Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0e0ae383-f2e8-3e09-beae-a026d3e1965b.roa
File:                     0e0ae383-f2e8-3e09-beae-a026d3e1965b.roa (raw, json)
Hash identifier:          hv0Tp5h+PILraJNfdDsTUYQDoDGDCn3bFu6dcCS/5GM=
Subject key identifier:   59:C0:76:66:D6:05:A7:01:B3:3D:73:C0:E8:44:1D:6E:74:84:77:78
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC30D48BE0FB77414EA7980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0e0ae383-f2e8-3e09-beae-a026d3e1965b.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8023::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:0d:48:be:0f:b7:74:14:ea:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=efb970cb-fc95-4d92-8bcc-338f7661c484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:34:bc:fd:d7:20:00:22:d1:fa:63:58:aa:c2:
                    da:c6:c3:59:09:49:54:44:45:25:94:7d:ea:ef:0f:
                    f4:49:6d:ec:a4:36:1c:07:00:ad:04:05:58:5b:9b:
                    57:ec:d5:9c:a3:45:02:37:91:07:8e:7d:c1:b8:46:
                    fb:a1:7d:ce:73:d7:f6:d3:7b:e6:2c:7b:6e:23:67:
                    d8:38:bd:a6:1a:59:8d:c7:98:b0:ea:93:f9:48:4e:
                    94:87:80:b6:00:f2:18:58:00:72:51:e8:9d:80:9d:
                    e2:1e:5a:a7:47:31:7f:ce:85:91:25:8a:e0:d0:a6:
                    c8:2a:6f:ab:36:ac:ca:ea:cb:fc:ce:c5:07:14:2d:
                    9e:f2:9b:a0:e7:d5:52:b4:e4:24:dc:50:d6:51:82:
                    21:69:c6:0b:b7:39:ae:db:bd:3a:bb:46:fd:21:71:
                    4b:1b:c5:0f:37:d7:dc:0a:4b:da:d8:38:c2:d3:ed:
                    57:8b:8c:67:28:2a:fd:37:5c:a1:2b:71:0e:8e:7a:
                    11:67:cb:92:f5:4b:8b:5e:84:d3:e0:a8:ee:bd:cd:
                    b2:83:61:16:4d:ea:1f:2e:65:1e:7f:5c:d6:07:f8:
                    77:e7:9e:c3:4a:32:79:c3:3d:a0:86:04:4b:c4:b2:
                    17:19:66:a4:9b:9c:6c:36:aa:70:16:27:84:1f:04:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C0:76:66:D6:05:A7:01:B3:3D:73:C0:E8:44:1D:6E:74:84:77:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0e0ae383-f2e8-3e09-beae-a026d3e1965b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8023::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3d:c0:30:95:1b:72:fa:f7:c1:93:ac:6c:ba:cc:3b:6f:41:
         0e:b4:4c:e2:33:76:ae:67:cd:bf:75:36:06:f7:30:f1:9e:de:
         66:7b:a3:09:78:7e:ec:21:d4:d0:5c:c5:ca:69:84:58:f9:be:
         fd:94:0f:19:b6:c9:8b:8c:5f:f8:90:04:54:9b:b1:b6:99:80:
         f8:af:69:56:89:e6:94:fb:d3:85:23:f1:f8:95:08:f4:2c:3d:
         f7:ec:e4:7c:47:0e:f2:f6:16:1d:01:f0:8e:b8:cb:33:99:2c:
         7c:00:48:12:d5:00:55:51:ad:ad:cc:c4:ad:8e:13:8d:93:c6:
         51:21:77:51:00:bb:b5:7d:6d:9c:02:f3:48:04:10:78:12:07:
         56:09:65:b3:3f:bb:60:34:d6:df:ab:6c:bd:1f:5d:3c:c6:98:
         3e:5d:4d:e3:b6:48:2e:4a:5f:1d:d3:ab:d1:eb:84:26:31:aa:
         5d:12:c1:45:12:a3:52:30:e3:95:e3:0c:71:10:0f:73:9f:08:
         ba:36:7e:08:b1:45:1e:1d:95:89:3c:e4:ea:f9:cf:f8:0c:ca:
         3f:92:10:59:c8:68:14:26:7b:4b:6c:b4:e6:78:d3:0e:a3:dc:
         2a:a7:f8:6f:fd:30:d6:15:83:46:4b:c2:f4:c3:65:94:7f:80:
         30:8a:4f:89
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVfww1Ivg+3dBTqeYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
ZWZiOTcwY2ItZmM5NS00ZDkyLThiY2MtMzM4Zjc2NjFjNDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TS8/dcgACLR+mNYqsLaxsNZCUlUREUllH3q
7w/0SW3spDYcBwCtBAVYW5tX7NWco0UCN5EHjn3BuEb7oX3Oc9f203vmLHtuI2fY
OL2mGlmNx5iw6pP5SE6Uh4C2APIYWAByUeidgJ3iHlqnRzF/zoWRJYrg0KbIKm+r
NqzK6sv8zsUHFC2e8pug59VStOQk3FDWUYIhacYLtzmu2706u0b9IXFLG8UPN9fc
Ckva2DjC0+1Xi4xnKCr9N1yhK3EOjnoRZ8uS9UuLXoTT4Kjuvc2yg2EWTeofLmUe
f1zWB/h3557DSjJ5wz2ghgRLxLIXGWakm5xsNqpwFieEHwT5ewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFnAdmbWBacBsz1zwOhEHW50hHd4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMGUwYWUzODMtZjJlOC0z
ZTA5LWJlYWUtYTAyNmQzZTE5NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYAj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACk9wDCVG3L698GTrGy6zDtvQQ60TOIzdq5nzb91Ngb3MPGe3mZ7
owl4fuwh1NBcxcpphFj5vv2UDxm2yYuMX/iQBFSbsbaZgPivaVaJ5pT704Uj8fiV
CPQsPffs5HxHDvL2Fh0B8I64yzOZLHwASBLVAFVRra3MxK2OE42TxlEhd1EAu7V9
bZwC80gEEHgSB1YJZbM/u2A01t+rbL0fXTzGmD5dTeO2SC5KXx3Tq9HrhCYxql0S
wUUSo1Iw45XjDHEQD3OfCLo2fgixRR4dlYk85Or5z/gMyj+SEFnIaBQme0tstOZ4
0w6j3Cqn+G/9MNYVg0ZLwvTDZZR/gDCKT4k=
-----END CERTIFICATE-----
Generated at Fri May 10 08:04:26 2024 by rpki-client on console-ams.rpki-client.org