Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/33cd0e6b-8fee-3b3f-a20e-d7204aa76efd.roa
File:                     33cd0e6b-8fee-3b3f-a20e-d7204aa76efd.roa (raw, json)
Hash identifier:          DHiJFfvHF8DB8fMoGTrLD+8EznDO8v+/WIzmjSGsJVA=
Subject key identifier:   A2:99:E6:E6:23:7C:F1:4F:40:E3:EE:E7:5B:0E:4A:A9:B2:E0:5D:51
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2F9CCE83F75685699B780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/33cd0e6b-8fee-3b3f-a20e-d7204aa76efd.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:88fc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:f9:cc:e8:3f:75:68:56:99:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=42f25d67-ba0c-4d82-bd1f-8c2c8bda8cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:08:59:ba:d8:0c:33:cb:e4:9d:73:ff:aa:ab:
                    a8:1e:ce:42:ab:a2:41:f2:06:19:d9:c0:49:88:97:
                    fb:3c:9b:2b:1a:e3:5e:82:83:f9:de:70:b3:cc:97:
                    5c:b6:0d:ee:03:a8:ba:7f:45:ed:02:8c:7a:08:0a:
                    8f:76:b9:b5:0e:e7:34:b5:f4:a8:d7:7a:54:38:61:
                    cf:18:0e:4c:e9:50:3f:65:5d:43:d8:c4:4a:4f:d3:
                    d3:5f:ea:8a:01:89:94:cf:95:7a:23:53:0b:88:bf:
                    b3:ba:b5:d8:c1:cd:c9:92:b2:16:72:14:7f:27:48:
                    13:02:00:ff:79:33:32:9e:37:2c:b3:d7:fa:ba:71:
                    12:eb:8a:df:41:34:a3:c5:ee:0b:03:e7:4e:46:a8:
                    71:3a:4a:ef:60:c8:52:5d:05:cf:e7:e3:50:1a:60:
                    01:4f:6b:d5:c7:f2:eb:71:a7:e3:e4:83:14:e5:4a:
                    1a:f6:79:30:37:a8:ec:c7:fc:71:97:80:06:5c:24:
                    18:70:62:72:df:37:81:d7:c1:83:98:6f:bb:5d:49:
                    cd:29:c7:0a:ce:25:6b:2e:cf:cb:0a:49:78:6f:7b:
                    7d:c3:f6:1d:fa:82:1b:f7:34:81:8e:d4:dc:ee:82:
                    1d:15:56:49:ac:06:2e:60:23:63:5a:26:26:34:77:
                    bd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:99:E6:E6:23:7C:F1:4F:40:E3:EE:E7:5B:0E:4A:A9:B2:E0:5D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/33cd0e6b-8fee-3b3f-a20e-d7204aa76efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:88fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:65:1e:2a:78:9c:ad:ff:fd:d8:0d:77:32:e1:70:70:19:cd:
         e0:a9:f5:3c:5b:44:85:07:c6:2f:3e:0c:86:77:3b:d9:ae:fa:
         2e:68:8c:fc:7f:f7:c0:ca:d4:56:9e:29:a9:c0:d1:31:6b:4c:
         05:b9:a4:bd:97:40:e3:9f:93:d1:8d:23:03:dd:5a:fa:08:d8:
         ad:bf:fc:5e:cf:1d:04:97:79:3d:de:8b:b1:e0:6f:28:04:a6:
         82:74:bd:a1:fe:19:47:b1:6c:9f:5d:d7:09:32:66:07:39:f2:
         70:2d:50:c1:fb:62:1b:78:62:2f:74:52:64:c5:40:e4:e7:ab:
         e7:db:90:0f:66:42:a4:a2:f4:f9:2b:72:71:28:59:d3:6b:c0:
         ee:0c:34:90:f8:97:c5:c3:ad:47:39:b5:35:d5:b2:f0:80:79:
         33:d8:91:e5:7b:86:9a:a8:f8:d8:09:a6:d2:70:2d:89:f5:99:
         0f:16:2d:43:56:43:df:06:d2:bf:fe:65:18:1e:c4:92:b4:44:
         f1:7f:2a:f5:5b:c6:6f:be:9b:77:09:e1:d1:b8:d1:dd:13:8d:
         3f:2c:46:4f:6f:04:0a:74:00:25:98:8d:28:05:f2:0c:c1:fe:
         55:da:7b:2c:2c:31:bc:05:7f:d6:bb:fa:95:a9:a7:2f:14:f1:
         73:66:51:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVfwvnM6D91aFaZt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
NDJmMjVkNjctYmEwYy00ZDgyLWJkMWYtOGMyYzhiZGE4Y2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAhZutgMM8vknXP/qquoHs5Cq6JB8gYZ2cBJ
iJf7PJsrGuNegoP53nCzzJdctg3uA6i6f0XtAox6CAqPdrm1Duc0tfSo13pUOGHP
GA5M6VA/ZV1D2MRKT9PTX+qKAYmUz5V6I1MLiL+zurXYwc3JkrIWchR/J0gTAgD/
eTMynjcss9f6unES64rfQTSjxe4LA+dORqhxOkrvYMhSXQXP5+NQGmABT2vVx/Lr
cafj5IMU5Uoa9nkwN6jsx/xxl4AGXCQYcGJy3zeB18GDmG+7XUnNKccKziVrLs/L
Ckl4b3t9w/Yd+oIb9zSBjtTc7oIdFVZJrAYuYCNjWiYmNHe9VQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKKZ5uYjfPFPQOPu51sOSqmy4F1RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMzNjZDBlNmItOGZlZS0z
YjNmLWEyMGUtZDcyMDRhYTc2ZWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYj8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADJlHip4nK3//dgNdzLhcHAZzeCp9TxbRIUHxi8+DIZ3O9mu+i5o
jPx/98DK1FaeKanA0TFrTAW5pL2XQOOfk9GNIwPdWvoI2K2//F7PHQSXeT3ei7Hg
bygEpoJ0vaH+GUexbJ9d1wkyZgc58nAtUMH7Yht4Yi90UmTFQOTnq+fbkA9mQqSi
9PkrcnEoWdNrwO4MNJD4l8XDrUc5tTXVsvCAeTPYkeV7hpqo+NgJptJwLYn1mQ8W
LUNWQ98G0r/+ZRgexJK0RPF/KvVbxm++m3cJ4dG40d0TjT8sRk9vBAp0ACWYjSgF
8gzB/lXaeywsMbwFf9a7+pWppy8U8XNmURk=
-----END CERTIFICATE-----
Generated at Fri May 10 08:52:04 2024 by rpki-client on console-fra.rpki-client.org