Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/3ad9341e-9252-312b-87e8-71586b49f810.roa
File:                     3ad9341e-9252-312b-87e8-71586b49f810.roa (raw, json)
Hash identifier:          z3EcrZy96G6aCo5qlmd3JAZYMpjb9tgD3yHP7zkh+H0=
Subject key identifier:   14:3B:2B:81:2E:22:A7:A5:15:3F:DB:87:87:4D:45:55:9A:47:18:D0
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F43285847B3CC0F4D0C3CADF85BA34940
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/3ad9341e-9252-312b-87e8-71586b49f810.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     15267
IP address blocks:        2605:3400::/32 maxlen: 32
                          2605:3400::/33 maxlen: 33
                          2605:3400:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:0f:4d:0c:3c:ad:f8:5b:a3:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=09c62dd3-80f7-4616-a7d5-ada36e54dc0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ee:7d:b5:2f:76:c3:d2:44:fd:0f:98:8f:2f:
                    31:16:a2:72:60:dc:bf:f3:9a:7f:e6:7d:1c:ba:2c:
                    90:e6:8c:6b:6f:05:5b:5e:ea:95:67:8c:f3:da:45:
                    aa:41:c5:fe:6a:78:c6:1c:2c:40:87:f7:09:50:ac:
                    ec:f9:af:77:f8:83:60:b0:4e:fc:61:5e:80:b8:53:
                    c6:0d:ac:64:0e:11:64:96:a7:27:db:f8:9d:d0:19:
                    e7:01:ea:25:d8:b2:f4:19:e0:e1:a7:e9:b5:1a:d1:
                    21:e1:5e:cb:d0:62:d4:a1:ab:fd:61:a6:ba:75:85:
                    f1:07:b0:f6:af:c7:54:e8:fa:f5:06:78:1b:57:a1:
                    7d:e4:22:14:94:bf:ea:04:c7:e9:79:18:ab:80:b2:
                    00:27:d1:e7:b0:88:53:65:4b:23:de:d6:e8:e5:c3:
                    32:d1:a0:5c:bb:f3:43:5b:a4:8d:6d:33:d9:03:76:
                    7c:ac:74:ac:22:b2:07:62:f7:c2:33:27:d7:b4:1b:
                    f5:10:eb:94:26:6a:1b:6a:08:df:9a:18:44:c7:5b:
                    c2:8b:9d:37:81:91:73:7f:7f:96:43:64:dc:a0:2d:
                    a2:2f:2a:4e:21:6f:b0:df:78:ed:a6:7e:c7:f0:ad:
                    96:dd:10:1e:dd:99:07:dc:77:b5:69:1e:df:d9:21:
                    1c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3B:2B:81:2E:22:A7:A5:15:3F:DB:87:87:4D:45:55:9A:47:18:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/3ad9341e-9252-312b-87e8-71586b49f810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:db:5f:f8:66:be:90:3d:58:d2:be:c2:2c:f4:a9:f6:56:4a:
         9e:1c:dd:b1:b1:d1:73:b2:b6:61:47:18:72:8d:44:18:a6:c2:
         1c:54:13:bd:7c:f2:b5:f3:ae:54:2f:67:04:66:04:6b:ce:1d:
         6e:78:d9:e2:d1:f7:82:9e:a7:3f:79:7b:d5:2f:ac:43:8d:72:
         94:3f:55:88:4e:f1:3b:f5:e6:32:a9:de:e5:a4:10:22:2e:d5:
         97:d9:ac:16:e3:f9:a7:e3:3a:6e:17:a1:11:69:16:d6:d3:fd:
         2f:16:24:db:ea:a7:85:90:d8:fb:ab:5e:84:fd:f6:36:b9:c3:
         6b:de:75:77:71:06:40:d4:b5:34:1a:59:f0:a4:4c:48:94:ff:
         d0:13:e6:46:06:34:ea:07:bb:79:7f:82:5e:df:f5:e4:6c:ba:
         e0:bc:5a:59:7f:16:40:df:af:96:a0:fe:c5:ab:62:f4:0d:cc:
         74:1f:5f:92:79:5b:67:f3:f1:c3:35:eb:3a:7a:52:47:06:9b:
         5e:1f:df:38:40:b4:86:e1:0a:95:fa:88:73:0f:d1:63:45:bb:
         68:70:fd:98:5d:c0:0d:a4:a0:59:75:e4:79:14:12:8f:b4:db:
         61:e2:25:2c:b5:4f:30:b4:a9:b4:23:d9:37:f7:19:94:4c:b0:
         0a:c1:57:94
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEezzA9NDDyt+FujSUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ1NTA0MzgtMTBlZi00NDRmLWI3ODUtZjdiYzZlYmEw
OGU3MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk
MDljNjJkZDMtODBmNy00NjE2LWE3ZDUtYWRhMzZlNTRkYzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+59tS92w9JE/Q+Yjy8xFqJyYNy/85p/5n0c
uiyQ5oxrbwVbXuqVZ4zz2kWqQcX+anjGHCxAh/cJUKzs+a93+INgsE78YV6AuFPG
DaxkDhFklqcn2/id0BnnAeol2LL0GeDhp+m1GtEh4V7L0GLUoav9Yaa6dYXxB7D2
r8dU6Pr1BngbV6F95CIUlL/qBMfpeRirgLIAJ9HnsIhTZUsj3tbo5cMy0aBcu/ND
W6SNbTPZA3Z8rHSsIrIHYvfCMyfXtBv1EOuUJmobagjfmhhEx1vCi503gZFzf3+W
Q2TcoC2iLypOIW+w33jtpn7H8K2W3RAe3ZkH3He1aR7f2SEcIQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBQ7K4EuIqelFT/bh4dNRVWaRxjQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1
MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2JjNmViYTA4ZTcvM2FkOTM0MWUtOTI1Mi0z
MTJiLTg3ZTgtNzE1ODZiNDlmODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTQ1NTA0MzgtMTBlZi00NDRmLWI3
ODUtZjdiYzZlYmEwOGU3Lzk0NTUwNDM4LTEwZWYtNDQ0Zi1iNzg1LWY3YmM2ZWJh
MDhlNy5jcmwwHwYDVR0jBBgwFoAUNEc9kpg+08Ai8JvKEhCMPaHvPCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2Jj
NmViYTA4ZTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgU0ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAb21/4Zr6QPVjSvsIs9Kn2VkqeHN2xsdFzsrZhRxhyjUQYpsIcVBO9
fPK1865UL2cEZgRrzh1ueNni0feCnqc/eXvVL6xDjXKUP1WITvE79eYyqd7lpBAi
LtWX2awW4/mn4zpuF6ERaRbW0/0vFiTb6qeFkNj7q16E/fY2ucNr3nV3cQZA1LU0
GlnwpExIlP/QE+ZGBjTqB7t5f4Je3/XkbLrgvFpZfxZA36+WoP7Fq2L0Dcx0H1+S
eVtn8/HDNes6elJHBpteH984QLSG4QqV+ohzD9FjRbtocP2YXcANpKBZdeR5FBKP
tNth4iUstU8wtKm0I9k39xmUTLAKwVeU
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:12 2024 by rpki-client on console-fra.rpki-client.org