Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aa628fb-c695-354c-b9b2-d19dd3190da8.roa
File:                     5aa628fb-c695-354c-b9b2-d19dd3190da8.roa (raw, json)
Hash identifier:          Vzke/Is3b+OnYyRr0s25nib4I8BCZVdlAmnFOl43wQ4=
Subject key identifier:   AD:87:B1:E3:EC:54:8A:C2:CC:78:3D:E9:B2:B6:89:8C:9B:E0:25:9A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5DF549AF60DCE44B4F980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aa628fb-c695-354c-b9b2-d19dd3190da8.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     19115
IP address blocks:        2603:90fb::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:df:54:9a:f6:0d:ce:44:b4:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=a131409b-3f2d-4466-8ac0-eefc534739b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:2a:3b:30:08:42:a1:61:2a:dc:36:a3:39:
                    fe:be:1c:31:9d:2d:aa:d1:5a:e3:07:0c:bb:be:61:
                    f3:69:80:a2:2f:1d:0a:e0:94:52:2a:17:08:3b:31:
                    8d:c9:16:45:b0:17:da:37:4c:fd:28:46:69:17:15:
                    97:22:e4:a0:36:a8:71:56:02:f1:7b:31:6b:d0:7e:
                    7e:a8:4b:38:4c:35:d5:2d:c3:e2:da:46:0c:47:9c:
                    b9:61:42:d1:35:85:c4:b9:50:eb:0b:93:9c:f8:60:
                    89:ca:fd:d1:77:11:02:c8:2b:24:ea:e9:db:d6:b0:
                    e2:c2:5c:5f:cc:c0:4a:38:7d:3b:16:7a:c4:a0:ea:
                    93:41:fa:85:bb:cd:9d:30:30:da:e1:d0:f2:1b:92:
                    4e:d4:54:12:67:c9:39:7f:17:53:24:4e:c7:65:f0:
                    29:fa:72:96:30:8f:36:06:78:b8:63:4f:e9:f9:38:
                    9b:9a:e7:55:f9:bd:51:b9:f2:d3:47:ab:b3:f6:3b:
                    d2:b4:a5:f6:48:a4:37:a0:7f:57:89:d8:27:96:a6:
                    3e:c4:b6:90:a9:90:35:c3:00:60:0e:95:0d:b3:f8:
                    4c:b3:7d:4d:bc:a4:0e:ae:1e:70:4e:5a:27:0b:4b:
                    7c:bd:4a:44:49:4e:41:b7:1b:51:34:11:66:2e:80:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:87:B1:E3:EC:54:8A:C2:CC:78:3D:E9:B2:B6:89:8C:9B:E0:25:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aa628fb-c695-354c-b9b2-d19dd3190da8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90fb::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:75:64:fd:16:24:c3:e1:84:0f:4a:88:55:a9:39:33:d8:79:
         c3:b8:69:25:d7:08:36:47:a8:58:fb:e1:3c:89:a4:a9:f0:6f:
         27:62:04:18:14:c8:aa:ef:c4:9b:cb:5f:dd:e8:7c:db:59:b8:
         53:16:91:44:de:d9:dc:92:10:d8:90:08:7a:bf:c1:dc:28:d4:
         63:b8:96:b2:93:d0:1e:a4:73:db:d0:f0:53:90:a0:33:32:0b:
         dc:41:e2:0a:e3:00:9e:93:ef:2a:31:9e:b5:82:05:eb:d6:93:
         01:35:12:2c:4e:83:1d:34:6b:b9:37:07:0c:5d:05:00:dc:1e:
         6e:b3:78:16:b1:0f:db:b9:6b:0f:17:cb:dc:87:bc:ee:84:e3:
         54:0c:59:bf:25:dd:ba:d1:ff:a8:ba:c8:89:02:74:3b:51:62:
         9e:88:41:49:64:18:f7:81:4d:62:6e:de:90:26:ed:ee:6d:e7:
         c7:1d:20:f9:3d:0a:aa:db:f6:c9:06:dc:f7:23:93:5d:81:c9:
         0a:b3:d9:97:41:ab:40:e2:29:7f:b5:be:76:e2:33:2a:5d:be:
         41:09:e7:0c:81:9d:94:20:fc:ea:5d:d4:94:35:e4:d3:5d:71:
         3c:52:be:37:51:ce:d7:95:84:48:bb:5c:8b:e3:19:80:06:14:
         3b:71:60:42
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcf1d9UmvYNzkS0+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
YTEzMTQwOWItM2YyZC00NDY2LThhYzAtZWVmYzUzNDczOWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucoqOzAIQqFhKtw2ozn+vhwxnS2q0VrjBwy7
vmHzaYCiLx0K4JRSKhcIOzGNyRZFsBfaN0z9KEZpFxWXIuSgNqhxVgLxezFr0H5+
qEs4TDXVLcPi2kYMR5y5YULRNYXEuVDrC5Oc+GCJyv3RdxECyCsk6unb1rDiwlxf
zMBKOH07FnrEoOqTQfqFu82dMDDa4dDyG5JO1FQSZ8k5fxdTJE7HZfAp+nKWMI82
Bni4Y0/p+TibmudV+b1RufLTR6uz9jvStKX2SKQ3oH9XidgnlqY+xLaQqZA1wwBg
DpUNs/hMs31NvKQOrh5wTlonC0t8vUpESU5BtxtRNBFmLoCKcQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK2HsePsVIrCzHg96bK2iYyb4CWaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNWFhNjI4ZmItYzY5NS0z
NTRjLWI5YjItZDE5ZGQzMTkwZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgOQ+wAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFh1ZP0WJMPhhA9KiFWpOTPYecO4aSXXCDZHqFj74TyJpKnwbydi
BBgUyKrvxJvLX93ofNtZuFMWkUTe2dySENiQCHq/wdwo1GO4lrKT0B6kc9vQ8FOQ
oDMyC9xB4grjAJ6T7yoxnrWCBevWkwE1EixOgx00a7k3BwxdBQDcHm6zeBaxD9u5
aw8Xy9yHvO6E41QMWb8l3brR/6i6yIkCdDtRYp6IQUlkGPeBTWJu3pAm7e5t58cd
IPk9Cqrb9skG3Pcjk12ByQqz2ZdBq0DiKX+1vnbiMypdvkEJ5wyBnZQg/Opd1JQ1
5NNdcTxSvjdRzteVhEi7XIvjGYAGFDtxYEI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org