Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a46d60ed-c21d-3325-b641-82b50ef27176.roa
File:                     a46d60ed-c21d-3325-b641-82b50ef27176.roa (raw, json)
Hash identifier:          2hNarAnw9okEk8S/P64RE+kKNx7GdOjHVjD7c5fnAH8=
Subject key identifier:   74:D4:E9:08:CE:E4:2F:DA:78:9B:75:05:EB:A6:B7:41:FF:53:C0:69
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2F063C8EAC492502C5D80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a46d60ed-c21d-3325-b641-82b50ef27176.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8389::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:f0:63:c8:ea:c4:92:50:2c:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=ede6760e-d5e7-435f-a8dd-295021031a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d4:0e:df:29:20:74:65:6b:d5:f3:ea:54:49:
                    9f:e4:89:68:6b:45:66:d2:64:68:67:4f:1d:46:e6:
                    46:23:a4:d9:da:da:f8:1c:f9:77:44:20:c7:a9:33:
                    38:15:a7:f1:df:ee:28:66:7a:4c:29:6a:98:a7:3f:
                    c3:22:c4:b9:a7:1c:fc:61:7f:3b:37:5e:8f:87:29:
                    c2:d1:33:90:5b:ab:4e:63:89:50:3c:9f:d3:71:1f:
                    03:a4:c9:22:77:37:38:96:8c:25:d2:5c:51:66:15:
                    bf:f3:08:64:af:ef:b0:0b:f3:75:30:0a:52:c4:79:
                    27:9c:ac:27:a5:9d:e2:4e:e9:4c:e2:49:66:87:52:
                    45:82:ff:d4:45:0e:de:10:22:24:c0:e6:e1:46:ab:
                    75:48:6f:6c:62:72:e6:f0:b8:76:62:f6:3e:4d:f9:
                    09:db:c7:43:0b:84:f7:b7:01:ea:9e:90:b0:d1:62:
                    45:3f:b2:f6:ec:ba:9f:3a:09:a2:b3:67:60:d7:b0:
                    d5:3b:ea:7a:bd:f4:b7:0a:48:79:cb:93:f9:a7:66:
                    a7:8e:36:3b:3a:64:31:5d:1d:d1:a1:f2:7c:56:06:
                    39:0d:53:e5:9c:8f:67:db:fe:9c:41:a3:f8:9e:44:
                    04:e2:bf:cb:cd:b2:91:56:70:6d:18:d2:00:1c:d5:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D4:E9:08:CE:E4:2F:DA:78:9B:75:05:EB:A6:B7:41:FF:53:C0:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a46d60ed-c21d-3325-b641-82b50ef27176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8389::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:fa:3b:2a:52:c3:99:5a:8a:c2:5d:b7:45:d4:fe:7d:57:5a:
         05:e3:be:3d:b8:7f:4d:c4:e7:d5:26:80:61:76:ec:b3:30:0d:
         40:40:89:45:0b:f6:4f:b8:88:42:ea:59:83:49:47:49:f0:70:
         ae:d7:92:30:5d:58:fe:3f:ea:54:c6:44:3d:ca:08:19:0d:fb:
         e4:24:9b:b7:28:25:82:38:5d:96:63:d3:d9:de:9e:04:12:de:
         46:07:7e:96:bc:98:85:41:9c:2f:5c:ef:e5:e5:97:c4:5c:6c:
         08:48:fa:17:c0:d5:e4:dc:47:12:be:08:a5:60:bf:cb:b4:f0:
         0d:8b:f3:14:19:34:7b:41:b7:6c:5c:92:5e:b1:cd:54:6f:cc:
         ad:44:99:b8:17:a0:bf:c9:e8:ff:3d:e9:a4:df:5c:1b:70:0f:
         df:fc:8e:b0:db:37:e3:41:c7:54:0a:44:14:dc:a8:fb:12:1a:
         ba:53:63:f0:1e:d5:32:ce:c1:a4:05:54:7c:9a:45:6a:1f:ca:
         c2:67:84:4f:19:02:7b:a6:2e:49:79:01:48:36:71:d4:c4:16:
         c8:49:db:13:b9:35:23:3c:c7:f7:f2:e6:2d:18:01:f9:09:82:
         eb:9f:8c:48:03:92:86:1d:2b:43:ee:93:9e:61:79:75:93:84:
         e6:90:42:a2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVfwvBjyOrEklAsXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
ZWRlNjc2MGUtZDVlNy00MzVmLWE4ZGQtMjk1MDIxMDMxYTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9QO3ykgdGVr1fPqVEmf5Iloa0Vm0mRoZ08d
RuZGI6TZ2tr4HPl3RCDHqTM4Fafx3+4oZnpMKWqYpz/DIsS5pxz8YX87N16PhynC
0TOQW6tOY4lQPJ/TcR8DpMkidzc4lowl0lxRZhW/8whkr++wC/N1MApSxHknnKwn
pZ3iTulM4klmh1JFgv/URQ7eECIkwObhRqt1SG9sYnLm8Lh2YvY+TfkJ28dDC4T3
twHqnpCw0WJFP7L27LqfOgmis2dg17DVO+p6vfS3Ckh5y5P5p2anjjY7OmQxXR3R
ofJ8VgY5DVPlnI9n2/6cQaP4nkQE4r/LzbKRVnBtGNIAHNV/FwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHTU6QjO5C/aeJt1Beumt0H/U8BpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTQ2ZDYwZWQtYzIxZC0z
MzI1LWI2NDEtODJiNTBlZjI3MTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYOJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFz6OypSw5laisJdt0XU/n1XWgXjvj24f03E59UmgGF27LMwDUBA
iUUL9k+4iELqWYNJR0nwcK7XkjBdWP4/6lTGRD3KCBkN++Qkm7coJYI4XZZj09ne
ngQS3kYHfpa8mIVBnC9c7+Xll8RcbAhI+hfA1eTcRxK+CKVgv8u08A2L8xQZNHtB
t2xckl6xzVRvzK1EmbgXoL/J6P896aTfXBtwD9/8jrDbN+NBx1QKRBTcqPsSGrpT
Y/Ae1TLOwaQFVHyaRWofysJnhE8ZAnumLkl5AUg2cdTEFshJ2xO5NSM8x/fy5i0Y
AfkJguufjEgDkoYdK0Puk55heXWThOaQQqI=
-----END CERTIFICATE-----
Generated at Fri May 10 08:52:07 2024 by rpki-client on console-fra.rpki-client.org