Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/7c472f53-21aa-3423-bfa7-6aeb50d9f30f.roa
File:                     7c472f53-21aa-3423-bfa7-6aeb50d9f30f.roa (raw, json)
Hash identifier:          aPSejDDKyuxQpF4+XWDTm9KgPtKT/vk/2U6diQdMfhc=
Subject key identifier:   39:AF:77:98:46:EB:D8:4C:34:0E:6C:D2:69:C1:54:FE:56:8B:AB:F9
Certificate issuer:       /CN=4b7340fc-698a-4488-b211-325f4ded4152
Certificate serial:       010D0C9F432858478CB6961F98B8D6E22F541240
Authority key identifier: 23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/7c472f53-21aa-3423-bfa7-6aeb50d9f30f.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     9009
IP address blocks:        2605:3b80:111::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:96:1f:98:b8:d6:e2:2f:54:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7340fc-698a-4488-b211-325f4ded4152
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=dea2e9eb-67d8-44ef-ba2b-16df9004568c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:59:89:4b:0b:62:cc:ea:80:7e:40:13:3b:b8:
                    0e:09:8f:85:37:81:10:fb:42:82:f9:34:68:2b:19:
                    fe:a6:68:d3:7d:77:98:dd:41:ae:c2:60:53:88:b0:
                    25:22:f4:37:ff:f3:a9:61:4b:d1:c0:08:67:2f:7e:
                    c7:de:a5:52:1c:5e:3a:a4:79:27:2d:20:d8:e9:41:
                    09:90:cd:a3:18:83:8c:4e:ee:1c:eb:c5:89:ae:63:
                    9d:6a:b7:13:c5:45:d0:6c:8c:e5:5b:92:9b:1f:f5:
                    3a:0c:56:ce:15:ba:76:a8:1c:a3:fe:88:45:05:75:
                    55:91:07:a1:39:9a:62:38:45:c7:c1:31:76:c0:d0:
                    36:98:f4:4c:37:a3:f9:f0:bd:26:b6:80:de:b9:af:
                    47:c1:6e:ac:3e:a6:e7:a0:7a:f1:59:83:ae:a5:d2:
                    91:60:35:d9:16:e2:ed:19:da:7e:49:1f:59:c6:27:
                    69:88:7a:5c:2d:de:9e:5b:a5:9c:f1:b9:49:26:05:
                    f4:42:bf:c9:09:77:e7:6e:fc:8c:64:e5:32:d4:22:
                    46:1a:2b:07:f5:54:95:2d:c7:0e:bd:a3:f3:a9:d0:
                    9c:6a:19:fa:af:c7:e5:ad:58:8c:33:c4:cd:60:79:
                    bf:a9:cf:c4:1f:c2:99:d3:0b:9c:ad:26:23:8b:6a:
                    9b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AF:77:98:46:EB:D8:4C:34:0E:6C:D2:69:C1:54:FE:56:8B:AB:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/7c472f53-21aa-3423-bfa7-6aeb50d9f30f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl

            X509v3 Authority Key Identifier:
                keyid:23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3b80:111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:81:bd:0f:8d:31:43:18:03:8a:10:11:9f:66:18:30:bd:65:
         b5:fb:22:00:0d:92:99:b1:3a:3e:aa:0f:6f:c8:c4:52:fa:d3:
         ae:80:26:1d:1e:57:40:bb:7d:1b:6f:fc:aa:05:b0:0c:59:fa:
         c4:64:96:23:74:63:f2:53:ea:27:ec:6d:34:e9:d9:a0:a7:4e:
         49:46:2b:fc:32:75:1f:86:61:43:3d:3b:c6:98:7e:2a:91:dd:
         a0:bc:7f:00:db:f4:1d:d6:f0:3d:1f:0d:0e:40:89:ad:a8:b3:
         0e:ed:e9:70:cb:84:c0:19:22:78:e8:46:c0:a7:90:25:8c:ef:
         0e:51:9b:3f:52:2a:00:96:dd:9f:92:3a:44:9b:61:65:44:40:
         49:fe:85:ac:54:6e:59:98:f7:bd:17:fd:b5:3d:9c:15:9d:45:
         93:73:7f:20:0e:29:cf:bb:18:0c:c2:1d:d1:33:d9:db:19:f5:
         6f:89:6e:85:b6:9c:8b:29:b1:2e:86:a3:2f:46:59:41:8c:ac:
         fd:50:c5:ca:16:2a:47:41:8e:5e:a8:53:68:e0:31:99:32:7c:
         d3:f3:05:91:1d:d1:64:e1:6d:05:3d:07:83:56:aa:02:7c:ff:
         c4:56:f8:73:54:72:54:d8:4e:67:85:22:b2:67:31:de:a0:1b:
         82:7c:b6:6e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeMtpYfmLjW4i9UEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGI3MzQwZmMtNjk4YS00NDg4LWIyMTEtMzI1ZjRkZWQ0
MTUyMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk
ZGVhMmU5ZWItNjdkOC00NGVmLWJhMmItMTZkZjkwMDQ1NjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91mJSwtizOqAfkATO7gOCY+FN4EQ+0KC+TRo
Kxn+pmjTfXeY3UGuwmBTiLAlIvQ3//OpYUvRwAhnL37H3qVSHF46pHknLSDY6UEJ
kM2jGIOMTu4c68WJrmOdarcTxUXQbIzlW5KbH/U6DFbOFbp2qByj/ohFBXVVkQeh
OZpiOEXHwTF2wNA2mPRMN6P58L0mtoDeua9HwW6sPqbnoHrxWYOupdKRYDXZFuLt
Gdp+SR9ZxidpiHpcLd6eW6Wc8blJJgX0Qr/JCXfnbvyMZOUy1CJGGisH9VSVLccO
vaPzqdCcahn6r8flrViMM8TNYHm/qc/EH8KZ0wucrSYji2qbfwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDmvd5hG69hMNA5s0mnBVP5Wi6v5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Yjcz
NDBmYy02OThhLTQ0ODgtYjIxMS0zMjVmNGRlZDQxNTIvN2M0NzJmNTMtMjFhYS0z
NDIzLWJmYTctNmFlYjUwZDlmMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGI3MzQwZmMtNjk4YS00NDg4LWIy
MTEtMzI1ZjRkZWQ0MTUyLzRiNzM0MGZjLTY5OGEtNDQ4OC1iMjExLTMyNWY0ZGVk
NDE1Mi5jcmwwHwYDVR0jBBgwFoAUIz1eV1UEFzo7KfsSr/WYDO3Wd6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80YjczNDBmYy02OThhLTQ0ODgtYjIxMS0zMjVm
NGRlZDQxNTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgU7gAER
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF6BvQ+NMUMYA4oQEZ9mGDC9ZbX7IgANkpmxOj6qD2/IxFL6066A
Jh0eV0C7fRtv/KoFsAxZ+sRkliN0Y/JT6ifsbTTp2aCnTklGK/wydR+GYUM9O8aY
fiqR3aC8fwDb9B3W8D0fDQ5Aia2osw7t6XDLhMAZInjoRsCnkCWM7w5Rmz9SKgCW
3Z+SOkSbYWVEQEn+haxUblmY970X/bU9nBWdRZNzfyAOKc+7GAzCHdEz2dsZ9W+J
boW2nIspsS6Goy9GWUGMrP1QxcoWKkdBjl6oU2jgMZkyfNPzBZEd0WThbQU9B4NW
qgJ8/8RW+HNUclTYTmeFIrJnMd6gG4J8tm4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:48 2024 by rpki-client on console-fra.rpki-client.org