Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93941df0-add8-3fd3-b753-78c8bbd9d62e.roa
File:                     93941df0-add8-3fd3-b753-78c8bbd9d62e.roa (raw, json)
Hash identifier:          eV4H6s3qebARvBcF6dqte0d7F5O4FWxIpazWL6lT3yQ=
Subject key identifier:   59:59:4E:BA:0F:E6:70:55:1B:C7:0F:EB:FE:D5:37:A9:31:F6:24:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7738BEA47C0EF39CB8600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93941df0-add8-3fd3-b753-78c8bbd9d62e.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        2603:3015:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:73:8b:ea:47:c0:ef:39:cb:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=0dad75f3-1269-46bb-852b-66b191a83079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:82:0f:ab:97:d4:68:3a:f0:c7:3b:4a:7e:
                    dc:12:5a:a6:92:20:d9:80:2d:dc:b1:69:68:30:62:
                    78:ad:91:a9:4e:eb:59:37:7b:c6:3c:7d:0c:d9:23:
                    0c:90:dd:40:89:7e:10:90:e2:9c:e8:ae:c7:0f:f8:
                    48:5a:1e:37:37:1b:6c:b7:d9:3c:ca:e2:67:7a:c7:
                    c9:3a:cf:23:7e:0a:10:63:29:26:09:58:2f:e6:81:
                    07:d2:f3:6b:c2:3a:fe:6e:3b:fb:21:1c:ac:b6:32:
                    8e:b6:f1:5b:bc:99:df:0c:57:0b:08:bc:fb:5e:e0:
                    03:8d:b4:f9:0d:51:f8:71:e3:a3:ff:bb:04:87:fa:
                    c3:99:f3:04:a4:8e:b3:a0:77:ae:89:8e:5f:5a:f9:
                    d8:01:d2:17:b7:1a:cf:c6:a9:c9:9a:78:d6:61:3a:
                    cb:44:34:d4:66:27:66:dc:34:9e:bf:f8:f4:d4:a2:
                    3d:e0:f6:c2:18:b0:26:09:e7:a5:8f:c1:14:fc:60:
                    eb:8f:cf:1c:02:54:26:26:96:93:42:94:9e:b0:c0:
                    cd:f8:02:ac:63:3a:d6:52:11:ad:53:2f:78:76:c3:
                    da:2a:82:93:97:22:48:58:8e:68:b4:9d:b4:24:9f:
                    c7:49:fd:f5:ea:ad:fd:95:95:3e:1d:1b:a4:88:0f:
                    65:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:59:4E:BA:0F:E6:70:55:1B:C7:0F:EB:FE:D5:37:A9:31:F6:24:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93941df0-add8-3fd3-b753-78c8bbd9d62e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:96:8b:48:0c:18:66:52:90:76:3a:46:e2:9d:ba:49:45:da:
         cb:37:9f:f3:16:c5:2d:7e:42:6a:05:90:84:4a:0e:7d:e3:5e:
         bb:9e:4b:67:a2:0d:c7:9b:66:3c:6e:51:f2:94:d0:f2:eb:d5:
         f5:5e:38:b3:67:de:cd:4a:fd:4d:95:c3:c9:41:47:6c:42:41:
         d4:87:93:51:70:41:c3:88:60:1a:22:29:63:f4:8c:49:13:25:
         fe:3c:45:58:d7:b1:32:a1:6e:c9:f3:de:d7:6c:3b:ce:ce:83:
         7e:e0:11:d1:5d:45:1d:65:6e:85:98:eb:98:76:fe:ee:9e:a3:
         9c:46:bc:31:88:96:84:2c:1d:b1:b8:1f:57:e4:b8:c4:d4:ce:
         29:4b:fb:a6:db:f0:99:02:3d:38:ba:f3:3e:12:cd:38:08:73:
         1a:a7:9d:dd:ed:a8:52:b9:44:fd:cc:5f:27:e9:78:6d:a8:3f:
         95:aa:6c:48:62:74:22:3d:36:a5:dc:d6:42:33:1b:97:64:97:
         07:b3:85:17:81:7c:43:5b:06:84:88:48:c7:a6:86:f9:1f:5c:
         7c:d3:30:dd:3c:81:c5:24:ca:05:f2:d4:75:5e:25:d4:5d:c1:
         13:bb:e9:f1:e3:59:ba:b5:9a:47:21:90:34:37:43:fd:20:18:
         64:f1:79:53
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEc0x3OL6kfA7znLhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
MGRhZDc1ZjMtMTI2OS00NmJiLTg1MmItNjZiMTkxYTgzMDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooCCD6uX1Gg68Mc7Sn7cElqmkiDZgC3csWlo
MGJ4rZGpTutZN3vGPH0M2SMMkN1AiX4QkOKc6K7HD/hIWh43Nxtst9k8yuJnesfJ
Os8jfgoQYykmCVgv5oEH0vNrwjr+bjv7IRystjKOtvFbvJnfDFcLCLz7XuADjbT5
DVH4ceOj/7sEh/rDmfMEpI6zoHeuiY5fWvnYAdIXtxrPxqnJmnjWYTrLRDTUZidm
3DSev/j01KI94PbCGLAmCeelj8EU/GDrj88cAlQmJpaTQpSesMDN+AKsYzrWUhGt
Uy94dsPaKoKTlyJIWI5otJ20JJ/HSf316q39lZU+HRukiA9lDwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFlZTroP5nBVG8cP6/7VN6kx9iQ1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTM5NDFkZjAtYWRkOC0z
ZmQzLWI3NTMtNzhjOGJiZDlkNjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwFQEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEADpaLSAwYZlKQdjpG4p26SUXayzef8xbFLX5CagWQhEoOfeNeu55L
Z6INx5tmPG5R8pTQ8uvV9V44s2fezUr9TZXDyUFHbEJB1IeTUXBBw4hgGiIpY/SM
SRMl/jxFWNexMqFuyfPe12w7zs6DfuAR0V1FHWVuhZjrmHb+7p6jnEa8MYiWhCwd
sbgfV+S4xNTOKUv7ptvwmQI9OLrzPhLNOAhzGqed3e2oUrlE/cxfJ+l4bag/laps
SGJ0Ij02pdzWQjMbl2SXB7OFF4F8Q1sGhIhIx6aG+R9cfNMw3TyBxSTKBfLUdV4l
1F3BE7vp8eNZurWaRyGQNDdD/SAYZPF5Uw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 05:08:58 2024 by rpki-client on console-ams.rpki-client.org