Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/5d4dee08-0047-394b-8f59-d43893d01fee.roa
File:                     5d4dee08-0047-394b-8f59-d43893d01fee.roa (raw, json)
Hash identifier:          gi18Wa0vKDKuRzVxdmq61TR4OrnidRyDFb4f7mIwuKg=
Subject key identifier:   89:A5:78:BF:9C:1D:C7:60:65:51:A6:B3:76:DB:64:F1:79:C4:71:EF
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858473FF0A369C8C3FFD47E34E300
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/5d4dee08-0047-394b-8f59-d43893d01fee.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     396982
IP address blocks:        2606:f4c0:5000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:a3:69:c8:c3:ff:d4:7e:34:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=cf53e8b5-e915-40a5-af1b-256a021f6946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e3:9d:8c:7f:6e:be:23:97:64:dc:7d:15:38:
                    1d:8b:4c:d4:28:71:76:aa:a4:e6:98:b6:9b:6b:d3:
                    b0:24:a3:d8:34:b7:9d:b1:a8:f0:15:4d:ff:57:8b:
                    67:a2:7a:24:8a:73:86:9d:ec:f2:50:60:69:55:24:
                    34:23:48:3c:46:6a:c8:4f:39:df:53:9b:42:f3:1e:
                    fe:5f:81:18:fa:38:7c:0e:f5:91:18:26:60:df:5d:
                    fc:2d:df:29:12:1e:55:6e:ff:d5:60:83:e4:4a:94:
                    df:6a:6d:89:70:d0:5a:23:a3:e7:17:1f:f6:13:7d:
                    f7:cc:ae:41:bb:2c:8e:a7:55:79:16:1a:03:01:f3:
                    45:dd:8b:31:ba:f5:7f:c8:78:74:d3:81:93:aa:b4:
                    ed:ec:dd:fb:15:b9:14:11:61:71:7e:fb:46:f5:8e:
                    61:d2:69:42:49:dc:a6:57:1d:12:09:d6:63:b1:84:
                    eb:8d:ba:a7:58:05:0f:ff:6f:e5:76:09:8c:01:ab:
                    5f:a5:83:48:6f:5e:0c:2f:bd:7c:0d:80:dc:6a:7e:
                    d1:ee:13:19:16:eb:bb:d1:f9:27:3e:0d:e0:46:10:
                    9c:fe:96:3f:35:a6:6e:3d:38:27:b1:94:1e:9b:cb:
                    a2:7e:6e:ce:a8:e4:7f:8c:d6:53:4b:42:e7:3f:c6:
                    c1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A5:78:BF:9C:1D:C7:60:65:51:A6:B3:76:DB:64:F1:79:C4:71:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/5d4dee08-0047-394b-8f59-d43893d01fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f6:df:06:fa:31:88:2e:c2:39:bd:47:80:39:13:54:ef:8f:
         88:21:de:41:12:5b:9d:a3:bc:57:1c:29:6b:30:a1:06:b1:3f:
         6a:df:d4:5f:46:49:cc:45:84:56:06:d0:74:5d:df:51:10:d7:
         43:5b:8c:8c:58:05:5f:e2:41:fc:72:32:7c:04:61:e5:23:a3:
         cd:eb:e6:03:c3:bb:4a:15:c4:59:f0:a5:9a:97:59:5a:15:f1:
         7f:c7:09:c8:b3:c7:5f:af:16:d3:be:83:b5:66:8f:55:0f:0f:
         74:ba:a4:02:16:e8:e9:4b:a4:15:9e:db:62:e2:7e:61:ae:c2:
         71:31:50:8d:e4:64:9a:0b:91:49:b5:df:55:b5:86:ba:d4:78:
         9d:8d:60:db:21:7a:a9:41:44:53:d8:d8:8a:25:76:78:be:21:
         4a:56:a7:d7:11:af:dc:70:f6:31:cd:49:9b:f1:89:ec:dd:54:
         d0:db:62:a7:f3:b1:ca:e9:06:14:32:14:ae:aa:05:dc:5a:7e:
         ae:2d:3e:6c:9c:46:e0:af:1e:7f:02:e0:12:9f:89:fc:05:17:
         47:c4:a9:6f:19:04:09:9c:07:9f:21:ea:85:86:63:54:c3:a7:
         ea:c6:06:2c:69:5a:8f:e8:87:2a:3e:2d:92:fa:35:94:cc:c5:
         e6:f1:8c:31
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEc/8KNpyMP/1H404wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk
Y2Y1M2U4YjUtZTkxNS00MGE1LWFmMWItMjU2YTAyMWY2OTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeOdjH9uviOXZNx9FTgdi0zUKHF2qqTmmLab
a9OwJKPYNLedsajwFU3/V4tnonokinOGnezyUGBpVSQ0I0g8RmrITznfU5tC8x7+
X4EY+jh8DvWRGCZg3138Ld8pEh5Vbv/VYIPkSpTfam2JcNBaI6PnFx/2E333zK5B
uyyOp1V5FhoDAfNF3YsxuvV/yHh004GTqrTt7N37FbkUEWFxfvtG9Y5h0mlCSdym
Vx0SCdZjsYTrjbqnWAUP/2/ldgmMAatfpYNIb14ML718DYDcan7R7hMZFuu70fkn
Pg3gRhCc/pY/NaZuPTgnsZQem8uifm7OqOR/jNZTS0LnP8bBAwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFImleL+cHcdgZVGms3bbZPF5xHHvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvNWQ0ZGVlMDgtMDA0Ny0z
OTRiLThmNTktZDQzODkzZDAxZmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgb0wFAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAlfbfBvoxiC7COb1HgDkTVO+PiCHeQRJbnaO8VxwpazChBrE/at/U
X0ZJzEWEVgbQdF3fURDXQ1uMjFgFX+JB/HIyfARh5SOjzevmA8O7ShXEWfClmpdZ
WhXxf8cJyLPHX68W076DtWaPVQ8PdLqkAhbo6UukFZ7bYuJ+Ya7CcTFQjeRkmguR
SbXfVbWGutR4nY1g2yF6qUFEU9jYiiV2eL4hSlan1xGv3HD2Mc1Jm/GJ7N1U0Nti
p/OxyukGFDIUrqoF3Fp+ri0+bJxG4K8efwLgEp+J/AUXR8SpbxkECZwHnyHqhYZj
VMOn6sYGLGlaj+iHKj4tkvo1lMzF5vGMMQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:47 2024 by rpki-client on console-fra.rpki-client.org