Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3fe65d0-434e-34a3-a8bc-4c52ac4f94c8.roa
File:                     a3fe65d0-434e-34a3-a8bc-4c52ac4f94c8.roa (raw, json)
Hash identifier:          Gb54FBdY5NTwN1yxumRUDXvujAOzYc9WUZiEy1xq9Nc=
Subject key identifier:   3D:23:14:C0:A2:D1:16:57:32:02:66:9B:96:95:2C:D8:C2:3A:E2:23
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F0FED3B645736C2FE780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3fe65d0-434e-34a3-a8bc-4c52ac4f94c8.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:815d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f0:fe:d3:b6:45:73:6c:2f:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=01b65071-2081-4310-aff9-f15c8e60cef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:58:97:4b:96:3d:69:c1:4d:8c:a7:4d:58:
                    39:0b:2f:11:63:4d:a7:8f:98:84:9f:1a:d0:ca:56:
                    2a:29:f9:e0:21:72:32:77:5c:53:f9:6c:1e:b4:33:
                    7a:6f:34:ae:b0:54:66:06:78:ee:6b:dc:d1:64:c5:
                    a6:80:fb:c7:e2:ec:30:e3:01:e3:e9:ba:3a:a3:40:
                    1b:ec:fd:e1:3d:6a:7d:0e:38:a7:61:90:eb:c4:2e:
                    40:89:f4:dc:fd:2d:12:fb:b9:dd:31:17:87:71:c4:
                    8e:c7:fb:72:c7:ed:6c:ca:a3:71:8e:4b:38:31:46:
                    8a:b8:08:49:4c:99:dc:57:b3:f3:a6:66:38:76:89:
                    78:ad:1f:72:a9:84:33:aa:c3:e4:a1:87:6b:1c:7d:
                    91:99:c5:0a:71:74:2d:c8:61:f2:a6:5a:41:19:91:
                    06:73:b6:7d:cd:9a:c1:39:b5:45:97:ed:45:eb:ec:
                    00:91:5a:59:37:f1:03:92:8a:1c:1a:10:f2:e7:f2:
                    a0:7b:78:fa:95:76:77:61:24:ea:39:eb:22:6c:51:
                    13:d8:fb:4e:1b:90:fa:83:23:a2:87:87:57:c0:1e:
                    0b:a0:e0:75:68:d5:2e:a2:ae:82:e3:e6:25:1d:c3:
                    05:46:63:d6:9d:6f:d5:e5:c4:d8:a4:63:94:80:aa:
                    9f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:23:14:C0:A2:D1:16:57:32:02:66:9B:96:95:2C:D8:C2:3A:E2:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3fe65d0-434e-34a3-a8bc-4c52ac4f94c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:815d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:6f:e4:20:0a:8d:fc:dc:0d:ba:0b:4b:ec:0c:a2:48:92:83:
         67:4d:dd:4c:3e:1e:37:18:4e:ff:b8:af:e4:c5:46:d5:8e:e0:
         c9:fd:a9:53:0d:ef:20:c1:b0:8f:c4:9f:68:94:70:ca:9d:01:
         e4:da:9a:3c:18:f8:fb:cd:32:98:15:a5:14:52:be:58:8b:47:
         e4:e4:9f:a9:d8:cc:66:9c:50:0d:f7:19:9e:c4:c6:49:fb:c4:
         b5:06:af:21:15:49:53:2d:39:e5:c5:ac:ce:04:68:ac:a8:e7:
         91:26:61:b4:e2:25:3b:d8:36:42:5b:e6:57:21:73:ec:69:10:
         df:ee:75:ab:eb:69:01:92:3e:4b:c8:ff:1d:cb:a4:4a:76:f4:
         0b:f4:55:63:08:58:c5:84:3e:9c:07:fd:3a:8a:c4:63:b0:8d:
         38:e2:e2:5d:3f:47:7f:e3:73:82:59:07:ff:f7:fb:60:9d:8c:
         8e:b4:20:0d:8a:d9:cb:be:c5:9a:ca:46:15:03:0d:29:90:18:
         b0:18:3a:06:7b:30:1a:f1:16:f2:ff:29:fb:57:e3:fb:92:0e:
         8e:1c:98:65:88:49:d1:76:f9:12:06:14:48:b8:5f:62:ee:00:
         b3:ea:94:1b:d8:82:40:a0:9f:c5:79:d1:cd:10:26:74:09:c7:
         8d:cb:01:52
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcf1fD+07ZFc2wv54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
MDFiNjUwNzEtMjA4MS00MzEwLWFmZjktZjE1YzhlNjBjZWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshZYl0uWPWnBTYynTVg5Cy8RY02nj5iEnxrQ
ylYqKfngIXIyd1xT+WwetDN6bzSusFRmBnjua9zRZMWmgPvH4uww4wHj6bo6o0Ab
7P3hPWp9DjinYZDrxC5AifTc/S0S+7ndMReHccSOx/tyx+1syqNxjks4MUaKuAhJ
TJncV7PzpmY4dol4rR9yqYQzqsPkoYdrHH2RmcUKcXQtyGHyplpBGZEGc7Z9zZrB
ObVFl+1F6+wAkVpZN/EDkoocGhDy5/Kge3j6lXZ3YSTqOesibFET2PtOG5D6gyOi
h4dXwB4LoOB1aNUuoq6C4+YlHcMFRmPWnW/V5cTYpGOUgKqf/QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD0jFMCi0RZXMgJmm5aVLNjCOuIjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTNmZTY1ZDAtNDM0ZS0z
NGEzLWE4YmMtNGM1MmFjNGY5NGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYFd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAVv5CAKjfzcDboLS+wMokiSg2dN3Uw+HjcYTv+4r+TFRtWO4Mn9
qVMN7yDBsI/En2iUcMqdAeTamjwY+PvNMpgVpRRSvliLR+Tkn6nYzGacUA33GZ7E
xkn7xLUGryEVSVMtOeXFrM4EaKyo55EmYbTiJTvYNkJb5lchc+xpEN/udavraQGS
PkvI/x3LpEp29Av0VWMIWMWEPpwH/TqKxGOwjTji4l0/R3/jc4JZB//3+2CdjI60
IA2K2cu+xZrKRhUDDSmQGLAYOgZ7MBrxFvL/KftX4/uSDo4cmGWISdF2+RIGFEi4
X2LuALPqlBvYgkCgn8V50c0QJnQJx43LAVI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org