Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/923d03ad-4a8d-382c-afd1-1a6f15db2470.roa
File:                     923d03ad-4a8d-382c-afd1-1a6f15db2470.roa (raw, json)
Hash identifier:          PlneZthtA+FLF35RF3xmIzJ2U8CM+Kwp22ddxLIwg6s=
Subject key identifier:   B5:5D:3E:CB:08:B2:AE:9D:F7:18:5A:6C:E9:8F:CA:0B:59:18:CC:9A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967DDD44BC4C55B2149375E8
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/923d03ad-4a8d-382c-afd1-1a6f15db2470.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:89ea::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:dd:44:bc:4c:55:b2:14:93:75:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=15d398cf-af17-48db-8d5c-6b9e6dc69e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:c5:a9:fa:ad:15:b0:d7:84:fe:a2:34:8b:
                    fb:0f:32:74:cc:b0:28:8f:2c:7e:bb:48:fc:84:b7:
                    e4:34:aa:95:95:14:ed:01:0a:c2:e1:1c:ff:7e:3d:
                    44:58:41:8c:97:ac:a6:d4:c7:6d:cf:4f:9d:0e:37:
                    b1:4d:52:de:27:67:f6:63:f9:4e:ce:83:90:46:34:
                    00:77:5a:97:06:c5:28:7c:af:39:80:ba:dd:30:93:
                    5a:fb:fe:ec:6f:da:65:27:33:c3:da:00:3e:fc:95:
                    5e:06:5e:ca:6e:f5:1b:f1:82:f3:a8:b5:85:32:44:
                    64:8f:81:9b:a0:e4:59:ac:a3:f2:2e:47:2a:43:31:
                    ec:1e:06:78:8c:4d:39:93:da:0b:25:7e:c8:67:37:
                    28:9b:28:25:e5:f8:82:3e:ad:1e:7b:1f:9a:3e:97:
                    0d:70:3d:11:4c:2a:64:89:fc:a4:f0:ff:03:db:ea:
                    06:cc:94:44:78:7b:2f:c2:dc:1a:38:4c:7a:5a:d7:
                    11:ca:24:1b:27:cb:a1:07:a3:2d:54:a1:6c:67:ea:
                    31:ae:48:d5:ff:db:6f:7d:b6:a7:49:ad:73:97:d4:
                    f1:b9:f8:1e:0b:b9:e4:f6:c8:20:a2:1c:b9:17:d7:
                    a3:f7:b4:cc:08:fe:40:0e:8c:53:b1:57:cb:15:06:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5D:3E:CB:08:B2:AE:9D:F7:18:5A:6C:E9:8F:CA:0B:59:18:CC:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/923d03ad-4a8d-382c-afd1-1a6f15db2470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:89ea::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:59:c6:28:fc:c9:2a:24:5d:30:5a:bf:53:03:f8:d3:f6:f3:
         89:2d:26:93:5b:b6:d0:a5:0c:6c:99:a8:26:a8:bf:83:b2:be:
         b5:be:a6:c5:d0:3e:a8:12:7c:15:15:ba:13:93:33:6e:07:16:
         ee:10:21:ab:e0:45:1f:24:59:c8:59:64:af:05:1c:3a:60:a6:
         67:06:7a:0a:29:10:0a:8f:df:12:0a:17:5a:d8:a2:5c:8e:05:
         74:02:64:6c:ae:eb:48:45:3d:ad:5f:1d:ce:59:df:89:87:32:
         0c:80:ff:a0:96:f0:23:81:36:fb:04:37:ff:19:aa:8d:65:44:
         e2:ff:2f:0b:09:7d:44:ec:26:16:a8:6e:20:d0:52:cd:a9:15:
         0d:84:d5:cb:9e:12:6e:95:8b:8f:ed:aa:40:26:16:36:77:b1:
         7e:30:f6:df:77:e6:72:a5:30:8c:69:f9:d5:3a:f4:d2:88:56:
         f3:1b:a0:39:26:0d:43:89:65:00:11:fb:ef:cf:d3:88:7c:eb:
         ca:52:9b:6b:ff:4d:09:c2:19:e6:39:e7:32:5e:d5:93:57:ec:
         b2:1b:05:4d:da:d8:67:2e:3a:fb:94:60:88:7b:34:48:73:5d:
         36:4a:ab:a2:3c:40:d5:ad:15:6d:11:43:59:f7:2d:46:57:c2:
         a9:ea:58:53
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDmWfd1EvExVshSTdegwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDQxNDA0MDAwMFoXDTI3MDQwNzA0MDAwMFowLzEtMCsGA1UEAxMk
MTVkMzk4Y2YtYWYxNy00OGRiLThkNWMtNmI5ZTZkYzY5ZTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvXFqfqtFbDXhP6iNIv7DzJ0zLAojyx+u0j8
hLfkNKqVlRTtAQrC4Rz/fj1EWEGMl6ym1Mdtz0+dDjexTVLeJ2f2Y/lOzoOQRjQA
d1qXBsUofK85gLrdMJNa+/7sb9plJzPD2gA+/JVeBl7KbvUb8YLzqLWFMkRkj4Gb
oORZrKPyLkcqQzHsHgZ4jE05k9oLJX7IZzcomygl5fiCPq0eex+aPpcNcD0RTCpk
ifyk8P8D2+oGzJREeHsvwtwaOEx6WtcRyiQbJ8uhB6MtVKFsZ+oxrkjV/9tvfban
Sa1zl9TxufgeC7nk9sggohy5F9ej97TMCP5ADoxTsVfLFQYTLQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLVdPssIsq6d9xhabOmPygtZGMyaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOTIzZDAzYWQtNGE4ZC0z
ODJjLWFmZDEtMWE2ZjE1ZGIyNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYnq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHlZxij8ySokXTBav1MD+NP284ktJpNbttClDGyZqCaov4OyvrW+
psXQPqgSfBUVuhOTM24HFu4QIavgRR8kWchZZK8FHDpgpmcGegopEAqP3xIKF1rY
olyOBXQCZGyu60hFPa1fHc5Z34mHMgyA/6CW8COBNvsEN/8Zqo1lROL/LwsJfUTs
JhaobiDQUs2pFQ2E1cueEm6Vi4/tqkAmFjZ3sX4w9t935nKlMIxp+dU69NKIVvMb
oDkmDUOJZQAR++/P04h868pSm2v/TQnCGeY55zJe1ZNX7LIbBU3a2GcuOvuUYIh7
NEhzXTZKq6I8QNWtFW0RQ1n3LUZXwqnqWFM=
-----END CERTIFICATE-----
Generated at Fri May 10 14:29:19 2024 by rpki-client on console-fra.rpki-client.org