Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c817559c-60bc-373b-966f-49027ee8f1ab.roa
File:                     c817559c-60bc-373b-966f-49027ee8f1ab.roa (raw, json)
Hash identifier:          47l8RqBK+lG2OAFzgE6X2BoW+F9P2M9XQF/aaUZgfcQ=
Subject key identifier:   82:AE:BC:82:11:41:91:7C:B8:57:39:77:87:E1:F4:EE:83:E1:11:3C
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F432858457D1335FF299AFAFCDDCF8D20
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c817559c-60bc-373b-966f-49027ee8f1ab.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     54282
IP address blocks:        2620:147::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:35:ff:29:9a:fa:fc:dd:cf:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=091f4cfe-35da-402e-ac12-cd0f6f95c8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a2:c2:b7:a8:eb:1a:9f:0d:10:ce:43:85:ae:
                    82:d4:31:ba:ba:39:a9:21:05:4c:8c:e6:90:3e:1f:
                    19:82:a7:c6:8a:55:02:d1:1a:95:36:b2:3a:79:be:
                    fc:74:14:29:ad:63:9d:94:c6:92:61:76:77:a3:6b:
                    5b:3d:5a:d3:21:06:c8:05:b3:e0:fb:ba:1e:a0:56:
                    35:79:84:08:ef:9f:43:68:54:85:2e:f7:14:44:50:
                    e1:22:cc:47:2d:76:0b:4c:c1:fd:a4:23:c5:27:66:
                    33:21:18:ca:bb:7d:3c:2a:ae:c9:40:47:14:4c:61:
                    96:fb:9e:36:c4:9c:cb:de:e8:e5:32:af:9c:bd:39:
                    48:a2:47:41:f8:18:e9:71:12:ff:84:09:69:9a:90:
                    96:9c:8f:e3:d0:8f:62:1b:09:69:d3:52:5a:62:59:
                    b9:eb:da:98:93:2e:c3:3f:d4:57:84:6b:6e:3f:5d:
                    a6:8d:ab:e5:5f:05:01:fd:84:09:a7:05:fd:1c:b3:
                    28:2e:9b:d2:a1:b2:64:a4:e3:fb:94:c5:ac:30:e7:
                    86:03:cc:46:86:3e:a6:c7:20:a0:6c:2b:54:20:90:
                    37:4b:72:1a:60:be:68:ad:b5:00:69:25:58:3c:4d:
                    3c:d6:4b:9c:51:d5:cf:4d:cb:3e:96:e0:f0:9f:c2:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AE:BC:82:11:41:91:7C:B8:57:39:77:87:E1:F4:EE:83:E1:11:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c817559c-60bc-373b-966f-49027ee8f1ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:58:8b:de:b9:28:74:c8:e5:38:6b:78:72:e6:9a:21:9c:0d:
         97:e8:70:76:6c:42:a7:60:4f:ec:68:9b:7b:87:b6:b2:23:b0:
         95:63:9e:2c:cb:2d:91:79:09:bf:32:bb:c1:e0:36:a6:0a:ef:
         7a:ac:c4:97:02:00:56:5e:39:8e:47:05:63:cc:9b:7e:19:9b:
         86:98:3f:35:3d:31:19:74:9a:0a:ed:9e:d6:d8:fc:0c:e0:f8:
         2a:0f:6a:e7:5c:6a:48:a3:1e:12:30:0d:6d:bb:3a:57:84:fc:
         22:27:fd:83:b1:e6:8d:10:42:9e:62:0d:7d:a0:d0:91:60:6d:
         aa:89:6e:92:63:a6:c3:04:f5:62:50:6a:7c:fb:82:ad:82:77:
         2b:b4:6f:7d:01:f1:3a:ba:77:1a:9e:09:e4:3f:2e:aa:09:33:
         37:a4:4d:d7:9e:38:f0:49:eb:8b:e4:86:e0:94:df:6b:d6:1f:
         81:97:73:8c:4b:03:f8:a0:b9:50:d6:e1:91:d8:ba:70:d3:31:
         f0:89:9a:b8:63:ad:ff:10:c6:31:e9:85:33:ca:e3:fe:4b:f3:
         18:69:4c:7b:25:dc:9d:a2:38:68:ee:5b:02:76:e1:bf:76:f8:
         d1:ea:1f:e1:a4:f0:e2:a4:b0:46:fa:ab:91:72:bd:72:95:36:
         7f:9c:de:ed
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEV9EzX/KZr6/N3PjSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk
MDkxZjRjZmUtMzVkYS00MDJlLWFjMTItY2QwZjZmOTVjOGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKLCt6jrGp8NEM5Dha6C1DG6ujmpIQVMjOaQ
Ph8ZgqfGilUC0RqVNrI6eb78dBQprWOdlMaSYXZ3o2tbPVrTIQbIBbPg+7oeoFY1
eYQI759DaFSFLvcURFDhIsxHLXYLTMH9pCPFJ2YzIRjKu308Kq7JQEcUTGGW+542
xJzL3ujlMq+cvTlIokdB+BjpcRL/hAlpmpCWnI/j0I9iGwlp01JaYlm569qYky7D
P9RXhGtuP12mjavlXwUB/YQJpwX9HLMoLpvSobJkpOP7lMWsMOeGA8xGhj6mxyCg
bCtUIJA3S3IaYL5orbUAaSVYPE081kucUdXPTcs+luDwn8Jd7wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIKuvIIRQZF8uFc5d4fh9O6D4RE8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYzgxNzU1OWMtNjBiYy0z
NzNiLTk2NmYtNDkwMjdlZThmMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABRwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAkliL3rkodMjlOGt4cuaaIZwNl+hwdmxCp2BP7Gibe4e2siOwlWOe
LMstkXkJvzK7weA2pgrveqzElwIAVl45jkcFY8ybfhmbhpg/NT0xGXSaCu2e1tj8
DOD4Kg9q51xqSKMeEjANbbs6V4T8Iif9g7HmjRBCnmINfaDQkWBtqolukmOmwwT1
YlBqfPuCrYJ3K7RvfQHxOrp3Gp4J5D8uqgkzN6RN15448Enri+SG4JTfa9YfgZdz
jEsD+KC5UNbhkdi6cNMx8ImauGOt/xDGMemFM8rj/kvzGGlMeyXcnaI4aO5bAnbh
v3b40eof4aTw4qSwRvqrkXK9cpU2f5ze7Q==
-----END CERTIFICATE-----
Generated at Wed May 8 02:10:33 2024 by rpki-client on console-ams.rpki-client.org