Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35468332-3d95-3ece-ba18-7a012692f230.roa
File:                     35468332-3d95-3ece-ba18-7a012692f230.roa (raw, json)
Hash identifier:          CHzGUb5KCiHyLc10GHCsqrUEi5kEondjaxEPAQSxheM=
Subject key identifier:   E5:4A:F2:32:B1:80:5C:D3:25:CC:6D:D5:C0:6A:34:69:36:1C:1A:E5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB2FDFE9F94088BAC2B180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35468332-3d95-3ece-ba18-7a012692f230.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        2603:2484:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:2f:df:e9:f9:40:88:ba:c2:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=4ce00b1d-9d7d-4f8d-9ad1-8c2d3d74071c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:ec:8b:86:9c:33:58:a4:47:2c:86:a9:70:
                    91:df:8c:de:c2:69:51:34:39:d1:85:18:c0:e8:0e:
                    d1:43:6c:e2:ad:86:51:18:9e:84:c1:c7:14:b4:2b:
                    18:c7:c3:86:8d:c2:29:5b:64:02:3f:94:3c:4c:97:
                    ca:b3:cd:9a:6f:2c:e2:e4:48:ee:9e:d3:b1:7d:e0:
                    30:ba:b0:f3:95:6a:20:cf:12:8e:39:05:3c:d5:a8:
                    6a:3a:b5:6e:d1:15:ee:d8:a8:73:0c:0a:fa:4b:25:
                    ae:e7:ca:17:89:8e:7c:4a:f1:6d:0d:27:43:ef:aa:
                    53:22:58:f1:37:b1:13:39:33:af:1e:d2:0b:72:10:
                    8d:41:e6:3b:28:06:48:49:22:81:a8:50:e9:3e:c2:
                    d7:38:8c:d3:ad:b8:7f:3e:c9:9a:50:14:95:f1:b3:
                    aa:d5:bb:37:7b:17:dc:23:7c:0e:5c:e9:ae:ab:ec:
                    b3:53:28:b6:c5:6e:43:61:b0:a3:23:64:1c:4f:d2:
                    35:c2:74:b7:76:89:11:59:d7:3b:90:e7:15:a1:1d:
                    d1:d2:8c:ff:d8:cd:de:56:e8:e2:af:b0:c4:36:ce:
                    01:fa:30:ab:94:ba:fa:16:da:21:26:64:6e:ca:5a:
                    eb:8c:d7:09:0f:6a:77:e1:13:1d:41:8d:7d:7f:86:
                    60:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4A:F2:32:B1:80:5C:D3:25:CC:6D:D5:C0:6A:34:69:36:1C:1A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35468332-3d95-3ece-ba18-7a012692f230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2484:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:f2:e8:7c:60:b6:4f:8c:da:94:d6:3b:cb:97:b8:0c:5e:c6:
         ae:93:ba:41:2e:3b:9e:9a:c8:ba:2b:b0:7a:9d:a2:0a:5e:48:
         33:98:3d:7d:fc:ca:d4:5b:2f:22:95:4f:60:ed:85:b7:2b:f4:
         2a:f5:ea:75:be:c3:93:49:1d:48:8f:f5:7d:60:45:7d:9c:23:
         0b:d2:5f:28:77:5b:14:75:79:1b:95:17:e7:86:c8:6e:4b:51:
         e6:26:5a:08:42:34:c8:3b:c5:a8:a0:fa:8d:68:e0:9f:b1:d5:
         e1:8d:7d:67:b3:bd:32:1e:28:be:92:f4:d6:3b:d9:e4:eb:62:
         72:69:8d:b2:90:29:9a:db:0c:2d:c0:87:65:8a:12:27:8e:94:
         02:bc:7a:18:7a:c6:8e:53:ae:57:47:62:34:d8:5c:27:cb:f7:
         90:2b:d7:62:dd:6e:f5:25:4f:a6:dd:d3:7f:4b:cc:8c:a1:4b:
         43:7f:36:fd:7f:b9:a7:58:65:6f:da:bf:43:67:57:ed:9b:d0:
         c4:dc:6c:b9:4c:d7:be:94:89:e4:d6:38:38:54:b7:00:5d:74:
         0f:29:7d:6a:3d:51:b3:20:f1:f9:ff:b3:a7:37:de:94:b9:4a:
         4e:b6:d2:5b:e4:9f:b7:95:bd:a6:25:30:18:da:b3:65:fb:d0:
         80:39:22:e2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEUfqy/f6flAiLrCsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
NGNlMDBiMWQtOWQ3ZC00ZjhkLTlhZDEtOGMyZDNkNzQwNzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Fvsi4acM1ikRyyGqXCR34zewmlRNDnRhRjA
6A7RQ2zirYZRGJ6EwccUtCsYx8OGjcIpW2QCP5Q8TJfKs82abyzi5EjuntOxfeAw
urDzlWogzxKOOQU81ahqOrVu0RXu2KhzDAr6SyWu58oXiY58SvFtDSdD76pTIljx
N7ETOTOvHtILchCNQeY7KAZISSKBqFDpPsLXOIzTrbh/PsmaUBSV8bOq1bs3exfc
I3wOXOmuq+yzUyi2xW5DYbCjI2QcT9I1wnS3dokRWdc7kOcVoR3R0oz/2M3eVuji
r7DENs4B+jCrlLr6FtohJmRuylrrjNcJD2p34RMdQY19f4ZgOQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOVK8jKxgFzTJcxt1cBqNGk2HBrlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzU0NjgzMzItM2Q5NS0z
ZWNlLWJhMTgtN2EwMTI2OTJmMjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMkhIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAw/LofGC2T4zalNY7y5e4DF7GrpO6QS47nprIuiuwep2iCl5IM5g9
ffzK1FsvIpVPYO2Ftyv0KvXqdb7Dk0kdSI/1fWBFfZwjC9JfKHdbFHV5G5UX54bI
bktR5iZaCEI0yDvFqKD6jWjgn7HV4Y19Z7O9Mh4ovpL01jvZ5OticmmNspApmtsM
LcCHZYoSJ46UArx6GHrGjlOuV0diNNhcJ8v3kCvXYt1u9SVPpt3Tf0vMjKFLQ382
/X+5p1hlb9q/Q2dX7ZvQxNxsuUzXvpSJ5NY4OFS3AF10Dyl9aj1RsyDx+f+zpzfe
lLlKTrbSW+Sft5W9piUwGNqzZfvQgDki4g==
-----END CERTIFICATE-----
Generated at Sun May 5 02:37:08 2024 by rpki-client on console-fra.rpki-client.org