Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa
File:                     c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa (raw, json)
Hash identifier:          iITilrFXcGGfLOflf8aRpEAntjutoFnmc0cHWon4hlQ=
Subject key identifier:   4D:63:D3:68:40:7E:4E:53:A5:E8:6B:42:12:E0:BB:DE:0B:C5:ED:60
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453E42A3E79781B8685342BC40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     852
IP address blocks:        2001:569:b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:a3:e7:97:81:b8:68:53:42:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=98b3100c-875a-4892-8dcd-735b30cd677c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1b:c2:15:df:50:de:f7:c7:f8:07:19:f4:d0:
                    98:5b:f2:8a:ab:4c:02:64:05:80:e0:42:5e:6c:47:
                    21:1d:a8:36:26:31:ba:1f:bc:40:ce:68:8d:9b:d5:
                    63:88:ab:cf:df:f3:63:8f:97:49:b4:9c:5d:f1:bc:
                    9b:0c:88:aa:1c:99:12:6f:9b:a7:ce:90:29:da:3a:
                    8c:c1:5e:ca:95:05:0a:e3:32:a2:32:7b:1e:bb:20:
                    ab:4c:e8:79:fc:ac:52:da:62:88:c2:20:a4:07:e3:
                    c2:15:0e:e1:16:ab:b1:ef:ea:9e:8b:7b:7d:cf:35:
                    93:fc:22:35:f7:49:74:06:80:c6:2c:cb:03:18:a0:
                    cd:b8:bd:23:7f:b1:84:b6:cc:fa:b9:85:9e:2e:7c:
                    70:81:cd:86:83:b3:f4:7d:6e:5e:6c:49:d7:9a:65:
                    80:f5:ae:5d:e2:0a:46:43:25:93:dc:e9:d6:20:40:
                    8b:05:27:23:7d:d4:f0:73:a6:ab:2d:d2:4a:0a:c0:
                    03:f3:5f:48:e0:b7:01:df:bc:58:16:84:1c:fd:8b:
                    fc:b0:c0:29:e5:d5:87:2c:58:95:46:48:d1:a0:f2:
                    00:09:46:4d:cc:ef:4a:4a:e4:8a:28:32:23:11:bb:
                    0d:df:e3:75:dc:6c:a6:32:da:35:8e:23:6d:c5:47:
                    58:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:63:D3:68:40:7E:4E:53:A5:E8:6B:42:12:E0:BB:DE:0B:C5:ED:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:569:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:c3:40:3f:2f:ca:5e:e6:e1:c1:51:cd:5c:f5:df:86:b1:3f:
         5a:95:f2:50:99:af:26:56:6f:25:32:09:48:02:b9:07:7d:0b:
         66:fe:96:4a:d0:d9:fa:6e:b0:d8:c4:85:33:81:8a:4e:a2:42:
         a0:8f:b2:df:3c:5a:c5:17:dd:a9:fe:f0:5c:5d:ec:57:61:f6:
         85:ea:92:66:b2:78:82:17:5d:7e:dc:60:c3:ef:ad:dc:63:ba:
         dc:99:5a:0f:1f:2e:b0:cf:53:c2:6b:a7:5e:11:44:1e:64:19:
         5c:83:28:0e:2a:d3:0c:3c:9a:7e:b7:f4:a2:33:d4:0c:96:39:
         0b:69:b2:21:a8:dc:3d:b8:ad:ed:a4:b8:1f:f6:03:8d:b4:3c:
         6b:e3:9e:0c:dc:01:9c:11:57:c6:8a:32:f6:87:ca:69:de:e3:
         e2:40:55:bd:44:b9:01:7b:20:35:09:5e:79:db:30:3a:ad:84:
         69:5b:64:0e:a7:11:86:b9:33:8f:92:0d:7f:b0:12:50:53:f9:
         26:3d:ad:f3:f4:46:01:c7:0a:16:d2:dc:f3:5e:4b:c9:fc:16:
         d9:54:11:57:a9:39:b0:98:5b:2f:50:f2:e7:38:32:23:a4:d0:
         a2:26:e3:23:93:55:ec:9f:93:52:cc:a7:30:ca:84:02:ab:e2:
         31:0e:e4:f5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEU+QqPnl4G4aFNCvEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxODAxMDAyNVoXDTI0MDYxNjAxMDAyNVowLzEtMCsGA1UEAxMk
OThiMzEwMGMtODc1YS00ODkyLThkY2QtNzM1YjMwY2Q2NzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohvCFd9Q3vfH+AcZ9NCYW/KKq0wCZAWA4EJe
bEchHag2JjG6H7xAzmiNm9VjiKvP3/Njj5dJtJxd8bybDIiqHJkSb5unzpAp2jqM
wV7KlQUK4zKiMnseuyCrTOh5/KxS2mKIwiCkB+PCFQ7hFqux7+qei3t9zzWT/CI1
90l0BoDGLMsDGKDNuL0jf7GEtsz6uYWeLnxwgc2Gg7P0fW5ebEnXmmWA9a5d4gpG
QyWT3OnWIECLBScjfdTwc6arLdJKCsAD819I4LcB37xYFoQc/Yv8sMAp5dWHLFiV
RkjRoPIACUZNzO9KSuSKKDIjEbsN3+N13GymMto1jiNtxUdYPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE1j02hAfk5TpehrQhLgu94Lxe1gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzFkYzI3YTAtZGJjMi0z
N2Y5LWJhYjctZTMzYzFlN2E2NjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaQAL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBANzDQD8vyl7m4cFRzVz134axP1qV8lCZryZWbyUyCUgCuQd9C2b+
lkrQ2fpusNjEhTOBik6iQqCPst88WsUX3an+8Fxd7Fdh9oXqkmayeIIXXX7cYMPv
rdxjutyZWg8fLrDPU8Jrp14RRB5kGVyDKA4q0ww8mn639KIz1AyWOQtpsiGo3D24
re2kuB/2A420PGvjngzcAZwRV8aKMvaHymne4+JAVb1EuQF7IDUJXnnbMDqthGlb
ZA6nEYa5M4+SDX+wElBT+SY9rfP0RgHHChbS3PNeS8n8FtlUEVepObCYWy9Q8uc4
MiOk0KIm4yOTVeyfk1LMpzDKhAKr4jEO5PU=
-----END CERTIFICATE-----
Generated at Sat May 18 16:11:01 2024 by rpki-client on console-ams.rpki-client.org