Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3814af87-34eb-3d1b-b0d2-adee47219f87.roa
File:                     3814af87-34eb-3d1b-b0d2-adee47219f87.roa (raw, json)
Hash identifier:          64HAjpkKnz/2gi0QDM/6oGkf4cve6YLbT6V2KbVj3LQ=
Subject key identifier:   34:25:A6:3E:0E:AE:6B:8B:BD:89:C4:CE:DE:D8:97:47:66:05:46:6D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2F275F2433BE71FE33910
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3814af87-34eb-3d1b-b0d2-adee47219f87.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8030::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:f2:75:f2:43:3b:e7:1f:e3:39:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=bd6d8a76-14dd-4c9b-8092-9f4fc3e7e33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:97:f1:3f:c5:f5:b7:14:88:b4:21:b8:95:
                    ed:30:1f:4f:62:3c:8e:78:68:6f:87:44:05:87:d1:
                    02:b9:22:6f:18:e1:8c:cb:72:b9:24:fe:3a:48:40:
                    95:b1:ac:5f:84:07:6a:73:f9:37:30:c8:b7:3c:fb:
                    b0:d3:b9:c6:12:cb:00:b9:6f:34:b9:09:10:df:c3:
                    c0:57:b9:65:53:4a:f7:4b:7d:e9:c3:c5:d4:81:d6:
                    6d:11:bd:4f:7e:9d:13:24:e8:66:8b:bf:a4:9a:10:
                    87:37:76:0c:aa:bb:b6:0a:4e:ef:f7:ce:f5:fa:fc:
                    36:cc:4e:28:e4:ee:68:8c:b0:d5:2a:c4:40:28:e9:
                    00:06:94:eb:b9:0c:0d:86:fb:dc:52:41:52:20:5d:
                    b9:6f:83:64:e2:56:9b:f3:d1:f8:1e:51:64:a7:d0:
                    9b:96:90:fc:8c:db:1e:4b:f2:0b:28:b4:ad:70:25:
                    f9:05:bd:ee:22:1c:d6:a9:16:ec:aa:54:81:ac:d4:
                    f0:d4:8d:5c:0c:16:40:50:75:94:c7:db:f2:32:66:
                    2b:48:00:6d:68:35:7e:e6:29:d5:e8:af:02:56:69:
                    e3:18:4d:ae:34:a7:fe:1b:c7:79:f7:be:8c:1d:53:
                    f1:34:6e:a0:54:6c:de:12:fe:d1:04:e2:e3:91:48:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:25:A6:3E:0E:AE:6B:8B:BD:89:C4:CE:DE:D8:97:47:66:05:46:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3814af87-34eb-3d1b-b0d2-adee47219f87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8030::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3b:fe:bb:56:ff:f4:54:9b:4b:df:72:49:1d:41:79:11:fe:
         73:a6:66:16:a8:36:88:77:4e:e5:d9:e7:d6:af:a7:3e:29:64:
         e6:72:99:83:c1:a9:ba:92:70:bd:bd:b0:d6:71:4a:c7:ef:75:
         e4:f4:22:50:5c:b4:50:88:ec:e7:7c:8c:63:fe:bf:48:e1:d4:
         3e:a7:05:99:63:98:7a:19:53:a6:c8:f0:ac:38:6b:75:c4:9c:
         3f:ae:e0:8e:a4:dd:9e:4b:1c:62:8f:55:be:8b:91:79:7a:fd:
         18:bf:19:d3:09:32:90:90:6f:06:22:0e:15:7a:b0:de:a2:73:
         75:dd:1d:a3:eb:6b:d7:29:58:b5:05:b5:2d:27:31:2f:ea:2d:
         a7:23:5d:48:74:54:bf:bc:b0:2b:64:a6:c4:2d:d0:08:97:a3:
         8d:ee:ba:36:f7:77:ac:d7:4f:b8:fd:53:2d:c2:1c:da:03:8c:
         ca:d1:49:04:1e:0c:c4:41:fc:00:e8:2d:38:59:71:d0:ef:6a:
         8e:85:94:1f:f5:47:84:b3:df:77:21:4d:f1:ac:c2:b3:04:a2:
         0b:8f:86:17:95:62:4b:80:7a:2f:30:a0:35:e3:36:d7:05:b5:
         93:ef:fe:2d:cb:90:a8:5c:8b:00:ba:c0:85:9f:b6:bc:5d:a8:
         e0:11:96:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVfwvJ18kM75x/jORAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
YmQ2ZDhhNzYtMTRkZC00YzliLTgwOTItOWY0ZmMzZTdlMzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7iX8T/F9bcUiLQhuJXtMB9PYjyOeGhvh0QF
h9ECuSJvGOGMy3K5JP46SECVsaxfhAdqc/k3MMi3PPuw07nGEssAuW80uQkQ38PA
V7llU0r3S33pw8XUgdZtEb1Pfp0TJOhmi7+kmhCHN3YMqru2Ck7v9871+vw2zE4o
5O5ojLDVKsRAKOkABpTruQwNhvvcUkFSIF25b4Nk4lab89H4HlFkp9CblpD8jNse
S/ILKLStcCX5Bb3uIhzWqRbsqlSBrNTw1I1cDBZAUHWUx9vyMmYrSABtaDV+5inV
6K8CVmnjGE2uNKf+G8d5976MHVPxNG6gVGzeEv7RBOLjkUiyZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDQlpj4OrmuLvYnEzt7Yl0dmBUZtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMzgxNGFmODctMzRlYi0z
ZDFiLWIwZDItYWRlZTQ3MjE5Zjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFg7/rtW//RUm0vfckkdQXkR/nOmZhaoNoh3TuXZ59avpz4pZOZy
mYPBqbqScL29sNZxSsfvdeT0IlBctFCI7Od8jGP+v0jh1D6nBZljmHoZU6bI8Kw4
a3XEnD+u4I6k3Z5LHGKPVb6LkXl6/Ri/GdMJMpCQbwYiDhV6sN6ic3XdHaPra9cp
WLUFtS0nMS/qLacjXUh0VL+8sCtkpsQt0AiXo43uujb3d6zXT7j9Uy3CHNoDjMrR
SQQeDMRB/ADoLThZcdDvao6FlB/1R4Sz33chTfGswrMEoguPhheVYkuAei8woDXj
NtcFtZPv/i3LkKhciwC6wIWftrxdqOARlkQ=
-----END CERTIFICATE-----
Generated at Fri May 10 03:05:49 2024 by rpki-client on console-ams.rpki-client.org