Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/759699ff-e8c9-3e7d-affb-6f9442d5d437.roa
File:                     759699ff-e8c9-3e7d-affb-6f9442d5d437.roa (raw, json)
Hash identifier:          wZ8KtPhrw4o5fKrbJhkfRH+JiDt/6OpynePJpq9Pgs8=
Subject key identifier:   C0:53:2A:EB:BC:1D:E3:CC:0B:75:30:9E:51:B1:DA:B6:97:73:73:3B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838EC488748173261295E8A5700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/759699ff-e8c9-3e7d-affb-6f9442d5d437.roa
Signing time:             Fri 12 Feb 2021 05:00:00 +0000
ROA not before:           Fri 12 Feb 2021 05:00:00 +0000
ROA not after:            Fri 05 Feb 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        2603:9007::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ec:48:87:48:17:32:61:29:5e:8a:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 12 05:00:00 2021 GMT
            Not After : Feb  5 05:00:00 2027 GMT
        Subject: CN=83ffc286-77fb-4d02-9e8c-94d9fbfd933b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c1:c3:72:94:95:63:e4:a9:ed:a6:5b:7f:0b:
                    0c:17:33:10:23:21:c6:b7:68:a8:c4:9e:f6:00:6c:
                    1a:dc:83:9c:4c:a1:31:95:d0:39:a9:3d:42:e5:a9:
                    ff:7e:6c:fa:e1:c4:f0:c5:81:2b:3e:d9:b4:67:fc:
                    dc:3f:f5:34:84:5a:98:50:6b:7b:bd:85:39:64:40:
                    20:d3:5a:49:ff:28:8b:09:3a:90:5f:8d:69:ad:75:
                    9e:42:d9:40:05:d2:28:80:e3:44:81:b5:5c:0a:58:
                    ce:38:ca:e2:ad:1c:a5:0e:89:8b:c2:ca:89:cd:cb:
                    eb:ce:5c:0d:d6:12:aa:94:96:b5:b3:64:7f:76:d5:
                    3f:5c:62:3b:f8:2d:8e:de:1f:1e:4b:92:1e:6b:15:
                    eb:4f:30:c0:5b:2a:66:8a:f0:e8:b4:6e:40:95:02:
                    74:f0:26:6b:4b:49:12:17:e3:8d:2f:36:d7:6c:0b:
                    84:81:c6:d6:51:9b:90:52:0d:fe:d0:1c:35:ab:3e:
                    a3:65:ac:7b:f1:61:cb:f2:af:63:dc:a2:d4:d9:59:
                    37:98:3b:aa:1b:27:4a:9a:22:25:8e:6b:d4:e8:80:
                    d8:e9:83:d6:78:78:88:88:3b:a3:e0:9c:65:df:6d:
                    79:d2:a2:6a:85:64:68:a1:14:05:3d:1c:46:55:70:
                    bd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:53:2A:EB:BC:1D:E3:CC:0B:75:30:9E:51:B1:DA:B6:97:73:73:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/759699ff-e8c9-3e7d-affb-6f9442d5d437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9007::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:50:62:e7:b7:8d:aa:f7:2d:7c:2c:e0:77:74:7b:cc:37:b2:
         6e:e4:dc:77:d6:ba:92:71:0f:77:9c:d4:32:47:fd:ea:1d:66:
         3c:26:b3:82:de:49:bb:82:1f:5e:f9:8c:45:09:4c:96:e0:2a:
         5e:77:35:b0:e5:d8:f6:2e:ef:55:f4:52:9c:d8:cc:a0:7c:b4:
         5e:c7:5b:58:05:e0:47:25:fc:b2:61:d2:72:a5:c3:0c:6b:2f:
         6b:e2:f9:32:20:7b:35:f2:04:80:97:b4:44:16:c9:76:a2:fd:
         70:a8:47:8f:15:44:46:6a:ed:b1:b3:fb:fd:19:71:50:1e:f4:
         f2:ba:b5:39:86:00:ec:f4:fe:b9:d6:da:20:96:c0:b0:4b:31:
         c5:c7:48:29:99:24:de:75:3c:27:65:df:22:83:93:dc:9a:ed:
         53:38:5d:70:57:c7:67:0b:4f:4f:74:cd:c0:36:b7:17:03:6e:
         4b:3d:04:4f:b3:99:b1:1e:d4:27:91:28:3f:76:8e:0a:fc:53:
         a2:14:ec:c7:b2:05:92:ae:30:63:17:05:0e:15:30:cd:83:27:
         7a:20:fc:95:5d:8f:9e:3b:9d:7b:2c:f4:4a:3b:94:e8:a2:74:
         11:03:fa:7b:17:67:99:f6:9c:66:96:21:bf:24:6a:3f:6f:ee:
         3d:00:42:8c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWDjsSIdIFzJhKV6KVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDIxMjA1MDAwMFoXDTI3MDIwNTA1MDAwMFowLzEtMCsGA1UEAxMk
ODNmZmMyODYtNzdmYi00ZDAyLTllOGMtOTRkOWZiZmQ5MzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicHDcpSVY+Sp7aZbfwsMFzMQIyHGt2ioxJ72
AGwa3IOcTKExldA5qT1C5an/fmz64cTwxYErPtm0Z/zcP/U0hFqYUGt7vYU5ZEAg
01pJ/yiLCTqQX41prXWeQtlABdIogONEgbVcCljOOMrirRylDomLwsqJzcvrzlwN
1hKqlJa1s2R/dtU/XGI7+C2O3h8eS5IeaxXrTzDAWypmivDotG5AlQJ08CZrS0kS
F+ONLzbXbAuEgcbWUZuQUg3+0Bw1qz6jZax78WHL8q9j3KLU2Vk3mDuqGydKmiIl
jmvU6IDY6YPWeHiIiDuj4Jxl32150qJqhWRooRQFPRxGVXC9rwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMBTKuu8HePMC3UwnlGx2raXc3M7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNzU5Njk5ZmYtZThjOS0z
ZTdkLWFmZmItNmY5NDQyZDVkNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgOQBzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAAUGLnt42q9y18LOB3dHvMN7Ju5Nx31rqScQ93nNQyR/3qHWY8JrOC
3km7gh9e+YxFCUyW4CpedzWw5dj2Lu9V9FKc2MygfLRex1tYBeBHJfyyYdJypcMM
ay9r4vkyIHs18gSAl7REFsl2ov1wqEePFURGau2xs/v9GXFQHvTyurU5hgDs9P65
1toglsCwSzHFx0gpmSTedTwnZd8ig5Pcmu1TOF1wV8dnC09PdM3ANrcXA25LPQRP
s5mxHtQnkSg/do4K/FOiFOzHsgWSrjBjFwUOFTDNgyd6IPyVXY+eO517LPRKO5To
onQRA/p7F2eZ9pxmliG/JGo/b+49AEKM
-----END CERTIFICATE-----
Generated at Thu May 9 15:34:12 2024 by rpki-client on console-fra.rpki-client.org