Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2fbd89a2-df02-3e7c-96ef-206ad88e9b87.roa
File:                     2fbd89a2-df02-3e7c-96ef-206ad88e9b87.roa (raw, json)
Hash identifier:          Z8ynZlvfBaCmKye7iyA6utIjojb8ml5M0xQh84/Hh6o=
Subject key identifier:   36:4E:39:C0:2D:06:E9:96:0E:93:EF:9F:8A:4E:7E:67:1D:48:F2:72
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2F03A142B6C0237330980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2fbd89a2-df02-3e7c-96ef-206ad88e9b87.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:832c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:f0:3a:14:2b:6c:02:37:33:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=c541233d-fd44-40df-974f-68bbd9c2ad9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:f7:a4:14:de:cd:16:29:4a:1a:80:4a:03:
                    d9:f0:30:94:46:ee:fa:18:5a:4f:44:91:7a:11:10:
                    56:9b:a2:f4:5f:b3:38:d4:b8:a9:29:df:eb:36:02:
                    26:00:b8:79:dd:3c:1f:c1:e7:99:55:4c:61:41:28:
                    6b:f0:76:1f:d1:cb:5e:e4:ae:6e:71:53:a0:84:8f:
                    e9:96:7c:80:15:8c:d8:53:5b:a3:bf:93:28:22:78:
                    e5:95:27:c4:04:b8:ed:33:b4:79:0f:8b:30:a2:39:
                    52:69:29:55:c1:56:64:1a:78:8b:4b:f9:1d:ac:90:
                    f5:7e:dc:84:5a:df:c4:91:b9:c9:48:60:b7:92:89:
                    d3:00:62:80:a6:d4:0c:87:93:78:24:47:c7:9f:9b:
                    70:32:a5:c4:b7:7f:ee:45:86:f8:48:9a:d9:74:2a:
                    93:fa:12:56:3f:d8:8d:42:07:59:e6:18:70:86:1d:
                    a6:01:b5:1d:b0:21:72:ca:f2:f0:d0:e3:70:3a:44:
                    91:c4:ff:6f:c7:b1:48:6c:c4:f8:d3:40:33:33:5d:
                    5d:2a:20:34:1b:b4:8c:14:49:93:b8:95:a1:dd:d8:
                    56:42:0f:4b:0c:4e:0c:b2:6f:9b:a4:a7:1b:09:6d:
                    41:40:71:aa:fb:09:d5:aa:39:f5:49:29:a7:75:a4:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4E:39:C0:2D:06:E9:96:0E:93:EF:9F:8A:4E:7E:67:1D:48:F2:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2fbd89a2-df02-3e7c-96ef-206ad88e9b87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:832c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:1f:47:fe:4c:57:0f:17:53:65:54:01:8e:94:82:b9:f3:e5:
         79:d9:96:2b:53:60:05:bb:96:17:c3:1e:8e:77:c8:1e:87:1d:
         ce:f6:e4:e6:00:e3:8c:98:12:41:f4:eb:4f:6c:65:84:27:0c:
         a8:90:64:77:e7:e0:4e:60:0d:dc:32:3e:1e:39:e1:84:87:f0:
         aa:e5:ae:bd:79:d7:a6:74:cb:88:f2:fb:b1:e5:51:26:b2:e2:
         e4:d0:56:b2:21:cc:49:05:f6:76:b5:6e:46:ec:c4:fd:70:d9:
         76:44:12:2e:43:1a:5f:d9:01:11:67:a7:53:b5:8e:1a:64:f2:
         2c:93:fd:fa:80:59:08:4e:03:53:0c:c7:2e:98:c3:8b:57:c2:
         ee:ee:c9:ba:6f:70:df:4a:07:80:38:c7:f0:67:a0:31:d9:44:
         d3:82:d6:e4:0c:78:23:15:e0:20:3e:93:4b:4e:27:29:4f:b5:
         36:9c:01:bb:c4:57:3a:1a:3a:20:8b:98:b0:f1:14:bd:9e:25:
         57:ae:50:fd:4b:86:04:a0:e0:33:66:8a:dd:54:70:88:6d:59:
         40:06:da:c6:c5:60:61:85:d1:a5:ca:2e:83:91:76:d3:cd:bd:
         be:d1:12:66:3d:80:17:21:62:b6:50:bc:57:8b:d2:74:5f:c7:
         f7:c1:d6:01
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVfwvA6FCtsAjczCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
YzU0MTIzM2QtZmQ0NC00MGRmLTk3NGYtNjhiYmQ5YzJhZDlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFH3pBTezRYpShqASgPZ8DCURu76GFpPRJF6
ERBWm6L0X7M41LipKd/rNgImALh53TwfweeZVUxhQShr8HYf0cte5K5ucVOghI/p
lnyAFYzYU1ujv5MoInjllSfEBLjtM7R5D4swojlSaSlVwVZkGniLS/kdrJD1ftyE
Wt/EkbnJSGC3konTAGKAptQMh5N4JEfHn5twMqXEt3/uRYb4SJrZdCqT+hJWP9iN
QgdZ5hhwhh2mAbUdsCFyyvLw0ONwOkSRxP9vx7FIbMT400AzM11dKiA0G7SMFEmT
uJWh3dhWQg9LDE4Msm+bpKcbCW1BQHGq+wnVqjn1SSmndaSltQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDZOOcAtBumWDpPvn4pOfmcdSPJyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMmZiZDg5YTItZGYwMi0z
ZTdjLTk2ZWYtMjA2YWQ4OGU5Yjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYMs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJofR/5MVw8XU2VUAY6Ugrnz5XnZlitTYAW7lhfDHo53yB6HHc72
5OYA44yYEkH0609sZYQnDKiQZHfn4E5gDdwyPh454YSH8Krlrr1516Z0y4jy+7Hl
USay4uTQVrIhzEkF9na1bkbsxP1w2XZEEi5DGl/ZARFnp1O1jhpk8iyT/fqAWQhO
A1MMxy6Yw4tXwu7uybpvcN9KB4A4x/BnoDHZRNOC1uQMeCMV4CA+k0tOJylPtTac
AbvEVzoaOiCLmLDxFL2eJVeuUP1LhgSg4DNmit1UcIhtWUAG2sbFYGGF0aXKLoOR
dtPNvb7REmY9gBchYrZQvFeL0nRfx/fB1gE=
-----END CERTIFICATE-----
Generated at Fri May 10 17:25:06 2024 by rpki-client on console-fra.rpki-client.org