Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa
File:                     c1be6e65-98e4-3db0-9c6b-e982162e2022.roa (raw, json)
Hash identifier:          eLclY1Ej5pOwrItdQLHWXwLoBwKSH/6xlC3lOGOtm78=
Subject key identifier:   20:42:C0:D2:7E:27:CD:AF:A2:4C:15:66:8D:CC:67:D7:8B:3E:3E:50
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285845612867F62E296293C19E0DE8
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     42
IP address blocks:        2001:500:15::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:67:f6:2e:29:62:93:c1:9e:0d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=dbf2e7cb-c973-4604-a7d9-78443d36efea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:77:ac:cf:3d:86:8a:0e:82:fb:f2:98:82:d0:
                    8f:64:61:d3:b3:bb:2c:09:cd:d8:ad:10:c3:42:bb:
                    5e:99:b9:c4:76:ed:cc:fa:6b:3a:94:8a:23:7f:c0:
                    b4:17:2c:64:f9:71:81:eb:b3:6d:a9:60:d6:ec:b0:
                    a9:c2:86:3a:9b:a6:a1:f6:8b:4d:22:3a:48:8c:e1:
                    85:aa:2b:dd:3f:b6:82:1c:3b:6e:d9:55:6d:40:67:
                    25:58:92:f2:9d:ac:f5:f4:4e:7d:3d:46:1b:12:4f:
                    44:2f:69:cb:2f:6e:4b:3f:69:89:e4:4f:ae:8f:2c:
                    28:46:7e:ac:25:9b:6e:b8:7d:00:46:57:40:af:35:
                    60:55:b0:07:9c:16:cf:a2:a8:ba:33:08:5a:d0:60:
                    68:ac:81:e3:55:a2:24:13:f8:cf:f0:80:79:ab:05:
                    c7:32:22:c0:3d:b2:a5:a0:3d:79:1a:ae:fd:05:82:
                    86:15:91:55:08:77:04:65:63:f0:10:9d:fd:13:5f:
                    35:8e:17:66:35:30:43:59:a2:ef:c3:a9:2d:90:e1:
                    d1:27:50:72:5c:8c:2b:a0:13:2d:15:38:f1:0c:bd:
                    ee:e8:d9:4b:d5:0d:1a:92:bc:3f:88:48:cf:98:a9:
                    0e:44:20:34:c6:10:75:57:52:50:73:68:8b:c2:b3:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:42:C0:D2:7E:27:CD:AF:A2:4C:15:66:8D:CC:67:D7:8B:3E:3E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:15::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:07:52:5c:7d:86:d8:12:e8:c0:2f:f4:44:18:d1:17:82:7b:
         c6:a6:ee:8f:39:d3:5e:a4:00:d4:ba:3e:2c:b7:17:00:44:85:
         a7:e8:df:25:bb:12:cf:d7:70:c5:3c:14:fb:73:06:30:de:d2:
         ed:12:69:53:ee:bd:e3:e4:f9:77:6a:af:ae:df:f7:98:9f:86:
         48:cb:3b:b5:80:58:30:bb:dd:d2:18:6d:c4:93:b9:b2:ad:cf:
         61:c0:08:2a:99:8c:d1:77:38:30:ef:6e:8c:d3:d9:ee:53:ea:
         bb:f6:53:a4:bb:96:64:5f:ce:9c:be:e7:96:22:be:d8:e0:83:
         9b:5e:97:bf:27:5c:4b:f7:df:43:cf:ae:c4:1e:fb:c4:d9:0e:
         92:a5:71:00:5f:2d:44:59:b7:62:37:91:66:74:8b:e3:a7:0a:
         d0:50:4f:d2:cc:6e:bc:6b:af:88:38:37:e0:7b:32:ab:01:02:
         70:48:b0:98:3c:19:00:73:01:60:7b:26:2e:89:30:d2:c8:30:
         a3:ff:49:f3:6e:19:76:1c:ac:09:93:ba:f3:99:1a:74:f2:92:
         68:fe:42:a4:da:b1:44:fb:59:11:39:0e:df:fa:4a:e2:21:67:
         19:3d:33:21:82:3b:ca:fc:60:9b:ea:78:18:10:0f:29:9d:50:
         5d:41:4a:66
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVhKGf2Lilik8GeDegwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk
ZGJmMmU3Y2ItYzk3My00NjA0LWE3ZDktNzg0NDNkMzZlZmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAineszz2Gig6C+/KYgtCPZGHTs7ssCc3YrRDD
QrtembnEdu3M+ms6lIojf8C0Fyxk+XGB67NtqWDW7LCpwoY6m6ah9otNIjpIjOGF
qivdP7aCHDtu2VVtQGclWJLynaz19E59PUYbEk9EL2nLL25LP2mJ5E+ujywoRn6s
JZtuuH0ARldArzVgVbAHnBbPoqi6Mwha0GBorIHjVaIkE/jP8IB5qwXHMiLAPbKl
oD15Gq79BYKGFZFVCHcEZWPwEJ39E181jhdmNTBDWaLvw6ktkOHRJ1ByXIwroBMt
FTjxDL3u6NlL1Q0akrw/iEjPmKkORCA0xhB1V1JQc2iLwrNF+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCBCwNJ+J82vokwVZo3MZ9eLPj5QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYzFiZTZlNjUtOThlNC0z
ZGIwLTljNmItZTk4MjE2MmUyMDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAV
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJUHUlx9htgS6MAv9EQY0ReCe8am7o85016kANS6Piy3FwBEhafo
3yW7Es/XcMU8FPtzBjDe0u0SaVPuvePk+Xdqr67f95ifhkjLO7WAWDC73dIYbcST
ubKtz2HACCqZjNF3ODDvbozT2e5T6rv2U6S7lmRfzpy+55Yivtjgg5tel78nXEv3
30PPrsQe+8TZDpKlcQBfLURZt2I3kWZ0i+OnCtBQT9LMbrxrr4g4N+B7MqsBAnBI
sJg8GQBzAWB7Ji6JMNLIMKP/SfNuGXYcrAmTuvOZGnTykmj+QqTasUT7WRE5Dt/6
SuIhZxk9MyGCO8r8YJvqeBgQDymdUF1BSmY=
-----END CERTIFICATE-----
Generated at Fri May 10 03:02:16 2024 by rpki-client on console-ams.rpki-client.org