Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/c83d963c-2ced-33fe-8730-392675d7ca11.roa
File:                     c83d963c-2ced-33fe-8730-392675d7ca11.roa (raw, json)
Hash identifier:          JmTHipwxG6FOnwxSR+DqNCLg/VzpcDNVPm5ZrQ+zty0=
Subject key identifier:   58:0E:8A:1F:61:1A:5B:71:A9:4E:27:27:6C:71:E9:81:93:3B:C2:9C
Certificate issuer:       /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial:       010D0C9F43285847BEF6D5B7414C3A84CE70C400
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/c83d963c-2ced-33fe-8730-392675d7ca11.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     5050
IP address blocks:        2001:5e8:0:1002::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:d5:b7:41:4c:3a:84:ce:70:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=dddc53d3-583b-423a-9d25-7cae5270a117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:c3:3e:a3:26:36:1d:c7:40:bd:63:9a:9b:
                    90:7d:3b:93:2b:41:14:14:18:52:fa:ba:2b:66:b4:
                    3c:c1:62:aa:a4:b5:64:85:ac:ab:a6:27:09:cb:4c:
                    48:c0:f7:1f:6e:d5:9e:77:a8:33:94:38:b5:a6:af:
                    c1:c1:2d:78:42:15:4f:3c:59:f1:20:fb:28:64:01:
                    6e:4e:fe:9b:1b:95:62:24:8e:fb:59:10:0b:99:d9:
                    e0:7a:2d:95:ab:a5:10:29:ab:ea:0b:89:7a:d6:17:
                    19:14:e9:20:fe:c7:fe:91:83:79:02:a4:19:7c:36:
                    1d:0b:34:1c:4d:41:62:a3:e4:c1:ea:8d:db:d3:0d:
                    7a:df:e6:7f:41:be:60:f4:5a:55:e8:0b:c1:ca:00:
                    71:63:14:bf:82:76:43:78:8e:20:0b:10:7f:9a:1e:
                    68:a2:17:0d:f1:3b:f6:90:64:c0:27:76:77:13:93:
                    af:c9:95:7b:0c:c6:5e:08:f3:83:74:c3:6f:c4:34:
                    4c:79:b3:b4:ad:cd:55:32:26:d3:e8:9f:ba:6d:98:
                    82:69:64:41:87:30:55:6e:5b:07:bf:16:a4:06:d6:
                    73:fe:e3:48:99:43:ac:b4:b3:1a:94:7d:cf:20:5a:
                    c6:b8:b4:e0:dc:78:62:e9:71:4c:91:0e:eb:09:46:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0E:8A:1F:61:1A:5B:71:A9:4E:27:27:6C:71:E9:81:93:3B:C2:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/c83d963c-2ced-33fe-8730-392675d7ca11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5e8:0:1002::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:30:43:03:67:b0:28:fe:69:9e:3a:2e:c5:00:1f:a8:de:dc:
         2d:67:3b:36:e0:ee:e1:9a:75:8d:10:73:eb:ce:61:b8:34:76:
         9a:bb:e7:2f:0c:15:c4:75:cc:1e:da:3f:b6:b4:97:54:db:d6:
         df:e9:23:e4:ac:65:bb:d5:68:93:47:c1:89:32:04:a3:25:cb:
         95:5c:5d:1c:af:1c:6f:ee:fa:b6:aa:ed:6f:c4:79:84:18:ca:
         5e:ef:71:3f:ef:f3:06:f8:46:65:51:3d:13:14:46:78:b7:00:
         cc:64:39:5d:c3:ea:57:bf:61:b0:d7:d4:cc:0b:f8:79:79:c2:
         d5:b4:bf:0c:29:06:69:84:58:7d:73:0b:4d:79:cb:97:88:5c:
         e0:26:a0:09:d3:ab:d0:6c:3f:fa:c9:b9:12:b4:aa:54:07:80:
         54:bd:e2:5c:40:b8:ad:2d:98:46:3f:28:af:0b:f9:e5:6c:2b:
         79:45:83:bb:66:2a:e7:75:1c:99:b0:3c:7f:3e:8b:85:ee:92:
         0d:96:18:66:31:bf:4a:ed:1c:79:c5:64:8b:6e:7f:7b:ae:fd:
         3f:34:d7:a3:fc:ae:f9:00:77:a4:65:ee:9e:54:5a:56:d6:a9:
         09:06:32:07:57:fc:bf:4d:5d:7d:7a:94:38:1a:4f:29:a2:ab:
         9c:e6:12:e2
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEe+9tW3QUw6hM5wxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmMzZDhjZjAtZThjNS00YmZlLWE4YTctMjhlYTYxOGJj
YWY1MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZGRkYzUzZDMtNTgzYi00MjNhLTlkMjUtN2NhZTUyNzBhMTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyzDPqMmNh3HQL1jmpuQfTuTK0EUFBhS+ror
ZrQ8wWKqpLVkhayrpicJy0xIwPcfbtWed6gzlDi1pq/BwS14QhVPPFnxIPsoZAFu
Tv6bG5ViJI77WRALmdngei2Vq6UQKavqC4l61hcZFOkg/sf+kYN5AqQZfDYdCzQc
TUFio+TB6o3b0w163+Z/Qb5g9FpV6AvBygBxYxS/gnZDeI4gCxB/mh5oohcN8Tv2
kGTAJ3Z3E5OvyZV7DMZeCPODdMNvxDRMebO0rc1VMibT6J+6bZiCaWRBhzBVblsH
vxakBtZz/uNImUOstLMalH3PIFrGuLTg3Hhi6XFMkQ7rCUaFzwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFFgOih9hGltxqU4nJ2xx6YGTO8KcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNk
OGNmMC1lOGM1LTRiZmUtYThhNy0yOGVhNjE4YmNhZjUvYzgzZDk2M2MtMmNlZC0z
M2ZlLTg3MzAtMzkyNjc1ZDdjYTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmMzZDhjZjAtZThjNS00YmZlLWE4
YTctMjhlYTYxOGJjYWY1L2JjM2Q4Y2YwLWU4YzUtNGJmZS1hOGE3LTI4ZWE2MThi
Y2FmNS5jcmwwHwYDVR0jBBgwFoAUla16vo9wLw2EVMgJKfVXK3GdClcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNkOGNmMC1lOGM1LTRiZmUtYThhNy0yOGVh
NjE4YmNhZjUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEF6AAA
EAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAdTBDA2ewKP5pnjouxQAfqN7cLWc7NuDu4Zp1jRBz685huDR2
mrvnLwwVxHXMHto/trSXVNvW3+kj5Kxlu9Vok0fBiTIEoyXLlVxdHK8cb+76tqrt
b8R5hBjKXu9xP+/zBvhGZVE9ExRGeLcAzGQ5XcPqV79hsNfUzAv4eXnC1bS/DCkG
aYRYfXMLTXnLl4hc4CagCdOr0Gw/+sm5ErSqVAeAVL3iXEC4rS2YRj8orwv55Wwr
eUWDu2Yq53UcmbA8fz6Lhe6SDZYYZjG/Su0cecVki25/e679PzTXo/yu+QB3pGXu
nlRaVtapCQYyB1f8v01dfXqUOBpPKaKrnOYS4g==
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:41:38 2024 by rpki-client on console-fra.rpki-client.org