Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa
File:                     2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa (raw, json)
Hash identifier:          VdYGa98Dq2j4lvE2nEH3qd82vPwTjkRrmGqHRLfqGw0=
Subject key identifier:   E6:49:00:AA:23:3C:35:5F:E6:B7:63:DC:30:4A:52:BD:F6:90:82:41
Certificate issuer:       /CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe
Certificate serial:       010D0C9F4328584545317D601045D3295C1EC380
Authority key identifier: 5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa
Signing time:             Wed 20 Mar 2024 12:36:34 +0000
ROA not before:           Wed 20 Mar 2024 12:36:34 +0000
ROA not after:            Tue 18 Jun 2024 12:36:34 +0000
asID:                     20206
IP address blocks:        2001:504:13a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:31:7d:60:10:45:d3:29:5c:1e:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe
        Validity
            Not Before: Mar 20 12:36:34 2024 GMT
            Not After : Jun 18 12:36:34 2024 GMT
        Subject: CN=d8a50182-2dc6-40da-8446-f48d39dec47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1d:32:a3:79:99:60:19:ea:63:9f:83:ba:7d:
                    52:71:8d:e3:b9:08:04:0d:7a:72:98:ab:4a:57:c3:
                    7c:c5:72:5c:7f:da:3f:5b:73:b8:23:11:0b:60:b5:
                    75:9d:89:9b:d5:26:42:8c:4e:e8:e5:ae:32:63:7c:
                    5f:5c:e3:cc:53:bf:8b:e0:09:b7:25:d0:91:bd:be:
                    a9:d5:45:84:34:7f:9b:99:be:f0:d4:a2:d2:08:f5:
                    96:6d:74:00:c3:bf:1d:2d:3d:fc:27:11:11:3c:64:
                    e5:74:f9:16:26:13:e8:55:52:eb:8d:af:d5:4e:7c:
                    90:da:c1:5e:0e:6d:53:fe:09:ec:15:5b:35:b1:ed:
                    d8:03:f5:e1:46:92:ba:fd:f0:9e:4d:30:5a:75:ae:
                    98:a5:23:08:dd:ab:98:fe:09:ed:05:dc:71:ef:ca:
                    f9:cc:38:23:73:f6:f5:2c:a4:5b:a4:36:e1:c6:e1:
                    3a:25:0e:55:56:39:d4:6d:2b:39:d3:a6:1d:0b:00:
                    9a:36:29:13:e2:1d:fd:11:d7:ac:0f:2b:83:9f:b6:
                    14:c6:f6:62:2b:ad:4d:f7:7d:09:76:83:72:37:53:
                    08:b7:13:5a:49:ab:7f:7d:b9:8f:de:ae:ee:83:99:
                    49:e3:d0:75:ec:1f:f9:11:fe:e3:73:a5:e2:3c:5f:
                    d5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:49:00:AA:23:3C:35:5F:E6:B7:63:DC:30:4A:52:BD:F6:90:82:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.crl

            X509v3 Authority Key Identifier:
                keyid:5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:13a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:03:3a:3f:ec:7e:2b:08:9a:82:fd:74:67:4d:fa:f7:f5:e9:
         7d:c3:01:27:7a:d0:68:f3:e2:c8:6a:1f:51:d3:ae:67:60:33:
         16:80:32:3d:c3:7d:c1:b0:c8:c5:3d:4c:da:3e:57:11:03:20:
         85:a4:5d:ad:65:f9:50:16:4b:6c:19:99:2c:8d:13:63:33:2a:
         74:2d:b8:9d:83:53:53:aa:57:6c:7a:ab:2a:35:c5:33:d9:ab:
         b0:ac:68:0c:87:b2:83:a3:fb:83:f7:be:3c:2f:2e:b8:d6:76:
         32:14:42:44:93:05:05:8a:33:5c:05:dd:fa:29:58:9f:46:d4:
         a6:db:de:36:3a:59:80:fe:11:a2:e1:bb:47:fb:e5:ad:27:17:
         cd:4d:ab:7f:dd:9d:97:bd:d0:40:78:c8:d4:e0:be:5f:8c:91:
         3f:3c:15:65:cd:a3:0b:77:fc:d3:df:9b:5f:56:fe:82:12:e2:
         f1:5a:dc:3d:d8:59:bc:3f:66:e6:1f:6c:2d:0e:45:ec:9d:5a:
         e2:08:b9:25:20:77:c0:a1:5d:02:4e:40:b0:a3:52:fc:45:5c:
         17:af:1a:a3:45:77:fd:17:52:1b:96:df:0b:23:7c:ff:3a:8f:
         ba:ad:85:42:e7:97:17:1d:9c:29:32:a0:cd:6b:8e:c1:51:10:
         6e:60:0b:9b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVFMX1gEEXTKVwew4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM5ZDJhZWYtMmRkOS00Mzg3LWI0N2MtOThiYjkxMGU1
MmZlMB4XDTI0MDMyMDEyMzYzNFoXDTI0MDYxODEyMzYzNFowLzEtMCsGA1UEAxMk
ZDhhNTAxODItMmRjNi00MGRhLTg0NDYtZjQ4ZDM5ZGVjNDdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB0yo3mZYBnqY5+Dun1ScY3juQgEDXpymKtK
V8N8xXJcf9o/W3O4IxELYLV1nYmb1SZCjE7o5a4yY3xfXOPMU7+L4Am3JdCRvb6p
1UWENH+bmb7w1KLSCPWWbXQAw78dLT38JxERPGTldPkWJhPoVVLrja/VTnyQ2sFe
Dm1T/gnsFVs1se3YA/XhRpK6/fCeTTBada6YpSMI3auY/gntBdxx78r5zDgjc/b1
LKRbpDbhxuE6JQ5VVjnUbSs506YdCwCaNikT4h39EdesDyuDn7YUxvZiK61N930J
doNyN1MItxNaSat/fbmP3q7ug5lJ49B17B/5Ef7jc6XiPF/VTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOZJAKojPDVf5rdj3DBKUr32kIJBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYzlk
MmFlZi0yZGQ5LTQzODctYjQ3Yy05OGJiOTEwZTUyZmUvMjI3OGVkNDgtZWJkNi0z
NTI4LWI5N2ItYTFiMmFlYTgwZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmM5ZDJhZWYtMmRkOS00Mzg3LWI0
N2MtOThiYjkxMGU1MmZlL2JjOWQyYWVmLTJkZDktNDM4Ny1iNDdjLTk4YmI5MTBl
NTJmZS5jcmwwHwYDVR0jBBgwFoAUXwy7Gy/tJSY7JZ7vyytJ4usJQNswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iYzlkMmFlZi0yZGQ5LTQzODctYjQ3Yy05OGJi
OTEwZTUyZmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAE6
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGkDOj/sfisImoL9dGdN+vf16X3DASd60Gjz4shqH1HTrmdgMxaA
Mj3DfcGwyMU9TNo+VxEDIIWkXa1l+VAWS2wZmSyNE2MzKnQtuJ2DU1OqV2x6qyo1
xTPZq7CsaAyHsoOj+4P3vjwvLrjWdjIUQkSTBQWKM1wF3fopWJ9G1Kbb3jY6WYD+
EaLhu0f75a0nF81Nq3/dnZe90EB4yNTgvl+MkT88FWXNowt3/NPfm19W/oIS4vFa
3D3YWbw/ZuYfbC0OReydWuIIuSUgd8ChXQJOQLCjUvxFXBevGqNFd/0XUhuW3wsj
fP86j7qthULnlxcdnCkyoM1rjsFREG5gC5s=
-----END CERTIFICATE-----
Generated at Thu May 23 09:36:22 2024 by rpki-client on console-fra.rpki-client.org