Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6072fe7b-2012-45a7-a53c-6b39bbebf99f/f078fb31-88c3-3e4f-90ca-5d871cd7f097.roa
File:                     f078fb31-88c3-3e4f-90ca-5d871cd7f097.roa (raw, json)
Hash identifier:          rlQt2NPXtlLAeMbXZ+a0BFjWWSDJ3okXYqb8XdGzOQw=
Subject key identifier:   65:B1:EF:7B:C2:56:A4:4D:FB:E0:97:82:CC:38:AF:F0:64:91:C6:15
Certificate issuer:       /CN=6072fe7b-2012-45a7-a53c-6b39bbebf99f
Certificate serial:       010D0C9F43285847994670EDD1FD61817D9070A0
Authority key identifier: 2A:FB:2E:EB:41:B2:89:E5:E6:B3:76:10:88:33:F7:DF:C7:2F:8B:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6072fe7b-2012-45a7-a53c-6b39bbebf99f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6072fe7b-2012-45a7-a53c-6b39bbebf99f/f078fb31-88c3-3e4f-90ca-5d871cd7f097.roa
Signing time:             Sun 20 Oct 2024 01:00:30 +0000
ROA not before:           Sun 20 Oct 2024 01:00:30 +0000
ROA not after:            Sat 18 Jan 2025 02:00:30 +0000
asID:                     19233
IP address blocks:        2604:50:3::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6072fe7b-2012-45a7-a53c-6b39bbebf99f/6072fe7b-2012-45a7-a53c-6b39bbebf99f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6072fe7b-2012-45a7-a53c-6b39bbebf99f/6072fe7b-2012-45a7-a53c-6b39bbebf99f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6072fe7b-2012-45a7-a53c-6b39bbebf99f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:99:46:70:ed:d1:fd:61:81:7d:90:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6072fe7b-2012-45a7-a53c-6b39bbebf99f
        Validity
            Not Before: Oct 20 01:00:30 2024 GMT
            Not After : Jan 18 02:00:30 2025 GMT
        Subject: CN=376c8ce7-06d3-4ba3-bb12-e5172935b9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:63:42:7d:b2:ba:17:2f:fc:c8:4d:8a:45:
                    4e:bc:f0:5a:f4:83:f0:3b:ea:19:ed:70:87:c7:58:
                    7e:9c:3d:dc:48:0f:d3:5a:26:94:cd:1b:94:af:7c:
                    d1:b6:70:55:fd:b6:f5:85:5f:31:70:cc:3d:0c:72:
                    71:00:d5:4e:3d:bf:f2:b3:94:4c:81:97:4a:35:63:
                    33:66:d6:8d:d7:b3:ec:f8:e4:c5:75:1f:f2:29:fa:
                    cb:3d:90:0d:7f:5d:8d:5a:de:0c:d7:51:db:23:3b:
                    7d:c4:07:09:63:9e:09:5e:4c:5f:cd:01:0c:b5:46:
                    3e:3e:1b:60:0b:1a:16:a2:ef:5a:4b:19:4e:c1:67:
                    1f:fa:73:5c:60:36:10:1a:da:d4:b2:94:31:76:28:
                    66:46:ae:99:e0:3b:9c:82:c8:e6:7c:c7:8a:78:10:
                    6a:d4:94:f4:9c:a2:47:ec:64:ed:7f:9a:29:47:f0:
                    63:d2:cf:f9:85:17:97:f3:10:c3:88:42:ed:f8:52:
                    46:c8:30:87:b2:e4:dd:fd:92:0a:37:dc:da:29:66:
                    6c:8e:1d:33:d1:68:cf:11:56:8d:fd:98:0b:8d:31:
                    4f:4c:f0:76:c0:90:c9:d7:cd:af:81:4e:36:88:95:
                    86:08:a1:92:86:b7:b5:0f:91:6a:b9:d5:f0:ae:3a:
                    64:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B1:EF:7B:C2:56:A4:4D:FB:E0:97:82:CC:38:AF:F0:64:91:C6:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6072fe7b-2012-45a7-a53c-6b39bbebf99f/f078fb31-88c3-3e4f-90ca-5d871cd7f097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6072fe7b-2012-45a7-a53c-6b39bbebf99f/6072fe7b-2012-45a7-a53c-6b39bbebf99f.crl

            X509v3 Authority Key Identifier:
                keyid:2A:FB:2E:EB:41:B2:89:E5:E6:B3:76:10:88:33:F7:DF:C7:2F:8B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6072fe7b-2012-45a7-a53c-6b39bbebf99f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:50:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:29:4b:4d:a9:83:38:a3:91:20:ef:73:6f:9b:3f:37:01:9b:
         74:21:73:a3:a9:ff:b4:88:76:4f:0e:85:21:c0:60:86:a4:09:
         e7:81:6f:07:7c:2a:63:8a:92:0f:8d:2d:ec:1b:7e:b8:af:f4:
         9b:5c:e5:2e:b9:b3:12:8f:9c:c9:4c:e3:f9:ac:2d:57:72:54:
         73:57:f7:cb:f8:48:fd:0d:15:08:da:d8:c4:e3:a6:b1:bf:2e:
         82:a1:cf:7c:37:1f:5f:a1:c1:07:94:ed:cb:11:0e:20:40:a3:
         59:de:5d:39:f9:2b:35:6f:59:e2:07:cb:e6:9b:54:16:d1:3a:
         9b:a2:65:6d:c4:10:20:eb:8b:ca:1d:06:15:df:90:98:42:b2:
         ad:81:d2:59:47:26:8e:bd:fc:5a:7f:30:94:c9:1c:a4:b7:36:
         0f:97:38:dd:b4:1c:20:15:c9:0c:9e:8e:37:ca:f4:71:a1:14:
         d5:f1:4c:3b:c0:4a:1b:98:69:65:1b:35:4c:79:ac:d7:ad:4f:
         ae:f0:37:6c:37:2a:cd:a0:31:64:86:e2:6a:48:dd:bb:e5:ad:
         41:90:a6:0d:0e:96:a2:0b:6a:59:95:27:f5:15:3e:18:63:e8:
         8c:71:96:5d:54:81:18:fb:bc:b6:fc:c1:90:2d:77:75:28:2a:
         8f:1c:00:54
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeZRnDt0f1hgX2QcKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjA3MmZlN2ItMjAxMi00NWE3LWE1M2MtNmIzOWJiZWJm
OTlmMB4XDTI0MTAyMDAxMDAzMFoXDTI1MDExODAyMDAzMFowLzEtMCsGA1UEAxMk
Mzc2YzhjZTctMDZkMy00YmEzLWJiMTItZTUxNzI5MzViOWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPtjQn2yuhcv/MhNikVOvPBa9IPwO+oZ7XCH
x1h+nD3cSA/TWiaUzRuUr3zRtnBV/bb1hV8xcMw9DHJxANVOPb/ys5RMgZdKNWMz
ZtaN17Ps+OTFdR/yKfrLPZANf12NWt4M11HbIzt9xAcJY54JXkxfzQEMtUY+Phtg
CxoWou9aSxlOwWcf+nNcYDYQGtrUspQxdihmRq6Z4DucgsjmfMeKeBBq1JT0nKJH
7GTtf5opR/Bj0s/5hReX8xDDiELt+FJGyDCHsuTd/ZIKN9zaKWZsjh0z0WjPEVaN
/ZgLjTFPTPB2wJDJ182vgU42iJWGCKGShre1D5FqudXwrjpkSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGWx73vCVqRN++CXgsw4r/BkkcYVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MDcy
ZmU3Yi0yMDEyLTQ1YTctYTUzYy02YjM5YmJlYmY5OWYvZjA3OGZiMzEtODhjMy0z
ZTRmLTkwY2EtNWQ4NzFjZDdmMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjA3MmZlN2ItMjAxMi00NWE3LWE1
M2MtNmIzOWJiZWJmOTlmLzYwNzJmZTdiLTIwMTItNDVhNy1hNTNjLTZiMzliYmVi
Zjk5Zi5jcmwwHwYDVR0jBBgwFoAUKvsu60GyieXms3YQiDP338cvi7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82MDcyZmU3Yi0yMDEyLTQ1YTctYTUzYy02YjM5
YmJlYmY5OWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQAUAAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL4pS02pgzijkSDvc2+bPzcBm3Qhc6Op/7SIdk8OhSHAYIakCeeB
bwd8KmOKkg+NLewbfriv9Jtc5S65sxKPnMlM4/msLVdyVHNX98v4SP0NFQja2MTj
prG/LoKhz3w3H1+hwQeU7csRDiBAo1neXTn5KzVvWeIHy+abVBbROpuiZW3EECDr
i8odBhXfkJhCsq2B0llHJo69/Fp/MJTJHKS3Ng+XON20HCAVyQyejjfK9HGhFNXx
TDvAShuYaWUbNUx5rNetT67wN2w3Ks2gMWSG4mpI3bvlrUGQpg0OlqILalmVJ/UV
Phhj6Ixxll1UgRj7vLb8wZAtd3UoKo8cAFQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:21 2024 by rpki-client on console-fra.rpki-client.org