Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/238cb02c-c33b-3f84-96e1-2d34f4784498.roa
File:                     238cb02c-c33b-3f84-96e1-2d34f4784498.roa (raw, json)
Hash identifier:          C15P5XGqOSjZLM6M819q0LrGJNWOOGuyboI1+MoNRkk=
Subject key identifier:   25:1F:EA:24:D6:CD:11:ED:2C:A4:82:B3:E2:5B:52:C4:DB:52:DB:F9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2EDC900DF67A0528328C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/238cb02c-c33b-3f84-96e1-2d34f4784498.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8116::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:ed:c9:00:df:67:a0:52:83:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=2e60a226-07cc-4df2-81f6-389c40535521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:28:a1:50:95:64:99:1e:6d:62:fa:41:20:0f:
                    2e:ce:9e:ba:a7:8b:c1:cb:87:fa:86:80:4f:a4:72:
                    c0:4e:ba:4c:bf:da:77:aa:f7:2a:0c:a9:4f:d5:1e:
                    3f:85:12:92:b4:72:75:b5:90:06:bc:b0:a5:a4:02:
                    f4:0e:75:a0:fb:c0:af:0b:11:41:04:1d:8d:6e:e5:
                    7e:b9:0b:cc:f5:55:d5:40:ff:b9:61:41:b2:2d:e0:
                    89:4f:09:a3:85:fc:f3:f7:59:61:be:ab:e1:d6:ab:
                    7e:c3:94:10:66:38:82:6b:aa:8d:a7:76:1a:7b:dd:
                    83:42:31:a7:e1:c0:d3:02:66:d2:da:a1:d2:b5:5b:
                    c6:85:ab:33:af:00:59:be:75:4b:11:b6:d3:41:34:
                    47:95:53:43:11:31:bc:95:6d:c7:fe:85:39:5f:41:
                    a3:1f:c2:99:97:ee:a1:84:a0:70:ef:2a:fd:3d:d1:
                    99:bc:69:ea:b5:9b:24:51:10:9e:95:46:db:b7:b9:
                    4c:e8:1b:98:0d:bf:a3:06:cc:6c:a3:0c:e1:64:b0:
                    59:4b:cb:c0:5b:75:1c:c3:24:d7:db:ce:de:81:38:
                    62:fd:7e:06:83:db:cf:fa:f5:3a:b5:c5:11:97:e1:
                    23:9c:74:76:c4:c5:41:05:89:f8:fd:9e:eb:df:e5:
                    46:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1F:EA:24:D6:CD:11:ED:2C:A4:82:B3:E2:5B:52:C4:DB:52:DB:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/238cb02c-c33b-3f84-96e1-2d34f4784498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8116::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:24:53:4a:8a:a3:7b:98:7a:5a:28:fc:13:03:95:77:98:42:
         25:f0:60:06:59:29:3f:a8:f0:98:9e:ca:f0:77:1c:fa:f9:48:
         68:71:48:64:07:2e:c2:13:f4:2a:a7:47:31:35:11:bc:94:08:
         05:f2:9e:ea:8c:e8:cc:c0:4c:15:43:42:e2:3d:67:a1:35:f1:
         c8:71:6b:33:01:6b:07:17:48:76:69:fc:56:72:d1:d3:54:3c:
         0d:e8:3d:c3:c6:c6:52:21:26:9b:ad:5a:98:5e:15:30:cf:8b:
         e1:df:b9:a2:f1:87:6e:00:fa:27:aa:74:d7:05:08:19:d4:36:
         ab:d0:66:e3:8b:49:51:54:6c:c0:8f:eb:f7:ce:d4:10:53:49:
         78:01:31:a3:d9:39:81:92:c3:cf:ee:bd:0a:8e:64:7b:d9:84:
         3c:7c:26:b1:03:59:2a:62:e2:5f:d5:03:5f:fd:76:e7:b3:c9:
         21:70:10:76:b7:6d:bb:47:41:3b:e2:de:33:29:db:6b:8d:3a:
         b7:f3:e3:1b:00:24:ae:7c:96:47:2e:13:81:25:62:b4:91:70:
         d0:e0:f7:93:6b:68:20:d6:3e:3d:0c:52:31:1a:a4:c6:34:f9:
         a8:01:a6:c7:b1:74:96:79:a9:69:79:96:54:44:8b:2b:24:24:
         4c:df:cc:a0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVfwu3JAN9noFKDKMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
MmU2MGEyMjYtMDdjYy00ZGYyLTgxZjYtMzg5YzQwNTM1NTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiihUJVkmR5tYvpBIA8uzp66p4vBy4f6hoBP
pHLATrpMv9p3qvcqDKlP1R4/hRKStHJ1tZAGvLClpAL0DnWg+8CvCxFBBB2NbuV+
uQvM9VXVQP+5YUGyLeCJTwmjhfzz91lhvqvh1qt+w5QQZjiCa6qNp3Yae92DQjGn
4cDTAmbS2qHStVvGhaszrwBZvnVLEbbTQTRHlVNDETG8lW3H/oU5X0GjH8KZl+6h
hKBw7yr9PdGZvGnqtZskURCelUbbt7lM6BuYDb+jBsxsowzhZLBZS8vAW3UcwyTX
287egThi/X4Gg9vP+vU6tcURl+EjnHR2xMVBBYn4/Z7r3+VGnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCUf6iTWzRHtLKSCs+JbUsTbUtv5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMjM4Y2IwMmMtYzMzYi0z
Zjg0LTk2ZTEtMmQzNGY0Nzg0NDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYEW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABkkU0qKo3uYeloo/BMDlXeYQiXwYAZZKT+o8JieyvB3HPr5SGhx
SGQHLsIT9CqnRzE1EbyUCAXynuqM6MzATBVDQuI9Z6E18chxazMBawcXSHZp/FZy
0dNUPA3oPcPGxlIhJputWpheFTDPi+HfuaLxh24A+ieqdNcFCBnUNqvQZuOLSVFU
bMCP6/fO1BBTSXgBMaPZOYGSw8/uvQqOZHvZhDx8JrEDWSpi4l/VA1/9duezySFw
EHa3bbtHQTvi3jMp22uNOrfz4xsAJK58lkcuE4ElYrSRcNDg95NraCDWPj0MUjEa
pMY0+agBpsexdJZ5qWl5llREiyskJEzfzKA=
-----END CERTIFICATE-----
Generated at Fri May 10 08:52:04 2024 by rpki-client on console-fra.rpki-client.org