Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa
File:                     2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa (raw, json)
Hash identifier:          gpc4cRPVGsaViiZlKFfMo09FNR9cpx9jvbz+eRvocr0=
Subject key identifier:   E9:C0:E4:B4:4B:EC:66:12:6E:0A:B6:36:5F:68:C3:5B:9F:43:35:FC
Certificate issuer:       /CN=53cc15fa-4aac-4896-89f6-ee84e1915dca
Certificate serial:       010D0C9F432858473095F5BBC2E7B898C324EAA0
Authority key identifier: 4E:19:B9:FB:72:6B:F1:39:59:C4:08:9E:51:5F:5B:58:B8:D9:D6:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     14224
IP address blocks:        2600:7d00::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/53cc15fa-4aac-4896-89f6-ee84e1915dca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/53cc15fa-4aac-4896-89f6-ee84e1915dca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f5:bb:c2:e7:b8:98:c3:24:ea:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53cc15fa-4aac-4896-89f6-ee84e1915dca
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=c240d70b-9512-4626-9588-85b541867c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5e:31:c2:4f:f9:44:63:6a:46:8c:ea:db:f5:
                    6f:4e:71:86:1f:f9:d5:24:5d:7a:be:5c:de:d4:fb:
                    af:d7:28:03:8c:72:57:aa:b6:02:5d:5b:6f:8e:b0:
                    da:57:76:e3:86:3a:a4:77:da:2e:27:4f:b1:93:aa:
                    d7:8c:a3:f6:ec:75:55:b9:4d:51:fb:f5:a3:2b:a6:
                    39:3f:78:b1:0f:17:46:c9:75:3a:f2:02:b3:24:af:
                    ff:7b:d3:ce:76:e4:29:36:e0:fc:0c:25:66:73:2f:
                    69:06:39:59:e8:1d:3a:c2:6f:12:9d:2e:5d:9f:91:
                    d4:34:e5:07:ef:61:fe:d1:aa:ef:bf:79:93:35:4e:
                    c0:42:66:4e:4e:d4:0a:e3:5a:bd:9e:85:e0:20:1f:
                    a4:77:59:5d:33:ff:b3:1d:82:98:93:f8:89:42:92:
                    7c:a9:88:ac:8a:cf:83:ac:dd:ef:f4:cf:28:2b:89:
                    57:eb:38:2e:58:e1:31:5e:06:24:ca:55:2a:1d:39:
                    2c:08:20:9a:ba:63:30:6a:62:63:4d:68:5e:fc:b1:
                    a1:ca:cc:62:59:f4:38:d3:b1:e2:2d:3e:38:f6:d1:
                    bb:d1:2f:b0:10:e2:88:27:c0:a9:76:7b:51:13:fa:
                    8a:ec:e2:38:08:a4:1c:62:e6:55:65:e8:0e:69:ca:
                    d3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C0:E4:B4:4B:EC:66:12:6E:0A:B6:36:5F:68:C3:5B:9F:43:35:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/53cc15fa-4aac-4896-89f6-ee84e1915dca.crl

            X509v3 Authority Key Identifier:
                keyid:4E:19:B9:FB:72:6B:F1:39:59:C4:08:9E:51:5F:5B:58:B8:D9:D6:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:7d00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:7a:4f:98:52:4e:93:59:1f:49:40:2b:c2:b2:21:4f:69:54:
         ef:9e:ab:9f:d4:f3:8c:b6:97:0f:00:f6:6a:34:9a:41:64:df:
         6f:f5:5d:87:bf:f2:01:c8:80:7f:0d:ac:81:4a:c3:4f:f3:fc:
         79:75:69:33:fe:6f:de:11:54:ec:6d:91:e6:ff:07:68:79:40:
         3b:c9:16:e5:86:bd:d4:84:3c:72:5a:4d:fd:b7:6c:30:70:24:
         d6:4e:77:28:f3:8c:d6:2b:be:da:7f:8d:fc:e9:90:f5:58:32:
         f1:57:9c:0f:51:90:66:b7:9e:7b:b3:f2:50:5b:3d:63:c1:10:
         c6:f8:fd:ea:a0:ec:40:fe:be:a3:f9:f3:77:80:fc:c5:91:72:
         b6:7c:b1:b1:d2:db:93:52:6c:3d:33:05:19:71:5e:94:11:95:
         4c:b0:7b:c6:c4:28:2d:f9:e6:47:5f:63:e6:d8:07:bd:f1:b6:
         19:78:f2:1d:3c:1a:00:4a:13:a4:b3:27:66:df:68:9b:2b:4b:
         49:24:66:fc:0a:2c:f1:1a:d6:55:6e:48:84:57:91:d8:19:e7:
         46:e8:33:d2:18:e1:b2:c6:92:dd:62:9b:6b:0f:ff:0b:bd:5e:
         01:5c:fb:b9:b0:6c:06:f1:39:85:6d:bf:43:3d:18:8b:b0:f9:
         2c:f2:02:c2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcwlfW7wue4mMMk6qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNjYzE1ZmEtNGFhYy00ODk2LTg5ZjYtZWU4NGUxOTE1
ZGNhMB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk
YzI0MGQ3MGItOTUxMi00NjI2LTk1ODgtODViNTQxODY3Yzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV4xwk/5RGNqRozq2/VvTnGGH/nVJF16vlze
1Puv1ygDjHJXqrYCXVtvjrDaV3bjhjqkd9ouJ0+xk6rXjKP27HVVuU1R+/WjK6Y5
P3ixDxdGyXU68gKzJK//e9POduQpNuD8DCVmcy9pBjlZ6B06wm8SnS5dn5HUNOUH
72H+0arvv3mTNU7AQmZOTtQK41q9noXgIB+kd1ldM/+zHYKYk/iJQpJ8qYisis+D
rN3v9M8oK4lX6zguWOExXgYkylUqHTksCCCaumMwamJjTWhe/LGhysxiWfQ407Hi
LT449tG70S+wEOKIJ8CpdntRE/qK7OI4CKQcYuZVZegOacrTtwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOnA5LRL7GYSbgq2Nl9ow1ufQzX8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81M2Nj
MTVmYS00YWFjLTQ4OTYtODlmNi1lZTg0ZTE5MTVkY2EvMmRhZDM0ZjAtNDNiYS0z
YWMxLWJhYzctMzQ5OTVmZGY4MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTNjYzE1ZmEtNGFhYy00ODk2LTg5
ZjYtZWU4NGUxOTE1ZGNhLzUzY2MxNWZhLTRhYWMtNDg5Ni04OWY2LWVlODRlMTkx
NWRjYS5jcmwwHwYDVR0jBBgwFoAUThm5+3Jr8TlZxAieUV9bWLjZ1gQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81M2NjMTVmYS00YWFjLTQ4OTYtODlmNi1lZTg0
ZTE5MTVkY2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgB9ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCFek+YUk6TWR9JQCvCsiFPaVTvnquf1POMtpcPAPZqNJpBZN9v9V2H
v/IByIB/DayBSsNP8/x5dWkz/m/eEVTsbZHm/wdoeUA7yRblhr3UhDxyWk39t2ww
cCTWTnco84zWK77af4386ZD1WDLxV5wPUZBmt557s/JQWz1jwRDG+P3qoOxA/r6j
+fN3gPzFkXK2fLGx0tuTUmw9MwUZcV6UEZVMsHvGxCgt+eZHX2Pm2Ae98bYZePId
PBoAShOksydm32ibK0tJJGb8CizxGtZVbkiEV5HYGedG6DPSGOGyxpLdYptrD/8L
vV4BXPu5sGwG8TmFbb9DPRiLsPks8gLC
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:15 2024 by rpki-client on console-ams.rpki-client.org