Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0f9ebc90-bef1-3ebc-ae64-0405a50ac7fb.roa
File:                     0f9ebc90-bef1-3ebc-ae64-0405a50ac7fb.roa (raw, json)
Hash identifier:          j19fXuDSa8aKeRCrBjYv1BJsrZq/w8V7yVdqkeXx2lk=
Subject key identifier:   7B:4D:BE:F7:54:23:8C:14:DB:93:0F:EF:88:F3:5B:9E:23:EF:6A:EF
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285847362B4CDB16FDFB4B16D8DA40
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0f9ebc90-bef1-3ebc-ae64-0405a50ac7fb.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     16904
IP address blocks:        2600:a00::/31 maxlen: 31

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:4c:db:16:fd:fb:4b:16:d8:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=db206228-8c8d-429c-8ac2-094bc427bffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7c:5a:03:b8:59:c5:2a:8b:de:1f:e1:7d:80:
                    b9:50:20:b6:53:6a:7e:9d:96:41:31:82:74:b7:c9:
                    b4:10:9b:4d:73:eb:3e:8e:72:b8:50:d1:54:f8:6b:
                    10:e5:1f:11:7c:14:ee:6e:81:20:03:b8:c1:2a:08:
                    32:c4:c0:8b:f8:16:ed:e6:86:fc:69:5a:ba:c6:87:
                    11:36:bb:e2:78:10:3b:b1:95:69:06:70:9f:e3:13:
                    8b:ec:99:24:e1:1b:7e:19:21:75:39:57:95:9b:27:
                    9c:d0:ef:77:13:7d:10:c2:24:6c:cc:f8:d1:fc:ec:
                    7d:b3:8e:83:36:35:67:0b:5f:fc:ac:6a:f4:5b:4f:
                    58:12:2f:f2:62:24:97:13:fa:46:20:e8:8b:fd:ac:
                    86:a3:9f:32:43:4b:66:aa:64:f0:20:ae:a3:b4:4d:
                    cf:be:44:31:55:ad:f6:8a:d8:49:6a:df:e4:67:a0:
                    e8:79:e8:f6:38:87:84:e3:92:55:ab:25:f3:3a:f9:
                    e6:91:37:6c:cc:7d:14:61:53:dd:67:61:aa:16:46:
                    9c:ea:7e:be:8a:0e:5a:b6:35:48:56:77:57:91:43:
                    e6:a3:52:db:61:df:58:f0:7e:b4:36:ea:5a:6d:7d:
                    82:b0:38:7e:d4:03:59:33:6e:34:87:54:1b:53:79:
                    08:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4D:BE:F7:54:23:8C:14:DB:93:0F:EF:88:F3:5B:9E:23:EF:6A:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0f9ebc90-bef1-3ebc-ae64-0405a50ac7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:a00::/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:38:83:4c:a6:f3:f2:08:7a:36:c6:59:04:ac:98:76:9f:
         cd:b2:dd:91:34:17:c6:23:a2:41:67:16:de:88:a0:ac:d9:4c:
         53:97:0e:ba:98:6a:e6:82:50:ad:90:e2:7a:bf:ff:34:50:51:
         bd:bb:e8:4d:80:83:92:e6:61:83:97:66:41:6d:f8:a0:ab:5e:
         bb:33:4c:c7:0e:03:5f:25:24:79:c9:04:32:fe:1e:80:c4:b8:
         20:ed:f8:f5:10:ca:7a:bd:91:13:7f:34:3d:99:74:ac:0f:f1:
         02:0f:ff:20:0c:06:a1:3d:cc:35:e6:a5:16:13:e8:ea:c8:a0:
         47:71:d1:67:92:89:c1:17:49:fd:16:0d:2d:9c:00:d1:83:d8:
         40:48:e2:68:91:90:27:3e:08:9a:0a:dd:13:29:41:50:23:59:
         52:6b:db:16:45:54:77:15:12:7c:f3:b6:2c:fa:8f:77:5e:eb:
         8e:2f:29:0b:b6:37:34:34:a2:ec:06:73:28:6f:b8:51:da:16:
         cb:5d:78:89:aa:63:a9:9a:2d:37:7d:73:cf:e0:b2:c1:ba:32:
         d8:89:10:5f:b8:40:1f:e7:8f:13:2f:4e:e3:ad:89:ed:d1:ce:
         b7:40:2b:f5:6c:c0:b5:b4:a2:3e:25:1e:4d:ec:5e:c3:03:da:
         5f:64:ab:94
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEc2K0zbFv37SxbY2kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk
ZGIyMDYyMjgtOGM4ZC00MjljLThhYzItMDk0YmM0MjdiZmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHxaA7hZxSqL3h/hfYC5UCC2U2p+nZZBMYJ0
t8m0EJtNc+s+jnK4UNFU+GsQ5R8RfBTuboEgA7jBKggyxMCL+Bbt5ob8aVq6xocR
NrvieBA7sZVpBnCf4xOL7Jkk4Rt+GSF1OVeVmyec0O93E30QwiRszPjR/Ox9s46D
NjVnC1/8rGr0W09YEi/yYiSXE/pGIOiL/ayGo58yQ0tmqmTwIK6jtE3PvkQxVa32
ithJat/kZ6Doeej2OIeE45JVqyXzOvnmkTdszH0UYVPdZ2GqFkac6n6+ig5atjVI
VndXkUPmo1LbYd9Y8H60NupabX2CsDh+1ANZM240h1QbU3kIowIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHtNvvdUI4wU25MP74jzW54j72rvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvMGY5ZWJjOTAtYmVmMS0z
ZWJjLWFlNjQtMDQwNWE1MGFjN2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBJgAKADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBO5jiDTKbz8gh6NsZZBKyYdp/Nst2RNBfGI6JBZxbeiKCs2UxTlw66
mGrmglCtkOJ6v/80UFG9u+hNgIOS5mGDl2ZBbfigq167M0zHDgNfJSR5yQQy/h6A
xLgg7fj1EMp6vZETfzQ9mXSsD/ECD/8gDAahPcw15qUWE+jqyKBHcdFnkonBF0n9
Fg0tnADRg9hASOJokZAnPgiaCt0TKUFQI1lSa9sWRVR3FRJ887Ys+o93XuuOLykL
tjc0NKLsBnMob7hR2hbLXXiJqmOpmi03fXPP4LLBujLYiRBfuEAf548TL07jrYnt
0c63QCv1bMC1tKI+JR5N7F7DA9pfZKuU
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:27:52 2024 by rpki-client on console-fra.rpki-client.org