Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa
File:                     8a673006-55a5-3418-963c-f9a5b7571cea.roa (raw, json)
Hash identifier:          sMAcBREWZNebRUTpFbQyE7x5xWtvywIERF80FD+/3V0=
Subject key identifier:   B8:BE:30:39:9F:9F:93:69:35:27:3F:60:87:F0:FB:94:E6:28:49:38
Certificate issuer:       /CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc
Certificate serial:       010D0C9F432858450EEAD546DBAB0BA6DF72E290
Authority key identifier: 43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     393869
IP address blocks:        2620:11f:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:d5:46:db:ab:0b:a6:df:72:e2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=8b42ddaa-305c-4003-8b57-3c7f949f1ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:27:39:63:19:0e:ce:7e:61:ee:65:de:60:
                    ce:6b:7f:0e:e5:14:75:f1:65:f6:d7:c0:19:8d:37:
                    16:5b:33:37:fb:15:cd:05:6e:79:ab:0e:32:a2:ed:
                    77:ae:80:c8:91:3e:a6:ce:5e:69:4f:ed:78:c8:9f:
                    73:18:63:f3:68:a3:a0:df:e4:75:87:89:4e:90:31:
                    87:a3:2c:42:00:ce:49:77:0c:48:9a:71:6a:1b:42:
                    b2:c0:ca:c4:19:a9:b5:1c:0b:ef:3f:4d:53:89:5a:
                    96:42:9b:9d:3b:f2:43:6f:77:2e:51:c4:cc:4c:61:
                    ca:9a:06:06:27:33:5c:10:91:ff:9d:81:43:a0:1d:
                    f0:db:5c:92:bc:b3:74:51:ff:e0:b0:72:30:18:76:
                    73:91:46:e3:39:38:b3:ab:11:e5:bc:a2:9f:d0:53:
                    94:ab:b0:9d:12:15:2b:c9:35:a2:0b:09:69:c1:c8:
                    10:a5:0f:e9:70:68:b4:ed:3f:36:70:68:85:47:bb:
                    a3:5f:01:b5:68:d6:f5:34:d4:ae:33:64:ce:09:43:
                    c5:2b:7e:e9:a9:4c:2a:31:11:a0:65:f6:e3:0b:51:
                    19:c7:9e:b6:2a:99:12:ac:23:81:65:bc:c4:cc:92:
                    ec:5e:df:c3:06:f5:61:d6:cf:d5:20:cd:84:19:a0:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BE:30:39:9F:9F:93:69:35:27:3F:60:87:F0:FB:94:E6:28:49:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl

            X509v3 Authority Key Identifier:
                keyid:43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6c:7b:bf:45:e1:90:da:b2:ac:38:a2:ad:35:e2:1c:92:9f:
         fc:1d:10:c7:12:af:2b:26:8d:c6:c9:46:cc:87:e4:0a:24:46:
         f5:34:28:70:12:f6:8a:81:07:75:44:44:56:e1:7d:d4:29:e8:
         74:f3:dc:43:2c:f0:84:8d:a1:a2:60:96:49:dd:7d:32:ee:39:
         e9:3b:81:0e:63:6e:46:f6:06:c2:c2:9e:c6:32:ca:98:2f:e1:
         f1:37:ce:8d:16:c3:da:a9:af:00:7d:d1:28:e1:ee:82:d8:c7:
         5d:54:5c:71:c5:d7:15:ea:01:c0:58:d5:13:62:00:81:6f:50:
         93:b8:29:e2:67:3b:c0:80:e4:59:a9:a0:6b:87:d9:89:a5:74:
         ac:ca:47:51:53:78:0f:64:fd:d7:c3:44:b8:3a:0a:e7:b1:44:
         b2:76:33:e9:f0:4b:41:4f:9b:02:44:e2:19:39:75:b0:4d:2c:
         82:1b:3c:fb:5f:49:ce:38:d9:42:50:3c:32:d2:92:d5:7b:66:
         85:8a:44:cd:d5:de:d2:57:75:af:87:49:e2:49:02:68:83:9b:
         9f:a1:1a:68:b6:85:c5:2e:8c:f3:6b:bf:08:e5:12:5b:f4:82:
         49:1d:ea:b9:aa:bf:5d:56:5c:21:48:5f:d1:d6:b6:57:a6:65:
         62:91:80:ce
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEUO6tVG26sLpt9y4pAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTllMmMxYWMtZTI1NS00MGZlLThkYzgtMzY3NTBiNTY5
YmZjMB4XDTI0MDMwMTAyMDAyN1oXDTI0MDUzMDAxMDAyN1owLzEtMCsGA1UEAxMk
OGI0MmRkYWEtMzA1Yy00MDAzLThiNTctM2M3Zjk0OWYxYWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4InOWMZDs5+Ye5l3mDOa38O5RR18WX218AZ
jTcWWzM3+xXNBW55qw4you13roDIkT6mzl5pT+14yJ9zGGPzaKOg3+R1h4lOkDGH
oyxCAM5JdwxImnFqG0KywMrEGam1HAvvP01TiVqWQpudO/JDb3cuUcTMTGHKmgYG
JzNcEJH/nYFDoB3w21ySvLN0Uf/gsHIwGHZzkUbjOTizqxHlvKKf0FOUq7CdEhUr
yTWiCwlpwcgQpQ/pcGi07T82cGiFR7ujXwG1aNb1NNSuM2TOCUPFK37pqUwqMRGg
ZfbjC1EZx562KpkSrCOBZbzEzJLsXt/DBvVh1s/VIM2EGaCKtQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLi+MDmfn5NpNSc/YIfw+5TmKEk4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOWUy
YzFhYy1lMjU1LTQwZmUtOGRjOC0zNjc1MGI1NjliZmMvOGE2NzMwMDYtNTVhNS0z
NDE4LTk2M2MtZjlhNWI3NTcxY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTllMmMxYWMtZTI1NS00MGZlLThk
YzgtMzY3NTBiNTY5YmZjL2E5ZTJjMWFjLWUyNTUtNDBmZS04ZGM4LTM2NzUwYjU2
OWJmYy5jcmwwHwYDVR0jBBgwFoAUQ16gpiq9KrPgDx52W71+jvmA1x0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOWUyYzFhYy1lMjU1LTQwZmUtOGRjOC0zNjc1
MGI1NjliZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABH1Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPWx7v0XhkNqyrDiirTXiHJKf/B0QxxKvKyaNxslGzIfkCiRG9TQo
cBL2ioEHdUREVuF91CnodPPcQyzwhI2homCWSd19Mu456TuBDmNuRvYGwsKexjLK
mC/h8TfOjRbD2qmvAH3RKOHugtjHXVRcccXXFeoBwFjVE2IAgW9Qk7gp4mc7wIDk
Wamga4fZiaV0rMpHUVN4D2T918NEuDoK57FEsnYz6fBLQU+bAkTiGTl1sE0sghs8
+19JzjjZQlA8MtKS1XtmhYpEzdXe0ld1r4dJ4kkCaIObn6EaaLaFxS6M82u/COUS
W/SCSR3quaq/XVZcIUhf0da2V6ZlYpGAzg==
-----END CERTIFICATE-----
Generated at Thu May 16 05:46:40 2024 by rpki-client on console-ams.rpki-client.org