Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/6463243b-579f-3c18-97cf-37709202e4b6.roa
File:                     6463243b-579f-3c18-97cf-37709202e4b6.roa (raw, json)
Hash identifier:          zxyghN2cl/SZv58W+bZyQyD2BA4z9bpNK86fzouKVMU=
Subject key identifier:   00:48:5C:6B:46:44:D8:C2:4F:30:BD:85:51:3B:57:94:3D:2E:FC:2A
Certificate issuer:       /CN=e085fa70-312c-4786-b587-bdb5fc87c36e
Certificate serial:       010D0C9F43285844957A1E10D88C65E4B8535B80
Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/6463243b-579f-3c18-97cf-37709202e4b6.roa
Signing time:             Wed 17 Jan 2024 14:00:31 +0000
ROA not before:           Wed 17 Jan 2024 14:00:31 +0000
ROA not after:            Tue 16 Apr 2024 13:00:31 +0000
asID:                     32098
IP address blocks:        2604:d600::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:95:7a:1e:10:d8:8c:65:e4:b8:53:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e
        Validity
            Not Before: Jan 17 14:00:31 2024 GMT
            Not After : Apr 16 13:00:31 2024 GMT
        Subject: CN=2f83b786-277b-410f-9280-811ab014b511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:e4:03:16:1c:d9:2e:a8:c3:27:ea:f9:74:
                    db:8e:02:6d:77:7d:61:3b:68:45:d8:03:2c:a3:7f:
                    f7:1c:dc:5e:0f:72:2e:c1:f3:97:28:ec:d0:08:43:
                    92:16:d2:b7:b7:d7:4f:6d:dc:8a:26:1e:8e:45:e6:
                    ae:67:45:03:c0:f7:7f:01:0e:fd:58:59:7e:cc:94:
                    90:2d:b3:7c:b5:e8:80:97:d5:79:ba:a1:c8:bc:ae:
                    17:8f:18:88:8b:b7:2e:8b:d5:34:14:37:5e:a6:c5:
                    6e:fe:6a:c1:58:7b:2a:51:6f:02:b2:2f:39:89:a2:
                    80:05:43:04:63:0e:e9:d6:1f:26:ed:7d:6c:17:80:
                    4e:1f:66:a2:3a:ea:f3:1b:a3:23:fc:63:43:a4:59:
                    e0:57:43:56:d4:63:d4:28:39:fd:33:1c:ef:c1:d3:
                    50:0d:d3:26:0b:fe:2d:54:db:50:11:3b:71:50:03:
                    7d:3e:51:a7:35:35:6d:08:72:f5:86:11:7f:b2:22:
                    2d:f7:61:b0:fc:83:b4:31:6c:5e:22:5b:e1:42:85:
                    3e:24:ae:56:78:e6:6d:cf:93:b7:4b:f5:c0:a3:67:
                    03:91:59:e7:b2:7d:89:43:10:e7:d0:9e:b4:2e:44:
                    50:ed:41:f5:07:4a:25:c4:67:f9:45:bf:95:03:55:
                    dd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:48:5C:6B:46:44:D8:C2:4F:30:BD:85:51:3B:57:94:3D:2E:FC:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/6463243b-579f-3c18-97cf-37709202e4b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl

            X509v3 Authority Key Identifier:
                keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:09:76:28:8d:24:a1:7f:71:45:ca:3a:1e:b7:04:de:04:cf:
         df:56:d0:6d:d8:bb:3a:c3:84:73:e9:f2:69:28:f7:6f:59:88:
         82:87:83:bd:cb:57:a9:48:a9:b8:ff:66:4a:2c:37:b4:df:28:
         b1:46:0f:b0:37:a8:8a:f3:63:80:ca:b2:16:f9:cb:c2:6d:97:
         cf:6a:ae:59:2f:2f:22:96:77:49:c6:6c:53:4e:a2:40:68:d2:
         fe:0c:d9:ee:d8:91:9e:5b:ee:bf:84:39:0f:ac:60:a5:b4:f5:
         e0:b0:39:5e:0b:54:02:e7:05:c4:0e:ce:5c:69:59:04:30:93:
         b0:2f:88:5c:10:75:13:40:1c:c5:11:97:44:bf:8b:b6:0e:8e:
         74:a2:2e:16:8f:ec:ae:20:ee:f4:95:22:26:8c:0d:d4:db:54:
         b5:ff:a6:fc:0b:9d:35:00:57:1a:8a:21:ec:be:17:04:93:d0:
         f7:50:40:5f:ab:03:3c:67:c6:b1:e2:ad:35:0c:32:42:7f:de:
         72:1f:35:43:f8:36:68:e5:f3:d3:d2:40:44:9b:dd:19:c9:c2:
         82:0e:c0:ae:a8:4a:00:52:15:3c:08:9c:7a:1b:75:3f:14:a8:
         f7:46:99:1e:1c:ae:e7:d9:69:ce:a9:86:e6:63:f1:11:31:ef:
         a5:d9:61:7f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWESVeh4Q2Ixl5LhTW4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTA4NWZhNzAtMzEyYy00Nzg2LWI1ODctYmRiNWZjODdj
MzZlMB4XDTI0MDExNzE0MDAzMVoXDTI0MDQxNjEzMDAzMVowLzEtMCsGA1UEAxMk
MmY4M2I3ODYtMjc3Yi00MTBmLTkyODAtODExYWIwMTRiNTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwbkAxYc2S6owyfq+XTbjgJtd31hO2hF2AMs
o3/3HNxeD3IuwfOXKOzQCEOSFtK3t9dPbdyKJh6OReauZ0UDwPd/AQ79WFl+zJSQ
LbN8teiAl9V5uqHIvK4XjxiIi7cui9U0FDdepsVu/mrBWHsqUW8Csi85iaKABUME
Yw7p1h8m7X1sF4BOH2aiOurzG6Mj/GNDpFngV0NW1GPUKDn9MxzvwdNQDdMmC/4t
VNtQETtxUAN9PlGnNTVtCHL1hhF/siIt92Gw/IO0MWxeIlvhQoU+JK5WeOZtz5O3
S/XAo2cDkVnnsn2JQxDn0J60LkRQ7UH1B0olxGf5Rb+VA1Xd3QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFABIXGtGRNjCTzC9hVE7V5Q9LvwqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDg1
ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1ZmM4N2MzNmUvNjQ2MzI0M2ItNTc5Zi0z
YzE4LTk3Y2YtMzc3MDkyMDJlNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTA4NWZhNzAtMzEyYy00Nzg2LWI1
ODctYmRiNWZjODdjMzZlL2UwODVmYTcwLTMxMmMtNDc4Ni1iNTg3LWJkYjVmYzg3
YzM2ZS5jcmwwHwYDVR0jBBgwFoAU+wFZJiVq4yf4fvzRnFfiezQbWG4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDg1ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1
ZmM4N2MzNmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTWADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDGCXYojSShf3FFyjoetwTeBM/fVtBt2Ls6w4Rz6fJpKPdvWYiCh4O9
y1epSKm4/2ZKLDe03yixRg+wN6iK82OAyrIW+cvCbZfPaq5ZLy8ilndJxmxTTqJA
aNL+DNnu2JGeW+6/hDkPrGCltPXgsDleC1QC5wXEDs5caVkEMJOwL4hcEHUTQBzF
EZdEv4u2Do50oi4Wj+yuIO70lSImjA3U21S1/6b8C501AFcaiiHsvhcEk9D3UEBf
qwM8Z8ax4q01DDJCf95yHzVD+DZo5fPT0kBEm90ZycKCDsCuqEoAUhU8CJx6G3U/
FKj3RpkeHK7n2WnOqYbmY/ERMe+l2WF/
-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:48 2024 by rpki-client on console-fra.rpki-client.org