Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/353d67f1-5165-3252-ab00-1af7d0ea28a3.roa
File:                     353d67f1-5165-3252-ab00-1af7d0ea28a3.roa (raw, json)
Hash identifier:          M5ND/k41LthrZplR8VmcT+7hhrwSsf0xyhjuzdMkX+k=
Subject key identifier:   E9:24:DB:7B:5D:F4:6A:02:4F:02:0A:A0:B0:C5:B7:71:D6:04:60:FB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2FB2EDEEBF7123B63F660
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/353d67f1-5165-3252-ab00-1af7d0ea28a3.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2603:903e:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:fb:2e:de:eb:f7:12:3b:63:f6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=9a2cd0cf-dfb1-442b-b2e6-a05038d907b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5b:cd:ec:05:fe:e7:e5:40:a3:66:73:e2:bc:
                    45:84:13:a2:82:74:48:e0:80:56:40:4d:76:a5:40:
                    41:d7:27:e7:14:16:d7:03:14:e2:d7:6d:fd:f3:07:
                    25:64:5a:21:14:b0:77:37:b7:34:b3:cb:e2:61:b3:
                    b5:2e:57:4d:d5:d5:5d:c0:39:d5:5f:13:7b:8a:91:
                    ed:15:ed:57:11:21:0b:fe:d8:9c:51:10:8a:72:0d:
                    84:24:9d:95:e0:a9:b7:d5:72:09:43:6f:46:78:a4:
                    cc:ed:d8:4b:b6:67:cf:27:5a:17:0c:4b:b8:7e:bd:
                    d9:c1:3b:91:d4:39:ad:f3:81:10:dc:93:fd:bd:1e:
                    13:8c:3b:33:a0:24:0c:b7:5d:27:f4:3a:cf:c9:95:
                    98:6c:39:50:da:c0:1c:4a:ad:62:42:8b:41:30:e8:
                    d2:6a:e5:99:03:e4:7c:2e:66:57:89:ab:2e:78:eb:
                    ca:c6:d3:75:70:8b:fe:39:c4:52:be:75:c8:6c:cf:
                    20:9a:a5:aa:6e:aa:ca:8f:43:de:13:84:e7:ee:79:
                    3d:fa:1e:0d:9b:1d:43:8f:89:d7:cc:c7:e9:31:66:
                    dd:2c:11:bc:f9:60:9b:23:01:5a:8c:b5:1a:0a:0d:
                    0f:a0:d1:6f:d7:d9:ba:b7:87:f9:78:ef:5b:81:33:
                    2f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:24:DB:7B:5D:F4:6A:02:4F:02:0A:A0:B0:C5:B7:71:D6:04:60:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/353d67f1-5165-3252-ab00-1af7d0ea28a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:903e:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:51:df:d6:a3:aa:cd:e2:41:3e:33:18:3f:bd:d4:25:05:99:
         ee:7d:e2:73:93:2c:6a:2b:14:20:d8:02:d9:57:56:3c:fa:cc:
         00:c7:66:5b:51:a3:ca:6c:36:42:7e:c7:67:44:2b:05:6d:0e:
         86:aa:21:c1:0b:01:2b:94:ce:ac:e9:52:7e:c7:43:76:0d:26:
         52:e0:de:93:b9:e1:cd:1e:e6:85:24:b6:a5:01:8e:a9:38:75:
         74:9c:ef:37:97:81:78:da:35:c8:b0:a9:7b:2f:6f:00:b8:b8:
         20:d7:74:11:44:52:17:f2:50:eb:3b:fc:68:15:33:f7:07:4a:
         c9:b9:3d:ef:0d:b8:03:96:61:65:4d:28:df:b9:14:53:b1:80:
         0b:1b:31:cd:7f:b7:bc:cc:c0:58:17:bf:9b:3a:84:91:b8:a3:
         d6:9c:bb:f7:84:28:a5:59:b4:11:8b:a2:3a:59:c6:c4:26:de:
         22:e5:49:8a:05:db:8f:73:d8:72:af:8e:b2:19:55:e0:5d:2d:
         32:22:20:c4:a5:35:cc:42:46:2d:bf:f1:61:08:ed:74:d8:de:
         40:d3:63:79:a3:5b:95:65:91:a6:81:c3:f7:6a:f1:60:c9:55:
         20:56:95:24:05:29:af:90:60:7d:51:d8:fe:f6:86:02:dd:bc:
         19:ec:7d:1c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVfwvsu3uv3Ejtj9mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
OWEyY2QwY2YtZGZiMS00NDJiLWIyZTYtYTA1MDM4ZDkwN2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFvN7AX+5+VAo2Zz4rxFhBOignRI4IBWQE12
pUBB1yfnFBbXAxTi12398wclZFohFLB3N7c0s8viYbO1LldN1dVdwDnVXxN7ipHt
Fe1XESEL/ticURCKcg2EJJ2V4Km31XIJQ29GeKTM7dhLtmfPJ1oXDEu4fr3ZwTuR
1Dmt84EQ3JP9vR4TjDszoCQMt10n9DrPyZWYbDlQ2sAcSq1iQotBMOjSauWZA+R8
LmZXiasueOvKxtN1cIv+OcRSvnXIbM8gmqWqbqrKj0PeE4Tn7nk9+h4Nmx1Dj4nX
zMfpMWbdLBG8+WCbIwFajLUaCg0PoNFv19m6t4f5eO9bgTMvhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOkk23td9GoCTwIKoLDFt3HWBGD7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMzUzZDY3ZjEtNTE2NS0z
MjUyLWFiMDAtMWFmN2QwZWEyOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgOQPgAI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFdR39ajqs3iQT4zGD+91CUFme594nOTLGorFCDYAtlXVjz6zADH
ZltRo8psNkJ+x2dEKwVtDoaqIcELASuUzqzpUn7HQ3YNJlLg3pO54c0e5oUktqUB
jqk4dXSc7zeXgXjaNciwqXsvbwC4uCDXdBFEUhfyUOs7/GgVM/cHSsm5Pe8NuAOW
YWVNKN+5FFOxgAsbMc1/t7zMwFgXv5s6hJG4o9acu/eEKKVZtBGLojpZxsQm3iLl
SYoF249z2HKvjrIZVeBdLTIiIMSlNcxCRi2/8WEI7XTY3kDTY3mjW5VlkaaBw/dq
8WDJVSBWlSQFKa+QYH1R2P72hgLdvBnsfRw=
-----END CERTIFICATE-----
Generated at Thu May 9 15:23:32 2024 by rpki-client on console-ams.rpki-client.org