Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d3660bdc-e74e-3ee0-9473-1af5c969d839.roa
File:                     d3660bdc-e74e-3ee0-9473-1af5c969d839.roa (raw, json)
Hash identifier:          DLHelUBWCsaegeshYUbaw4PTBEwlQEtJc05dniJPGgw=
Subject key identifier:   48:77:7A:BC:3B:FC:88:4C:09:B5:BD:60:01:26:AE:9B:02:19:45:78
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB69166B760C7B9778D53E0
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d3660bdc-e74e-3ee0-9473-1af5c969d839.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        2606:a100:b000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:91:66:b7:60:c7:b9:77:8d:53:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=d866eeaf-436e-4d8e-a436-44fe9b2ccd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:47:a2:45:ac:4b:57:3b:15:85:43:fd:fa:1f:
                    dd:98:11:ea:99:33:d9:e4:f4:5e:e3:33:de:19:a1:
                    8f:74:37:5b:e7:45:13:d0:d3:f6:9e:45:68:0f:7e:
                    85:ca:34:66:48:4f:a8:64:13:ab:5e:54:89:12:91:
                    86:97:88:26:4f:6a:20:8a:65:89:c7:81:de:a4:1f:
                    d0:8d:74:fc:ca:2a:8f:e4:3d:31:b4:f7:c5:fe:0d:
                    1c:ad:69:da:b2:45:3a:2f:d3:bb:e4:7e:65:b2:93:
                    2b:c4:35:6a:31:cd:f1:ff:0e:35:07:37:fa:a9:49:
                    b7:a6:15:9f:81:d2:76:fe:ba:8c:84:62:7a:88:cd:
                    5a:1c:de:b5:7a:b1:1b:8e:dd:13:f6:a1:87:79:59:
                    7f:ac:47:51:db:df:04:97:6b:83:07:11:c2:a2:05:
                    e0:82:15:17:c2:ed:95:f4:bf:d7:6e:1a:6b:35:53:
                    14:8c:aa:bb:f6:44:60:58:be:45:ef:69:0d:2a:80:
                    b4:d0:f9:b5:c7:96:71:af:34:dc:5f:81:c5:e5:08:
                    12:23:0d:1f:85:5c:2e:1e:1f:09:07:da:82:51:61:
                    e3:7d:6a:75:c0:4c:73:ab:86:c9:57:ac:7c:6d:36:
                    08:94:7d:63:91:7f:c0:d5:8c:fd:37:0a:74:44:2c:
                    d4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:77:7A:BC:3B:FC:88:4C:09:B5:BD:60:01:26:AE:9B:02:19:45:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d3660bdc-e74e-3ee0-9473-1af5c969d839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:b000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b8:c1:4a:af:79:ac:56:03:35:ac:0b:c1:e6:d7:ff:54:cb:
         a6:56:38:93:e9:ae:f9:6f:4b:25:a6:1e:27:33:e3:88:82:b3:
         e5:db:2a:46:0d:c0:50:fd:7d:0f:71:e1:33:9b:91:87:14:8e:
         7f:e0:67:de:c0:59:9a:2c:ec:23:ea:09:86:92:85:ea:40:83:
         c1:23:a9:47:ef:f8:43:6d:0a:45:4a:54:63:31:b2:98:63:4e:
         3e:2a:b0:ec:26:21:c2:ab:24:f7:53:2f:1a:69:73:ce:b6:75:
         1e:95:16:1e:bc:42:e0:93:98:c6:9f:ab:3b:05:e3:de:d4:ef:
         66:2f:81:9f:f8:3c:ab:3e:a7:23:b6:3a:c6:91:b5:9a:28:06:
         41:63:0c:bb:a0:48:1b:79:c2:5a:f2:06:dd:ba:77:2b:28:63:
         a8:cf:59:d9:20:a9:56:9e:ba:44:02:0b:1a:fa:55:39:51:95:
         1b:77:33:e9:22:84:fd:34:ea:09:a8:0c:5c:07:1b:b0:54:8c:
         36:aa:48:88:7e:95:9e:bd:b6:99:50:a7:3d:b7:65:7b:70:a6:
         85:c0:8e:e6:ee:c6:80:14:7d:1e:2f:93:0f:e0:f4:b2:2b:e4:
         86:af:96:f6:48:a4:55:1f:ed:19:e9:09:df:a9:38:8c:48:94:
         e6:58:88:17
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEeMtpFmt2DHuXeNU+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk
ZDg2NmVlYWYtNDM2ZS00ZDhlLWE0MzYtNDRmZTliMmNjZDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUeiRaxLVzsVhUP9+h/dmBHqmTPZ5PRe4zPe
GaGPdDdb50UT0NP2nkVoD36FyjRmSE+oZBOrXlSJEpGGl4gmT2ogimWJx4HepB/Q
jXT8yiqP5D0xtPfF/g0crWnaskU6L9O75H5lspMrxDVqMc3x/w41Bzf6qUm3phWf
gdJ2/rqMhGJ6iM1aHN61erEbjt0T9qGHeVl/rEdR298El2uDBxHCogXgghUXwu2V
9L/XbhprNVMUjKq79kRgWL5F72kNKoC00Pm1x5ZxrzTcX4HF5QgSIw0fhVwuHh8J
B9qCUWHjfWp1wExzq4bJV6x8bTYIlH1jkX/A1Yz9Nwp0RCzULwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEh3erw7/IhMCbW9YAEmrpsCGUV4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvZDM2NjBiZGMtZTc0ZS0z
ZWUwLTk0NzMtMWFmNWM5NjlkODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgahALAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAmbjBSq95rFYDNawLwebX/1TLplY4k+mu+W9LJaYeJzPjiIKz5dsq
Rg3AUP19D3HhM5uRhxSOf+Bn3sBZmizsI+oJhpKF6kCDwSOpR+/4Q20KRUpUYzGy
mGNOPiqw7CYhwqsk91MvGmlzzrZ1HpUWHrxC4JOYxp+rOwXj3tTvZi+Bn/g8qz6n
I7Y6xpG1migGQWMMu6BIG3nCWvIG3bp3KyhjqM9Z2SCpVp66RAILGvpVOVGVG3cz
6SKE/TTqCagMXAcbsFSMNqpIiH6Vnr22mVCnPbdle3CmhcCO5u7GgBR9Hi+TD+D0
sivkhq+W9kikVR/tGekJ36k4jEiU5liIFw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:24 2024 by rpki-client on console-fra.rpki-client.org