Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/55092a55-d3ec-4d98-ac15-fef61c42fb26/57c2a77b-f379-3e62-abca-20a6d3b1419f.roa
File:                     57c2a77b-f379-3e62-abca-20a6d3b1419f.roa (raw, json)
Hash identifier:          W2eKc6jfbHSLHUvEmgKHoQ/2Ul6Nw/Oer9dQU0kKuTI=
Subject key identifier:   63:02:CF:61:95:42:60:66:AB:85:C0:5F:0E:BD:96:81:AC:A7:8E:07
Certificate issuer:       /CN=55092a55-d3ec-4d98-ac15-fef61c42fb26
Certificate serial:       010D0C9F4328584563F300C596C92510C90D5400
Authority key identifier: 96:21:83:31:1A:E7:2F:8A:7A:09:5F:C9:2C:99:AC:07:F3:F7:A4:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/55092a55-d3ec-4d98-ac15-fef61c42fb26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/55092a55-d3ec-4d98-ac15-fef61c42fb26/57c2a77b-f379-3e62-abca-20a6d3b1419f.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     5661
IP address blocks:        2607:fe50::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/55092a55-d3ec-4d98-ac15-fef61c42fb26/55092a55-d3ec-4d98-ac15-fef61c42fb26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/55092a55-d3ec-4d98-ac15-fef61c42fb26/55092a55-d3ec-4d98-ac15-fef61c42fb26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/55092a55-d3ec-4d98-ac15-fef61c42fb26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:00:c5:96:c9:25:10:c9:0d:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55092a55-d3ec-4d98-ac15-fef61c42fb26
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=acdf0e8a-d5f1-4a0a-87fd-ac28f32aaae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:2c:21:91:17:50:ae:6a:cb:e1:f4:df:ec:
                    eb:83:35:37:29:5e:3f:78:b0:95:88:91:7b:a4:a6:
                    ea:d2:7b:94:1f:63:ef:bb:98:4e:f3:6d:82:70:b6:
                    b2:01:30:ec:47:d8:0d:23:f7:ee:a4:12:dc:ab:f8:
                    b0:7b:d0:9e:3c:a4:1d:03:86:61:d0:e1:ec:ae:22:
                    6a:1b:3f:b1:d8:8d:3c:c9:fd:5a:1e:88:ad:4c:da:
                    3e:fe:e5:5e:a2:c0:48:22:64:fe:da:d1:06:ce:e2:
                    61:85:b1:de:fb:66:df:77:ea:d7:88:43:37:b5:e6:
                    94:46:30:c9:80:51:55:73:38:ea:db:92:17:32:f9:
                    a7:ca:91:72:7f:ec:43:18:cf:9b:96:86:2d:28:07:
                    6d:6f:40:44:32:dc:1e:a6:7f:1d:9b:99:01:75:5a:
                    e6:33:07:93:10:20:07:ff:8f:40:77:ff:a3:b4:ed:
                    98:8e:66:0e:24:95:18:97:d1:db:71:cd:3f:30:74:
                    97:a7:38:91:ea:88:97:13:36:51:16:df:1f:75:b7:
                    16:ea:ff:b8:fd:45:00:14:12:cb:d7:ee:ad:ba:89:
                    c6:dd:e4:02:99:70:b4:10:ee:3e:b3:f3:6a:22:e5:
                    6c:e1:86:8c:1f:9d:cf:63:92:9e:62:a9:fe:69:6c:
                    9b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:02:CF:61:95:42:60:66:AB:85:C0:5F:0E:BD:96:81:AC:A7:8E:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/55092a55-d3ec-4d98-ac15-fef61c42fb26/57c2a77b-f379-3e62-abca-20a6d3b1419f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/55092a55-d3ec-4d98-ac15-fef61c42fb26/55092a55-d3ec-4d98-ac15-fef61c42fb26.crl

            X509v3 Authority Key Identifier:
                keyid:96:21:83:31:1A:E7:2F:8A:7A:09:5F:C9:2C:99:AC:07:F3:F7:A4:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/55092a55-d3ec-4d98-ac15-fef61c42fb26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe50::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e0:bf:de:04:d3:cb:fe:f6:dd:b0:b1:43:99:ba:a4:d1:0b:
         62:21:c5:6c:2e:0d:d6:0c:27:dc:ea:62:41:89:1c:0f:32:09:
         3a:79:36:df:dc:16:75:d7:f7:f4:c8:47:3b:dc:be:8f:38:21:
         2a:0d:81:2b:16:eb:34:0c:d6:27:04:83:71:05:43:1d:6e:28:
         ed:9f:01:fd:24:40:b2:8a:a9:32:2e:2d:4d:8c:58:35:74:75:
         de:f7:31:f2:2f:92:c8:0a:f3:5a:5d:52:c2:f6:dd:97:7a:e3:
         cd:90:82:19:bf:f9:31:21:0e:f9:87:d7:3c:68:88:7a:32:9b:
         3e:fd:e2:af:fa:a0:9b:30:ed:5c:10:be:29:9c:c6:4a:36:fe:
         0b:39:6e:a9:27:7b:8d:95:ed:bc:ba:40:10:a7:58:78:7f:f2:
         c7:20:f1:99:2a:f0:50:ae:f2:ed:ab:f9:3b:03:e5:3d:be:54:
         07:fe:81:92:a6:18:3c:32:90:e4:97:cb:f3:fe:bb:18:aa:cc:
         33:09:77:54:c7:fa:da:27:1f:a6:6d:71:9b:fa:a4:a6:19:71:
         f5:ba:fe:6c:72:eb:ec:15:5d:36:df:2c:cf:f1:fe:27:32:ec:
         84:9e:c6:e2:71:ed:40:47:b3:bd:46:e3:ed:a4:4a:49:d6:d9:
         b5:66:4d:30
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEVj8wDFlsklEMkNVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUwOTJhNTUtZDNlYy00ZDk4LWFjMTUtZmVmNjFjNDJm
YjI2MB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk
YWNkZjBlOGEtZDVmMS00YTBhLTg3ZmQtYWMyOGYzMmFhYWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYAsIZEXUK5qy+H03+zrgzU3KV4/eLCViJF7
pKbq0nuUH2Pvu5hO822CcLayATDsR9gNI/fupBLcq/iwe9CePKQdA4Zh0OHsriJq
Gz+x2I08yf1aHoitTNo+/uVeosBIImT+2tEGzuJhhbHe+2bfd+rXiEM3teaURjDJ
gFFVczjq25IXMvmnypFyf+xDGM+bloYtKAdtb0BEMtwepn8dm5kBdVrmMweTECAH
/49Ad/+jtO2YjmYOJJUYl9Hbcc0/MHSXpziR6oiXEzZRFt8fdbcW6v+4/UUAFBLL
1+6tuonG3eQCmXC0EO4+s/NqIuVs4YaMH53PY5KeYqn+aWybxQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGMCz2GVQmBmq4XAXw69loGsp44HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NTA5
MmE1NS1kM2VjLTRkOTgtYWMxNS1mZWY2MWM0MmZiMjYvNTdjMmE3N2ItZjM3OS0z
ZTYyLWFiY2EtMjBhNmQzYjE0MTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTUwOTJhNTUtZDNlYy00ZDk4LWFj
MTUtZmVmNjFjNDJmYjI2LzU1MDkyYTU1LWQzZWMtNGQ5OC1hYzE1LWZlZjYxYzQy
ZmIyNi5jcmwwHwYDVR0jBBgwFoAUliGDMRrnL4p6CV/JLJmsB/P3pIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81NTA5MmE1NS1kM2VjLTRkOTgtYWMxNS1mZWY2
MWM0MmZiMjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf+UDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCh4L/eBNPL/vbdsLFDmbqk0QtiIcVsLg3WDCfc6mJBiRwPMgk6eTbf
3BZ11/f0yEc73L6POCEqDYErFus0DNYnBINxBUMdbijtnwH9JECyiqkyLi1NjFg1
dHXe9zHyL5LICvNaXVLC9t2XeuPNkIIZv/kxIQ75h9c8aIh6Mps+/eKv+qCbMO1c
EL4pnMZKNv4LOW6pJ3uNle28ukAQp1h4f/LHIPGZKvBQrvLtq/k7A+U9vlQH/oGS
phg8MpDkl8vz/rsYqswzCXdUx/raJx+mbXGb+qSmGXH1uv5scuvsFV023yzP8f4n
MuyEnsbice1AR7O9RuPtpEpJ1tm1Zk0w
-----END CERTIFICATE-----
Generated at Wed May 8 23:44:54 2024 by rpki-client on console-fra.rpki-client.org