Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/418079ff-ecad-37b9-bf42-3e76b4f0179a.roa
File:                     418079ff-ecad-37b9-bf42-3e76b4f0179a.roa (raw, json)
Hash identifier:          Vjtfm5CjBqooGwUbOg6ORo2/5kaubu1CbDe1KgN4dmE=
Subject key identifier:   03:35:FC:BE:E3:BC:F9:A8:C2:43:CC:5F:FA:87:AD:88:3F:9B:66:71
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475BDB7FAEC3D2676591E78A00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/418079ff-ecad-37b9-bf42-3e76b4f0179a.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     15290
IP address blocks:        2001:4c8:102a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:7f:ae:c3:d2:67:65:91:e7:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=dd3b8d57-6453-47ea-9a1d-c72772f289ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f3:84:03:20:99:f7:b8:a8:36:f9:c2:34:60:
                    3d:2f:3f:2b:95:d7:2b:67:af:a9:1b:90:98:45:d9:
                    a0:44:04:02:a9:05:6d:47:67:fe:0f:81:f2:82:78:
                    29:51:35:45:7c:ba:30:c2:61:f8:b3:1d:92:05:3d:
                    05:b1:8d:21:e1:2e:49:83:1d:b0:60:7d:e5:f6:45:
                    43:69:fa:5d:12:03:8a:43:e8:81:fc:09:c4:d2:41:
                    9f:ef:d5:3a:44:35:e1:90:ab:63:45:c7:b5:58:52:
                    43:3f:5c:a8:68:15:6f:82:67:a4:67:66:d6:53:93:
                    15:5c:f8:69:d8:85:c8:b2:c4:92:02:89:c0:28:f0:
                    52:ef:5c:b4:6f:4a:bd:5b:28:9c:78:69:06:b3:08:
                    7e:09:a2:85:b4:f7:76:d2:6e:cc:e3:2e:34:24:09:
                    d1:51:4c:1e:eb:5e:ed:8d:43:69:c3:24:00:60:6f:
                    60:55:52:18:58:ff:02:25:2b:43:b2:f3:a2:2b:3b:
                    e1:41:f7:b4:df:02:26:d8:f4:ff:ac:e7:9d:1e:b2:
                    b0:d1:b6:e0:1b:f4:e7:28:9a:93:a4:91:48:b3:cf:
                    29:6b:fb:22:50:0e:4e:8d:21:df:c8:87:2a:ed:3d:
                    d8:b0:5a:52:3d:72:4c:22:4f:a1:7f:d0:17:97:66:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:35:FC:BE:E3:BC:F9:A8:C2:43:CC:5F:FA:87:AD:88:3F:9B:66:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/418079ff-ecad-37b9-bf42-3e76b4f0179a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:102a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:66:e7:68:1c:31:a6:8b:5b:57:5e:b3:ea:42:d0:06:66:ac:
         4a:9c:25:8f:7e:a4:2a:a0:36:52:79:20:dc:a2:2d:6f:76:14:
         c3:38:2e:89:26:01:2a:86:86:a0:d0:3c:b7:29:92:7c:04:37:
         dc:77:9b:92:95:e0:28:ff:fa:28:1a:e9:f1:51:87:14:f3:6c:
         53:d3:d7:66:d7:5f:c2:dd:8c:f7:4c:47:21:16:5e:00:5c:10:
         16:de:0e:19:54:44:09:9f:94:b4:32:fa:42:4e:98:fe:b4:0b:
         49:19:9f:35:d8:eb:21:a0:5d:fa:02:c5:8a:50:5a:5b:89:10:
         7e:55:59:b3:b3:59:43:d9:ab:1b:9d:0d:53:77:e9:cd:46:4b:
         b9:13:ea:89:d1:54:6a:17:10:36:01:32:83:2a:3b:f6:b5:67:
         b1:86:55:46:80:c4:06:d2:ee:4f:6b:c5:df:f2:b6:e7:ad:46:
         95:7c:2d:97:c5:25:70:08:0f:06:6e:6e:ca:32:84:c6:6e:50:
         d2:7b:2d:33:bc:63:2a:7b:28:8a:55:6e:e2:08:a5:a7:b6:83:
         dd:8a:a7:c5:3a:09:b4:bd:e3:8d:cf:76:18:e8:0e:a6:3e:33:
         5c:9b:44:b6:1c:3b:ed:30:a9:86:40:f2:c7:df:97:06:1e:12:
         da:41:67:a4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdb23+uw9JnZZHnigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MDkyODAxMDAzMVoXDTI0MTIyNzAyMDAzMVowLzEtMCsGA1UEAxMk
ZGQzYjhkNTctNjQ1My00N2VhLTlhMWQtYzcyNzcyZjI4OWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfOEAyCZ97ioNvnCNGA9Lz8rldcrZ6+pG5CY
RdmgRAQCqQVtR2f+D4HygngpUTVFfLowwmH4sx2SBT0FsY0h4S5Jgx2wYH3l9kVD
afpdEgOKQ+iB/AnE0kGf79U6RDXhkKtjRce1WFJDP1yoaBVvgmekZ2bWU5MVXPhp
2IXIssSSAonAKPBS71y0b0q9WyiceGkGswh+CaKFtPd20m7M4y40JAnRUUwe617t
jUNpwyQAYG9gVVIYWP8CJStDsvOiKzvhQfe03wIm2PT/rOedHrKw0bbgG/TnKJqT
pJFIs88pa/siUA5OjSHfyIcq7T3YsFpSPXJMIk+hf9AXl2bUUQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAM1/L7jvPmowkPMX/qHrYg/m2ZxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvNDE4MDc5ZmYtZWNhZC0z
N2I5LWJmNDItM2U3NmI0ZjAxNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEyBAq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABhm52gcMaaLW1des+pC0AZmrEqcJY9+pCqgNlJ5INyiLW92FMM4
LokmASqGhqDQPLcpknwEN9x3m5KV4Cj/+iga6fFRhxTzbFPT12bXX8LdjPdMRyEW
XgBcEBbeDhlURAmflLQy+kJOmP60C0kZnzXY6yGgXfoCxYpQWluJEH5VWbOzWUPZ
qxudDVN36c1GS7kT6onRVGoXEDYBMoMqO/a1Z7GGVUaAxAbS7k9rxd/ytuetRpV8
LZfFJXAIDwZubsoyhMZuUNJ7LTO8Yyp7KIpVbuIIpae2g92Kp8U6CbS9443Pdhjo
DqY+M1ybRLYcO+0wqYZA8sfflwYeEtpBZ6Q=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:56 2024 by rpki-client on console-ams.rpki-client.org