Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28352ecf-76b8-3a18-95b9-876eb61658a3.roa
File:                     28352ecf-76b8-3a18-95b9-876eb61658a3.roa (raw, json)
Hash identifier:          bK4vAn9UFrUszlZvlHsRhzOXD5raY3DoEkvvYs0Do1w=
Subject key identifier:   DC:2F:6B:F6:F4:DB:C0:4A:5D:0C:56:87:6C:DC:B1:E9:D2:42:B4:8E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838EC488DFABEC7D3CCEBB90920
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28352ecf-76b8-3a18-95b9-876eb61658a3.roa
Signing time:             Fri 12 Feb 2021 05:00:00 +0000
ROA not before:           Fri 12 Feb 2021 05:00:00 +0000
ROA not after:            Fri 05 Feb 2027 05:00:00 +0000
asID:                     11427
IP address blocks:        2603:90bc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ec:48:8d:fa:be:c7:d3:cc:eb:b9:09:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 12 05:00:00 2021 GMT
            Not After : Feb  5 05:00:00 2027 GMT
        Subject: CN=cf701f3c-4a0a-46dc-b062-272bd12740d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:77:01:70:26:87:bc:8f:df:1a:d2:48:c1:20:
                    21:2c:93:e6:4b:2a:77:9d:2f:a0:42:c7:c7:fd:31:
                    d7:f8:1b:ac:ae:d8:45:35:d1:59:95:cd:8d:4a:97:
                    d2:c8:2e:85:fa:e1:67:77:98:f6:df:21:84:dc:6b:
                    51:75:79:4b:76:25:76:aa:93:b2:54:93:8a:bd:85:
                    64:12:b9:5c:c0:ca:64:70:5f:4c:d1:67:a9:81:14:
                    50:29:f6:64:65:2d:4f:25:06:19:77:80:e2:ec:cb:
                    ef:41:5b:5c:15:36:81:c6:5c:ca:a0:6a:45:a1:2b:
                    b0:f2:d1:9a:47:f8:dd:78:b7:15:55:d3:2d:0f:9d:
                    fe:6f:51:f7:d9:d7:59:f2:f2:00:fd:6b:d6:47:ad:
                    07:56:44:e5:76:1e:0c:ff:b5:b5:91:96:42:8b:54:
                    21:8b:55:1f:17:f4:12:e8:09:2a:ef:4b:33:df:4c:
                    cc:e8:05:69:81:dd:30:cb:c6:6e:66:f7:33:aa:de:
                    50:c5:95:d1:5e:a9:ac:5a:bf:45:f6:48:08:ec:cb:
                    b2:79:c5:ce:09:f6:3d:81:0e:e7:b8:a3:75:c6:6d:
                    04:6d:27:34:b8:c8:b9:86:bd:04:3b:79:a2:b0:f6:
                    3a:47:83:d0:1e:ea:ad:ab:5e:8b:d9:00:63:9e:71:
                    23:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2F:6B:F6:F4:DB:C0:4A:5D:0C:56:87:6C:DC:B1:E9:D2:42:B4:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28352ecf-76b8-3a18-95b9-876eb61658a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90bc::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a6:33:05:3f:1a:07:aa:d3:e1:90:ad:8c:5c:af:1d:46:93:
         95:81:80:f9:df:6e:85:6f:11:bf:0f:8b:5a:35:63:9b:2f:4d:
         72:2c:90:c2:d7:84:e1:f0:82:4f:b3:da:73:03:fc:d2:1d:95:
         31:c9:e0:8a:af:02:fe:28:d1:6d:d9:72:02:44:c8:01:79:29:
         c7:ba:6c:51:03:4d:6e:bb:16:7a:33:a7:5a:23:d3:24:1c:9e:
         5e:5b:42:77:44:6c:57:bd:28:ed:d9:69:43:bd:bb:2b:c8:6e:
         21:ff:70:54:5f:b7:88:8b:c8:60:e4:86:2f:a2:d6:b8:22:16:
         10:54:5d:db:37:a0:a3:70:3b:9d:1d:bc:1e:48:60:ec:84:66:
         f7:fa:ca:c0:85:7b:65:36:c4:78:08:44:00:9d:ec:c0:30:2c:
         0e:0c:ce:0c:96:df:d4:e4:02:a7:5c:ad:e0:a7:a1:a4:13:6c:
         79:af:b8:18:72:40:a9:9e:39:ee:be:b7:08:29:9d:b6:8c:b7:
         12:d1:86:34:ae:d4:a5:9e:4f:c6:a1:32:89:07:47:d9:b5:39:
         0b:69:f9:be:fa:ba:7f:4c:a8:61:61:ac:fb:a1:0f:f3:7b:5d:
         f4:7f:e0:96:df:56:b4:0c:7a:b9:27:83:8b:94:90:5f:93:64:
         82:9f:ec:d2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWDjsSI36vsfTzOu5CSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDIxMjA1MDAwMFoXDTI3MDIwNTA1MDAwMFowLzEtMCsGA1UEAxMk
Y2Y3MDFmM2MtNGEwYS00NmRjLWIwNjItMjcyYmQxMjc0MGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHcBcCaHvI/fGtJIwSAhLJPmSyp3nS+gQsfH
/THX+BusrthFNdFZlc2NSpfSyC6F+uFnd5j23yGE3GtRdXlLdiV2qpOyVJOKvYVk
ErlcwMpkcF9M0WepgRRQKfZkZS1PJQYZd4Di7MvvQVtcFTaBxlzKoGpFoSuw8tGa
R/jdeLcVVdMtD53+b1H32ddZ8vIA/WvWR60HVkTldh4M/7W1kZZCi1Qhi1UfF/QS
6Akq70sz30zM6AVpgd0wy8ZuZvczqt5QxZXRXqmsWr9F9kgI7MuyecXOCfY9gQ7n
uKN1xm0EbSc0uMi5hr0EO3misPY6R4PQHuqtq16L2QBjnnEjDwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNwva/b028BKXQxWh2zcsenSQrSOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMjgzNTJlY2YtNzZiOC0z
YTE4LTk1YjktODc2ZWI2MTY1OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgOQvDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCFpjMFPxoHqtPhkK2MXK8dRpOVgYD5326FbxG/D4taNWObL01yLJDC
14Th8IJPs9pzA/zSHZUxyeCKrwL+KNFt2XICRMgBeSnHumxRA01uuxZ6M6daI9Mk
HJ5eW0J3RGxXvSjt2WlDvbsryG4h/3BUX7eIi8hg5IYvota4IhYQVF3bN6CjcDud
HbweSGDshGb3+srAhXtlNsR4CEQAnezAMCwODM4Mlt/U5AKnXK3gp6GkE2x5r7gY
ckCpnjnuvrcIKZ22jLcS0YY0rtSlnk/GoTKJB0fZtTkLafm++rp/TKhhYaz7oQ/z
e130f+CW31a0DHq5J4OLlJBfk2SCn+zS
-----END CERTIFICATE-----
Generated at Thu May 9 15:34:10 2024 by rpki-client on console-fra.rpki-client.org