Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa510730-c7ba-3eac-b51e-cd3e8538c70f.roa
File:                     fa510730-c7ba-3eac-b51e-cd3e8538c70f.roa (raw, json)
Hash identifier:          4lEBxOzqhu19ZLyNshxc4jjJU4RREcdqA4XeQyNmWVE=
Subject key identifier:   8F:33:50:41:A7:D5:4F:64:A0:84:58:AE:BF:9E:36:66:6E:0D:93:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC0CFCF93EF42E6A253D05
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa510730-c7ba-3eac-b51e-cd3e8538c70f.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        2603:3016:1a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:0c:fc:f9:3e:f4:2e:6a:25:3d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=cca106f0-685a-4a52-92ae-0a89c458d835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:33:ca:8b:2f:eb:c7:28:b2:83:b2:c1:6f:
                    de:89:44:dc:97:24:bf:25:1d:0e:b6:2e:06:1d:bc:
                    d6:88:60:fa:de:de:66:45:aa:ae:f5:a1:21:27:f6:
                    5c:17:ad:8b:af:de:38:7b:9b:84:d3:12:52:98:e0:
                    b4:59:c3:00:bb:3a:bc:e8:46:32:d2:f1:6c:d8:4e:
                    69:f6:f9:53:ee:bf:49:13:fe:eb:86:7f:87:79:d3:
                    17:d8:00:b6:51:b6:28:65:1e:00:e1:a6:da:0a:db:
                    9e:35:ab:fd:43:02:0b:63:0c:72:34:da:9e:34:ee:
                    09:7a:54:5b:fd:73:ee:88:d7:13:33:75:90:5c:2f:
                    18:af:32:88:de:b1:68:b4:5b:af:64:5d:ae:5b:f6:
                    09:0c:45:b0:18:e5:b8:7c:f5:85:60:3e:eb:f5:47:
                    11:24:a5:f0:3c:26:d0:04:84:ee:c5:80:27:98:82:
                    d4:a2:c2:f4:11:ad:9c:a3:a5:65:f5:94:d0:53:0f:
                    7c:a5:03:9c:13:08:8a:4b:2a:48:af:9e:f1:df:77:
                    95:28:aa:81:3a:e1:b6:51:5a:f4:8f:af:ce:1b:76:
                    b0:7d:b0:7b:ed:60:b2:1f:77:33:3e:6c:5f:99:ff:
                    29:cf:0f:ee:7c:3f:ce:a8:4a:ee:72:88:f1:9c:1a:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:33:50:41:A7:D5:4F:64:A0:84:58:AE:BF:9E:36:66:6E:0D:93:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa510730-c7ba-3eac-b51e-cd3e8538c70f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3016:1a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:9f:0d:10:34:8a:13:6e:96:7e:94:53:7c:9f:bc:ba:0e:6d:
         01:73:f1:8b:0c:76:03:3d:4c:2e:23:27:46:37:82:bf:68:df:
         dc:e7:39:cb:ed:a0:69:9a:10:46:bd:db:f7:46:8d:d0:b6:b5:
         a4:26:85:68:e7:fe:d0:a0:62:e7:06:4e:d7:82:f3:93:4b:b9:
         0c:da:97:e7:dc:90:0b:f9:3b:6d:ac:ef:93:5e:69:a6:bb:c9:
         2d:2f:4a:09:64:ca:1d:89:0a:6e:c1:e0:ff:e8:7e:70:7d:50:
         fb:45:13:8c:61:22:e7:08:a1:63:8a:ae:38:16:71:c0:6f:83:
         aa:2b:41:68:69:02:4a:4a:61:bd:86:c0:8e:63:1c:38:67:0b:
         c7:ed:26:c1:a2:c5:c8:a0:75:d2:5a:97:e4:0f:a4:42:79:58:
         6e:ee:c9:a7:28:3f:64:c4:48:44:d3:bc:79:48:8b:77:31:ac:
         14:26:d2:13:e1:59:fa:20:e1:5c:39:4d:9a:35:58:b0:2d:c8:
         6f:73:ed:42:03:02:88:1b:45:86:85:b5:ee:02:4d:d4:4a:08:
         26:2a:32:0e:8e:03:31:a2:f9:fc:72:3e:7c:b2:c3:ae:e3:2d:
         3f:32:c8:a4:27:50:14:7f:12:f8:b8:97:e6:4d:23:42:30:80:
         cd:23:2f:2c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEUfrAz8+T70LmolPQUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
Y2NhMTA2ZjAtNjg1YS00YTUyLTkyYWUtMGE4OWM0NThkODM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2ozyosv68cosoOywW/eiUTclyS/JR0Oti4G
HbzWiGD63t5mRaqu9aEhJ/ZcF62Lr944e5uE0xJSmOC0WcMAuzq86EYy0vFs2E5p
9vlT7r9JE/7rhn+HedMX2AC2UbYoZR4A4abaCtueNav9QwILYwxyNNqeNO4JelRb
/XPuiNcTM3WQXC8YrzKI3rFotFuvZF2uW/YJDEWwGOW4fPWFYD7r9UcRJKXwPCbQ
BITuxYAnmILUosL0Ea2co6Vl9ZTQUw98pQOcEwiKSypIr57x33eVKKqBOuG2UVr0
j6/OG3awfbB77WCyH3czPmxfmf8pzw/ufD/OqErucojxnBpmIwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFI8zUEGn1U9koIRYrr+eNmZuDZPYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmE1MTA3MzAtYzdiYS0z
ZWFjLWI1MWUtY2QzZTg1MzhjNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwFhow
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAnZ8NEDSKE26WfpRTfJ+8ug5tAXPxiwx2Az1MLiMnRjeCv2jf3Oc5
y+2gaZoQRr3b90aN0La1pCaFaOf+0KBi5wZO14Lzk0u5DNqX59yQC/k7bazvk15p
prvJLS9KCWTKHYkKbsHg/+h+cH1Q+0UTjGEi5wihY4quOBZxwG+DqitBaGkCSkph
vYbAjmMcOGcLx+0mwaLFyKB10lqX5A+kQnlYbu7Jpyg/ZMRIRNO8eUiLdzGsFCbS
E+FZ+iDhXDlNmjVYsC3Ib3PtQgMCiBtFhoW17gJN1EoIJioyDo4DMaL5/HI+fLLD
ruMtPzLIpCdQFH8S+LiX5k0jQjCAzSMvLA==
-----END CERTIFICATE-----
Generated at Sat May 4 15:00:17 2024 by rpki-client on console-ams.rpki-client.org