
UcdEC/7F2tLLNmTcZnZbXvSjVHgpt9Pb8VgkBomwjTNqyHGNsy8xCRoZ4qbRl2Uj
fbW1eJu/rfOlbwKY4Y68k3SLrjJzSRHzdeuV+WGONQ4788uFe+eyTL7LwOsUxbpd
iRTzSbsiEVswk5+RKl1gR/BhsQRr56h6db8w/znz58LXm9dl7QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIPhZ71+6TtrdVyA+tTiOXEkxjSYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1
MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2JjNmViYTA4ZTcvM2FkOTM0MWUtOTI1Mi0z
MTJiLTg3ZTgtNzE1ODZiNDlmODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTQ1NTA0MzgtMTBlZi00NDRmLWI3
ODUtZjdiYzZlYmEwOGU3Lzk0NTUwNDM4LTEwZWYtNDQ0Zi1iNzg1LWY3YmM2ZWJh
MDhlNy5jcmwwHwYDVR0jBBgwFoAUNEc9kpg+08Ai8JvKEhCMPaHvPCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2Jj
NmViYTA4ZTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgU0ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAlOr7MIFwh/eNAPUiEYCxHUFvHUoEDeunaR4xOZqobyq+BCw/qoyrq
BUrP+dSsW0x/WV+4hRLHwbkAC2tFxq078EdXrEN4995z6YIWmuoqLiv7Ho/O9ca/
nQADZNjUCEW3YOWapKjXfjrq/3km3t59c/1qFonRONftlYrKJecFDTu6OnROnM+H
ESHDD+Gmum/98mWIV05QmL9iRjqdcNgcZa5TVxbBt8ahJ1rKdnJcO2KzmfFLKW3n
payiwS5UJrkRmEqthwa88sjC20TyAccl5JeDhSHHp9zL/eYnBX8t2WS3sNRP6kwl
gyl+YqhTZhH9+0c4ZOHvQDcmc3gQbixa
-----END CERTIFICATE-----
Generated at Fri May 17 16:06:28 2024 by rpki-client on console-fra.rpki-client.org