Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/803c99b8-f23c-355a-bcca-59b3fa52407e.roa
File:                     803c99b8-f23c-355a-bcca-59b3fa52407e.roa (raw, json)
Hash identifier:          QClFgQQjh05xlhpOM35j/c2/U2HKSrR6XIx0XtIeZRY=
Subject key identifier:   9E:2D:AA:69:04:12:CA:48:68:EE:F9:2F:7F:C2:D5:A2:DD:FF:76:C5
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F432858456F1DBE2F44B869D67EC16800
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/803c99b8-f23c-355a-bcca-59b3fa52407e.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     21928
IP address blocks:        2607:fb90::/28 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:be:2f:44:b8:69:d6:7e:c1:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=73b81e4d-bf7c-4f36-a493-609f66b5b80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:05:44:20:7a:ce:f2:a7:d8:18:4d:8b:28:d1:
                    6c:d4:70:23:52:14:7a:d0:77:4a:59:12:48:ca:b5:
                    c8:9b:63:c4:15:dc:90:96:99:65:af:b6:d3:df:f7:
                    14:7c:92:54:9a:a5:57:67:f8:c6:1f:ab:25:29:39:
                    f3:5f:35:41:72:8b:34:95:c4:ae:4a:8e:41:f6:7d:
                    1d:35:0c:c5:cd:66:5b:a1:52:77:0b:36:ee:db:1a:
                    d0:9b:ac:37:52:45:11:95:d6:35:d2:cc:e4:01:0f:
                    38:1a:c6:59:ca:c5:ff:b7:a0:c9:bc:9f:eb:8b:b6:
                    bc:24:c9:44:27:e7:35:cb:9e:aa:54:41:b4:f4:4f:
                    4a:c8:ea:0a:67:e3:4e:82:e9:c1:6c:16:43:67:e9:
                    3e:27:5d:49:68:26:49:ad:7a:cd:fd:83:0d:5d:16:
                    ef:47:1b:8e:34:90:7a:6c:50:db:70:b4:42:be:34:
                    47:69:22:96:28:06:14:f8:c9:dd:90:d1:f9:fa:a6:
                    38:47:40:29:ed:98:13:6d:43:13:07:94:06:1a:43:
                    0f:2f:16:92:88:34:3e:a5:71:e4:eb:e2:d9:69:7f:
                    27:72:54:f9:be:5c:d1:d1:c1:3f:24:39:c7:e1:00:
                    b7:e7:cb:a1:fc:f2:0c:91:10:f8:bb:08:52:f1:19:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2D:AA:69:04:12:CA:48:68:EE:F9:2F:7F:C2:D5:A2:DD:FF:76:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/803c99b8-f23c-355a-bcca-59b3fa52407e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb90::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e8:3e:0e:ca:22:cc:d9:32:a3:f3:44:fb:00:98:33:cb:17:04:
         72:2d:92:bd:25:f2:d1:69:d3:72:7c:c6:e5:b8:36:2e:cc:cd:
         6b:1d:72:f4:ad:cd:ba:bb:cc:05:a0:63:94:ab:d9:11:61:75:
         4e:fb:94:a1:07:4b:56:5c:f7:f1:53:08:ca:6c:9e:e2:19:bc:
         5b:06:d2:c4:49:ec:66:53:06:d8:48:c4:75:9b:4f:43:66:29:
         08:b9:fc:4b:a2:ca:08:c7:c9:46:ac:f8:25:35:44:f6:44:65:
         73:20:91:b6:52:77:05:e8:66:94:0b:ce:ef:2b:55:fd:62:dc:
         cc:23:14:7d:ce:79:5b:1f:ce:77:6e:65:2e:9f:32:ae:2a:bd:
         c2:41:7a:f5:7f:35:55:7c:5d:c7:f3:62:d9:de:bb:fd:c6:31:
         3f:d9:fb:8e:f9:05:0c:6d:cf:f9:e0:73:c7:9c:fc:e5:76:af:
         0c:ab:6e:a0:c7:e0:d6:13:7a:14:e1:36:7c:67:6d:9d:e4:d7:
         62:a0:06:31:92:11:35:79:29:13:81:c5:f7:0f:ee:65:ac:e9:
         55:67:26:58:4f:9b:8e:cd:b4:fc:7e:87:17:47:bc:cc:3e:73:
         19:df:5b:2b:f9:c7:ff:2c:bf:84:d9:da:66:65:b0:8c:53:21:
         ee:20:bb:a1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEVvHb4vRLhp1n7BaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm
MGMzMB4XDTI0MDQwNDEzMDAzNloXDTI0MDcwMzEzMDAzNlowLzEtMCsGA1UEAxMk
NzNiODFlNGQtYmY3Yy00ZjM2LWE0OTMtNjA5ZjY2YjViODBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAVEIHrO8qfYGE2LKNFs1HAjUhR60HdKWRJI
yrXIm2PEFdyQlpllr7bT3/cUfJJUmqVXZ/jGH6slKTnzXzVBcos0lcSuSo5B9n0d
NQzFzWZboVJ3Czbu2xrQm6w3UkURldY10szkAQ84GsZZysX/t6DJvJ/ri7a8JMlE
J+c1y56qVEG09E9KyOoKZ+NOgunBbBZDZ+k+J11JaCZJrXrN/YMNXRbvRxuONJB6
bFDbcLRCvjRHaSKWKAYU+MndkNH5+qY4R0Ap7ZgTbUMTB5QGGkMPLxaSiDQ+pXHk
6+LZaX8nclT5vlzR0cE/JDnH4QC358uh/PIMkRD4uwhS8Rn7hwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJ4tqmkEEspIaO75L3/C1aLd/3bFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm
MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvODAzYzk5YjgtZjIzYy0z
NTVhLWJjY2EtNTliM2ZhNTI0MDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk
OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl
ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi
ZjVjZWYwYzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgf7kDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDoPg7KIszZMqPzRPsAmDPLFwRyLZK9JfLRadNyfMbluDYuzM1rHXL0
rc26u8wFoGOUq9kRYXVO+5ShB0tWXPfxUwjKbJ7iGbxbBtLESexmUwbYSMR1m09D
ZikIufxLosoIx8lGrPglNUT2RGVzIJG2UncF6GaUC87vK1X9YtzMIxR9znlbH853
bmUunzKuKr3CQXr1fzVVfF3H82LZ3rv9xjE/2fuO+QUMbc/54HPHnPzldq8Mq26g
x+DWE3oU4TZ8Z22d5NdioAYxkhE1eSkTgcX3D+5lrOlVZyZYT5uOzbT8focXR7zM
PnMZ31sr+cf/LL+E2dpmZbCMUyHuILuh
-----END CERTIFICATE-----
Generated at Fri May 10 00:44:12 2024 by rpki-client on console-fra.rpki-client.org