Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6/d93f4832-7e16-36ea-94a5-871b6afb6211.roa
File:                     d93f4832-7e16-36ea-94a5-871b6afb6211.roa (raw, json)
Hash identifier:          wr9A4BQnSe6rbZXzxqlbwcDG4BgnmngKqnXyiaWyBvI=
Subject key identifier:   4E:94:FE:F3:C0:5D:DA:BB:E6:9F:65:0F:7E:39:43:4D:6B:A5:A9:C4
Certificate issuer:       /CN=c4165474-62cf-4b37-bc57-9023a15cf4d6
Certificate serial:       010D0C9F432858455CF82FDC42FC0F1EC802AB00
Authority key identifier: EB:AB:55:2F:E7:1C:AD:22:9C:6B:C8:76:F4:DB:59:F4:3F:D3:95:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6/d93f4832-7e16-36ea-94a5-871b6afb6211.roa
Signing time:             Fri 29 Mar 2024 01:00:26 +0000
ROA not before:           Fri 29 Mar 2024 01:00:26 +0000
ROA not after:            Thu 27 Jun 2024 01:00:26 +0000
asID:                     13552
IP address blocks:        2620:7f:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6/c4165474-62cf-4b37-bc57-9023a15cf4d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6/c4165474-62cf-4b37-bc57-9023a15cf4d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:f8:2f:dc:42:fc:0f:1e:c8:02:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4165474-62cf-4b37-bc57-9023a15cf4d6
        Validity
            Not Before: Mar 29 01:00:26 2024 GMT
            Not After : Jun 27 01:00:26 2024 GMT
        Subject: CN=d9f1bf51-f137-4b77-9d90-48782fc6b7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:99:d9:92:5f:e6:c8:eb:61:cf:49:a5:8c:9a:
                    98:dc:a4:50:24:60:26:1f:07:fb:57:d2:38:47:c1:
                    cc:48:34:17:85:7f:59:34:80:c2:b5:9d:a2:ca:1b:
                    b2:f1:b7:cd:41:df:44:22:fb:f9:bd:40:6c:25:22:
                    57:9f:d8:d9:b3:a3:3a:54:16:e2:f3:ba:38:4b:28:
                    3a:25:17:b7:dd:08:49:f0:83:af:bb:9b:37:22:66:
                    d1:ce:3b:bf:20:bd:33:ac:1b:7e:e6:2f:2d:44:9b:
                    04:e9:22:e8:d3:c8:1c:83:f3:fc:13:04:61:55:08:
                    ec:59:2c:2e:ae:43:08:bc:4a:0b:60:0e:e8:ea:1e:
                    40:5f:49:31:79:72:b5:8c:a1:94:a1:95:61:0e:cf:
                    de:b0:eb:56:e4:9c:6a:ba:6f:44:cb:dd:b2:cb:d0:
                    68:2c:87:55:66:73:6c:f8:12:5b:c5:73:b0:87:09:
                    0a:c4:8b:94:8b:e2:c9:59:02:4e:d5:7e:52:49:50:
                    ca:1e:98:a5:70:0a:bb:1f:e8:4c:b7:c7:9c:17:83:
                    74:d5:7e:23:a0:13:91:8e:9c:17:83:38:10:d4:06:
                    b1:e3:37:63:7f:8b:5b:b7:68:5b:ad:63:23:53:a5:
                    94:65:f5:80:f9:42:f6:95:24:7d:68:04:17:9e:ff:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:94:FE:F3:C0:5D:DA:BB:E6:9F:65:0F:7E:39:43:4D:6B:A5:A9:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6/d93f4832-7e16-36ea-94a5-871b6afb6211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6/c4165474-62cf-4b37-bc57-9023a15cf4d6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:AB:55:2F:E7:1C:AD:22:9C:6B:C8:76:F4:DB:59:F4:3F:D3:95:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7f:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:46:c9:77:95:9e:74:c4:d2:6a:f3:f6:f8:ab:84:b1:74:c4:
         4a:bd:27:10:4b:6f:32:8b:a0:2f:80:5d:71:04:12:7f:b7:b4:
         60:d5:b3:60:6c:2f:08:5c:3c:0b:3d:49:39:a2:95:8a:dd:28:
         4e:1c:b2:da:35:44:1f:6c:3e:eb:c7:ea:97:5c:cd:cb:ec:8f:
         45:8a:a2:e1:5b:18:b1:0d:11:a9:3e:50:ef:b8:40:53:e1:28:
         9d:7e:a6:c1:0c:9c:3a:05:94:66:06:93:3f:9c:6f:86:77:66:
         b1:01:ef:93:ab:17:17:f9:bd:6f:af:9f:9e:d6:ad:12:65:12:
         8c:04:d6:53:06:ea:d6:c0:88:ad:59:15:52:23:88:4e:28:83:
         06:a8:94:f0:64:e4:98:17:b0:73:f6:32:72:56:b9:d8:54:e7:
         bc:98:3f:b9:fa:f9:52:9a:1c:06:ad:3e:61:e5:34:c4:75:3a:
         4e:7e:5f:2e:ec:3c:df:c3:94:c4:94:76:51:9e:1a:d6:24:db:
         1f:38:6a:8c:dc:e1:da:ee:69:04:e8:d3:ac:7f:6c:3c:d4:96:
         9c:de:ff:f9:62:73:24:10:f5:be:aa:6e:08:04:12:8c:5a:6d:
         df:69:59:aa:27:54:a5:9f:e1:2b:41:7b:91:0d:bc:f9:e4:a0:
         f4:83:da:bb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVc+C/cQvwPHsgCqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQxNjU0NzQtNjJjZi00YjM3LWJjNTctOTAyM2ExNWNm
NGQ2MB4XDTI0MDMyOTAxMDAyNloXDTI0MDYyNzAxMDAyNlowLzEtMCsGA1UEAxMk
ZDlmMWJmNTEtZjEzNy00Yjc3LTlkOTAtNDg3ODJmYzZiN2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpnZkl/myOthz0mljJqY3KRQJGAmHwf7V9I4
R8HMSDQXhX9ZNIDCtZ2iyhuy8bfNQd9EIvv5vUBsJSJXn9jZs6M6VBbi87o4Syg6
JRe33QhJ8IOvu5s3ImbRzju/IL0zrBt+5i8tRJsE6SLo08gcg/P8EwRhVQjsWSwu
rkMIvEoLYA7o6h5AX0kxeXK1jKGUoZVhDs/esOtW5Jxqum9Ey92yy9BoLIdVZnNs
+BJbxXOwhwkKxIuUi+LJWQJO1X5SSVDKHpilcAq7H+hMt8ecF4N01X4joBORjpwX
gzgQ1Aax4zdjf4tbt2hbrWMjU6WUZfWA+UL2lSR9aAQXnv8qIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE6U/vPAXdq75p9lD345Q01rpanEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNDE2
NTQ3NC02MmNmLTRiMzctYmM1Ny05MDIzYTE1Y2Y0ZDYvZDkzZjQ4MzItN2UxNi0z
NmVhLTk0YTUtODcxYjZhZmI2MjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzQxNjU0NzQtNjJjZi00YjM3LWJj
NTctOTAyM2ExNWNmNGQ2L2M0MTY1NDc0LTYyY2YtNGIzNy1iYzU3LTkwMjNhMTVj
ZjRkNi5jcmwwHwYDVR0jBBgwFoAU66tVL+ccrSKca8h29NtZ9D/TlVswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNDE2NTQ3NC02MmNmLTRiMzctYmM1Ny05MDIz
YTE1Y2Y0ZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAf4AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKJGyXeVnnTE0mrz9virhLF0xEq9JxBLbzKLoC+AXXEEEn+3tGDV
s2BsLwhcPAs9STmilYrdKE4csto1RB9sPuvH6pdczcvsj0WKouFbGLENEak+UO+4
QFPhKJ1+psEMnDoFlGYGkz+cb4Z3ZrEB75OrFxf5vW+vn57WrRJlEowE1lMG6tbA
iK1ZFVIjiE4ogwaolPBk5JgXsHP2MnJWudhU57yYP7n6+VKaHAatPmHlNMR1Ok5+
Xy7sPN/DlMSUdlGeGtYk2x84aozc4druaQTo06x/bDzUlpze//licyQQ9b6qbggE
Eoxabd9pWaonVKWf4StBe5ENvPnkoPSD2rs=
-----END CERTIFICATE-----
Generated at Sun Jun 2 21:16:52 2024 by rpki-client on console-ams.rpki-client.org