Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b3db7012-0bb8-3364-92c8-f6a8bde5b104.roa
File:                     b3db7012-0bb8-3364-92c8-f6a8bde5b104.roa (raw, json)
Hash identifier:          MxPc2WXgjkia3L6G/VzIxq48orlNYK3C7cRlm/xmXFg=
Subject key identifier:   CA:1C:A0:E8:AF:28:27:1E:AA:D6:0A:F3:66:AC:D9:42:1D:AE:3E:8E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967D643B5711BC6CC0EF7FC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b3db7012-0bb8-3364-92c8-f6a8bde5b104.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:81bf::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:64:3b:57:11:bc:6c:c0:ef:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=7877b78a-f7dc-4722-afa5-63a5cca1fe95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a3:f6:bf:4b:d7:63:35:21:ed:6a:8b:fa:80:
                    38:9e:12:2c:54:7d:eb:45:cd:f1:01:45:d9:03:59:
                    b3:56:9a:9d:25:87:19:9e:91:8d:e8:92:4e:52:65:
                    64:c1:91:76:a0:47:a0:88:e2:54:2c:6c:97:59:6b:
                    63:3f:0c:a5:e6:0b:0e:1e:e4:5b:4d:43:9d:78:35:
                    71:7d:26:e3:8f:a1:20:c9:e7:6d:cb:b9:e6:fd:6c:
                    71:23:c6:8f:2b:89:74:2a:91:64:2d:a6:1d:22:11:
                    8f:27:57:3e:3b:c1:9e:25:24:ad:d0:07:5f:42:0f:
                    37:7d:7a:8a:d0:54:08:a3:b0:f8:05:37:93:59:25:
                    2c:16:5f:a5:8c:d3:e8:85:e0:90:42:af:c5:ca:f3:
                    d1:f0:20:fd:4b:c4:7b:c7:63:ab:e4:89:a8:40:c7:
                    7e:ea:47:bd:ef:ee:1a:bb:c7:da:24:1e:d2:a6:4c:
                    eb:37:bf:20:e9:a0:06:87:cb:e0:6b:24:db:01:78:
                    a2:3b:13:ba:4e:9c:7b:66:d9:62:4d:5d:62:71:41:
                    39:ed:40:75:36:97:02:46:c3:e3:49:3d:9c:f2:10:
                    54:9f:ce:87:93:a1:c0:ae:69:7a:3d:e8:39:51:0f:
                    d4:72:d5:33:ba:dc:3f:00:7c:30:6b:8e:80:61:cb:
                    d9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1C:A0:E8:AF:28:27:1E:AA:D6:0A:F3:66:AC:D9:42:1D:AE:3E:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b3db7012-0bb8-3364-92c8-f6a8bde5b104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:81bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ba:05:12:b3:38:9b:72:88:1d:66:65:d9:30:eb:50:82:ad:
         f1:d4:1b:04:bf:7a:e8:bd:e4:08:30:42:25:be:dd:2e:d7:25:
         42:cb:36:fe:68:f6:84:6c:80:d9:42:64:ed:4d:67:af:e3:e2:
         8b:26:45:c2:79:95:08:17:6b:b6:3e:0d:99:bf:cd:c4:ae:b6:
         d0:8c:15:e1:df:a8:c9:a9:ca:f1:1a:03:90:92:02:8b:2b:17:
         ac:12:2e:e7:2a:96:39:34:8d:fc:bb:30:21:ef:55:91:7a:23:
         0c:2f:1d:4d:6a:69:e1:e4:b9:93:83:98:61:e5:72:f7:fb:7d:
         94:97:a1:9c:bd:c3:b9:cb:07:01:99:72:c0:4c:27:45:fb:2f:
         a9:1d:4c:d5:76:69:4a:bc:e5:be:46:08:ca:ca:20:28:57:40:
         b2:f1:3a:ad:bf:f9:9a:5a:32:10:d2:c0:0b:59:9d:71:6b:22:
         3c:44:2e:bb:71:09:e3:5a:a2:c4:33:0b:b2:9b:7e:b5:e0:57:
         a1:63:ea:a3:d8:3e:ea:d3:39:98:73:a4:6a:78:91:a1:46:40:
         98:c1:52:10:2a:f4:f4:00:91:af:49:25:0a:db:11:a1:8c:e0:
         48:ee:da:f2:21:ee:e1:1b:64:11:1e:96:bc:b9:2b:86:3c:1d:
         b5:42:50:50
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDmWfWQ7VxG8bMDvf8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDQxNDA0MDAwMFoXDTI3MDQwNzA0MDAwMFowLzEtMCsGA1UEAxMk
Nzg3N2I3OGEtZjdkYy00NzIyLWFmYTUtNjNhNWNjYTFmZTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16P2v0vXYzUh7WqL+oA4nhIsVH3rRc3xAUXZ
A1mzVpqdJYcZnpGN6JJOUmVkwZF2oEegiOJULGyXWWtjPwyl5gsOHuRbTUOdeDVx
fSbjj6Egyedty7nm/WxxI8aPK4l0KpFkLaYdIhGPJ1c+O8GeJSSt0AdfQg83fXqK
0FQIo7D4BTeTWSUsFl+ljNPoheCQQq/FyvPR8CD9S8R7x2Or5ImoQMd+6ke97+4a
u8faJB7SpkzrN78g6aAGh8vgayTbAXiiOxO6Tpx7ZtliTV1icUE57UB1NpcCRsPj
ST2c8hBUn86Hk6HArml6Peg5UQ/UctUzutw/AHwwa46AYcvZeQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMocoOivKCceqtYK82as2UIdrj6OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYjNkYjcwMTItMGJiOC0z
MzY0LTkyYzgtZjZhOGJkZTViMTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYG/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFC6BRKzOJtyiB1mZdkw61CCrfHUGwS/eui95AgwQiW+3S7XJULL
Nv5o9oRsgNlCZO1NZ6/j4osmRcJ5lQgXa7Y+DZm/zcSuttCMFeHfqMmpyvEaA5CS
AosrF6wSLucqljk0jfy7MCHvVZF6IwwvHU1qaeHkuZODmGHlcvf7fZSXoZy9w7nL
BwGZcsBMJ0X7L6kdTNV2aUq85b5GCMrKIChXQLLxOq2/+ZpaMhDSwAtZnXFrIjxE
LrtxCeNaosQzC7KbfrXgV6Fj6qPYPurTOZhzpGp4kaFGQJjBUhAq9PQAka9JJQrb
EaGM4Eju2vIh7uEbZBEelry5K4Y8HbVCUFA=
-----END CERTIFICATE-----
Generated at Thu May 9 15:34:13 2024 by rpki-client on console-fra.rpki-client.org