Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f4c5586-8772-35c0-9817-a5df37ec897e.roa
File:                     6f4c5586-8772-35c0-9817-a5df37ec897e.roa (raw, json)
Hash identifier:          r/1MtQmom/rOAHTJrkBBn3VJmOlc2rKJ2fwUWNBNT3U=
Subject key identifier:   E0:C7:30:B4:31:64:D9:A7:5A:8E:E5:AD:90:71:67:4F:2B:77:86:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB3284FC08C2AAD4FB2E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f4c5586-8772-35c0-9817-a5df37ec897e.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        2603:3011:1100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:32:84:fc:08:c2:aa:d4:fb:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=010c4cd0-1a0b-4f81-be80-108a496abc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:c9:80:36:c9:69:d5:78:1b:df:9a:ba:ff:
                    72:60:92:31:e5:f9:27:45:63:ae:ad:02:93:d1:eb:
                    d5:ab:0c:1d:d0:97:80:74:e1:e5:b9:f1:8d:d4:74:
                    53:78:a9:57:a7:27:fe:3f:4a:c7:b7:76:3e:56:19:
                    a9:53:30:fa:9d:0a:65:e9:38:91:f1:bb:84:62:c6:
                    37:03:ee:bc:88:42:71:50:a8:0d:de:5f:7b:d2:bf:
                    65:65:ac:c9:64:0c:d1:e5:3d:10:28:f9:f7:26:f6:
                    40:83:36:14:ef:b5:14:c2:c4:21:86:54:30:48:f7:
                    32:b1:3c:d5:19:96:95:6b:72:96:61:cc:be:73:15:
                    3c:50:29:ed:88:85:dc:d1:7e:40:16:79:9f:76:3d:
                    6a:a9:78:95:be:90:52:61:41:3c:8b:c1:f5:e5:d3:
                    6a:a4:ca:51:88:cb:3c:f0:df:55:13:ac:ae:f5:7f:
                    62:ab:cd:28:bf:60:73:00:5e:5a:fe:c5:62:3a:2e:
                    22:3d:d9:41:72:91:35:4c:72:03:9b:40:01:3e:da:
                    dd:33:c0:67:8a:59:09:5a:5e:e1:7f:e3:61:9f:a3:
                    f0:9a:89:a6:26:04:0a:69:08:61:b7:96:42:cb:76:
                    df:23:96:7f:21:b5:a7:c4:9b:cb:d6:7b:75:a8:c6:
                    66:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C7:30:B4:31:64:D9:A7:5A:8E:E5:AD:90:71:67:4F:2B:77:86:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f4c5586-8772-35c0-9817-a5df37ec897e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3011:1100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:0b:3d:08:10:27:74:02:f5:63:65:05:07:45:4f:e4:6c:f7:
         c7:11:f3:99:5d:22:9e:b2:3d:56:c2:ea:ee:22:53:2f:c4:b6:
         21:28:c5:c7:8b:22:55:16:23:56:cf:79:5e:46:27:2b:38:d6:
         d7:0c:4d:6d:99:bf:01:c4:59:f7:71:f4:44:4d:a3:c1:54:ca:
         51:07:af:59:09:04:cf:a6:3e:71:16:dc:1e:af:5f:54:bf:42:
         b9:de:00:f5:ee:cb:85:85:9d:04:1a:d2:73:8b:dd:fb:33:60:
         df:fd:f4:ef:1d:fd:d9:f0:1f:ee:4d:9f:cf:8b:46:f2:51:18:
         04:e3:64:5e:e3:3a:29:36:dd:80:69:dc:61:85:e8:dd:c1:fe:
         e0:7d:1a:d3:4b:24:7b:2e:7a:7e:26:d0:81:37:b6:12:82:49:
         5e:e4:d2:4b:70:58:92:ee:cb:13:1b:46:cb:0b:7a:24:42:0a:
         a4:56:ed:fd:5c:c1:79:db:ca:72:d9:be:c7:14:95:07:f8:2c:
         f4:2f:30:15:fe:a5:c0:a3:ee:ae:e1:c7:c7:b7:6d:d3:d7:cc:
         32:9e:86:0f:9d:68:d3:58:a3:77:1e:8a:db:18:73:ce:37:01:
         83:a2:36:35:c9:4e:c0:c3:5e:4a:cc:d0:98:7e:a5:f2:cc:f6:
         43:ce:64:9a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEUfqzKE/AjCqtT7LgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
MDEwYzRjZDAtMWEwYi00ZjgxLWJlODAtMTA4YTQ5NmFiYzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSPJgDbJadV4G9+auv9yYJIx5fknRWOurQKT
0evVqwwd0JeAdOHlufGN1HRTeKlXpyf+P0rHt3Y+VhmpUzD6nQpl6TiR8buEYsY3
A+68iEJxUKgN3l970r9lZazJZAzR5T0QKPn3JvZAgzYU77UUwsQhhlQwSPcysTzV
GZaVa3KWYcy+cxU8UCntiIXc0X5AFnmfdj1qqXiVvpBSYUE8i8H15dNqpMpRiMs8
8N9VE6yu9X9iq80ov2BzAF5a/sViOi4iPdlBcpE1THIDm0ABPtrdM8BnilkJWl7h
f+Nhn6PwmommJgQKaQhht5ZCy3bfI5Z/IbWnxJvL1nt1qMZmuwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFODHMLQxZNmnWo7lrZBxZ08rd4ZhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmY0YzU1ODYtODc3Mi0z
NWMwLTk4MTctYTVkZjM3ZWM4OTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwEREw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAYQs9CBAndAL1Y2UFB0VP5Gz3xxHzmV0inrI9VsLq7iJTL8S2ISjF
x4siVRYjVs95XkYnKzjW1wxNbZm/AcRZ93H0RE2jwVTKUQevWQkEz6Y+cRbcHq9f
VL9Cud4A9e7LhYWdBBrSc4vd+zNg3/307x392fAf7k2fz4tG8lEYBONkXuM6KTbd
gGncYYXo3cH+4H0a00skey56fibQgTe2EoJJXuTSS3BYku7LExtGywt6JEIKpFbt
/VzBedvKctm+xxSVB/gs9C8wFf6lwKPuruHHx7dt09fMMp6GD51o01ijdx6K2xhz
zjcBg6I2NclOwMNeSszQmH6l8sz2Q85kmg==
-----END CERTIFICATE-----
Generated at Sat May 4 14:50:35 2024 by rpki-client on console-fra.rpki-client.org