Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/67704cd4-0665-3af9-af56-f8f882377485.roa
File:                     67704cd4-0665-3af9-af56-f8f882377485.roa (raw, json)
Hash identifier:          dUJqVmFoGx6rRfOfho9CHazJQyj0jWLjAr5ROtUjtJc=
Subject key identifier:   EC:B8:8A:51:E2:9A:B3:39:CC:77:5F:F3:87:F4:BF:FB:79:A7:60:6A
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F432858449414B2CE3A569B319CACDA80
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/67704cd4-0665-3af9-af56-f8f882377485.roa
Signing time:             Wed 17 Jan 2024 02:00:24 +0000
ROA not before:           Wed 17 Jan 2024 02:00:24 +0000
ROA not after:            Tue 16 Apr 2024 01:00:24 +0000
asID:                     398549
IP address blocks:        2605:dd40:8220::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:94:14:b2:ce:3a:56:9b:31:9c:ac:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jan 17 02:00:24 2024 GMT
            Not After : Apr 16 01:00:24 2024 GMT
        Subject: CN=2e41b9f4-e492-41b0-9e49-ab92bbcde589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:12:71:04:e0:d7:37:f6:3e:1f:40:a3:cd:
                    ee:5b:e8:e4:70:e5:b8:b6:05:b2:c4:9d:9c:47:c1:
                    b9:f7:5f:89:92:26:6d:34:a7:b3:71:ff:35:8f:de:
                    99:52:4c:a5:98:81:32:3c:ad:ae:ce:e4:a0:20:d4:
                    21:89:03:70:34:e6:8c:f9:73:e7:90:03:20:67:79:
                    fc:11:57:99:73:3a:2d:88:c0:37:4e:a7:e5:8e:75:
                    b9:55:d4:12:26:e0:66:54:72:68:21:47:58:10:7a:
                    9c:8c:b7:20:92:ec:60:7c:88:16:57:8b:e9:fc:ba:
                    53:e2:85:9a:60:7b:e5:5b:a3:cd:c4:38:c5:06:87:
                    e8:14:82:5c:24:c2:f1:40:c5:08:53:54:78:c0:ff:
                    4e:53:96:8a:4b:cb:53:5f:ad:d4:bf:bb:cc:c9:22:
                    71:cd:60:0f:56:72:8b:2b:8e:54:8e:01:df:45:c0:
                    1e:b2:c2:38:41:6e:e0:f6:93:c7:8d:49:71:0b:c4:
                    1b:14:eb:82:ff:cc:bf:b7:82:65:16:5a:71:66:e5:
                    40:6f:71:79:ed:94:8e:6b:70:ea:0d:de:c8:aa:d2:
                    81:7f:91:07:97:04:3e:59:e0:35:ab:02:34:27:5e:
                    eb:be:f9:91:f8:c7:5c:47:1a:de:d2:3e:a8:d4:d0:
                    09:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B8:8A:51:E2:9A:B3:39:CC:77:5F:F3:87:F4:BF:FB:79:A7:60:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/67704cd4-0665-3af9-af56-f8f882377485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8220::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a1:b3:07:b7:09:a7:f5:ff:b7:ec:7a:77:4f:f0:af:3d:1e:
         a0:11:c3:47:b0:0b:86:ab:d6:5b:4e:23:d2:d7:35:db:29:21:
         80:03:b9:9d:4a:ee:bf:05:0a:1a:f5:58:18:1d:e2:0f:cf:91:
         bc:da:ab:0f:93:3e:ab:62:58:cc:c6:2a:45:1c:1e:f4:75:1b:
         7a:00:21:13:ab:49:36:3d:d4:10:01:ee:93:09:0b:6f:b8:04:
         b0:1d:27:65:69:f6:74:e0:f5:2f:64:1b:25:7f:54:f6:d5:a3:
         91:7e:d8:ed:27:a3:9e:a0:79:97:4a:d2:af:8c:3c:14:b2:8e:
         19:00:6a:7d:bd:4b:06:90:21:aa:f3:7b:78:13:3d:fd:db:ae:
         b8:52:05:66:70:3a:14:98:90:23:31:65:18:8f:80:48:1c:30:
         fa:fd:83:76:9b:ae:36:de:99:bc:6e:72:00:1b:ce:85:41:ba:
         9f:26:69:2e:d8:f4:b3:84:8a:99:b6:1f:c3:b4:65:28:12:7b:
         81:56:35:e8:11:be:82:5d:f9:12:d0:2e:f7:46:53:61:b8:78:
         96:82:1f:01:ea:dd:5c:14:68:fd:51:42:54:d9:2d:a5:f6:47:
         51:e4:a9:97:2a:68:d0:92:38:49:bc:8b:8a:1c:d4:b6:9e:0a:
         3a:9a:61:49
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWESUFLLOOlabMZys2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4
OTc3MB4XDTI0MDExNzAyMDAyNFoXDTI0MDQxNjAxMDAyNFowLzEtMCsGA1UEAxMk
MmU0MWI5ZjQtZTQ5Mi00MWIwLTllNDktYWI5MmJiY2RlNTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfkScQTg1zf2Ph9Ao83uW+jkcOW4tgWyxJ2c
R8G591+JkiZtNKezcf81j96ZUkylmIEyPK2uzuSgINQhiQNwNOaM+XPnkAMgZ3n8
EVeZczotiMA3TqfljnW5VdQSJuBmVHJoIUdYEHqcjLcgkuxgfIgWV4vp/LpT4oWa
YHvlW6PNxDjFBofoFIJcJMLxQMUIU1R4wP9OU5aKS8tTX63Uv7vMySJxzWAPVnKL
K45UjgHfRcAessI4QW7g9pPHjUlxC8QbFOuC/8y/t4JlFlpxZuVAb3F57ZSOa3Dq
Dd7IqtKBf5EHlwQ+WeA1qwI0J17rvvmR+MdcRxre0j6o1NAJWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOy4ilHimrM5zHdf84f0v/t5p2BqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl
ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvNjc3MDRjZDQtMDY2NS0z
YWY5LWFmNTYtZjhmODgyMzc3NDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj
NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4
ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy
ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXdQIIg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFqhswe3Caf1/7fsendP8K89HqARw0ewC4ar1ltOI9LXNdspIYAD
uZ1K7r8FChr1WBgd4g/Pkbzaqw+TPqtiWMzGKkUcHvR1G3oAIROrSTY91BAB7pMJ
C2+4BLAdJ2Vp9nTg9S9kGyV/VPbVo5F+2O0no56geZdK0q+MPBSyjhkAan29SwaQ
Iarze3gTPf3brrhSBWZwOhSYkCMxZRiPgEgcMPr9g3abrjbembxucgAbzoVBup8m
aS7Y9LOEipm2H8O0ZSgSe4FWNegRvoJd+RLQLvdGU2G4eJaCHwHq3VwUaP1RQlTZ
LaX2R1HkqZcqaNCSOEm8i4oc1LaeCjqaYUk=
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:30:55 2024 by rpki-client on console-ams.rpki-client.org