Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b82fb0a3-be81-3c87-bcf9-24ecbba045b8.roa
File:                     b82fb0a3-be81-3c87-bcf9-24ecbba045b8.roa (raw, json)
Hash identifier:          6Ctyf0h4SttOaQjA3TAC4dMPWgBrVIS00RTuTrMOKps=
Subject key identifier:   A9:92:DB:47:A4:ED:A5:B3:85:11:F9:FF:45:B7:A2:6C:1B:43:8A:6E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC31695AB595969A23987C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b82fb0a3-be81-3c87-bcf9-24ecbba045b8.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8151::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:16:95:ab:59:59:69:a2:39:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=976660b0-0e56-4c83-902a-4740561f2e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9e:d9:d0:27:04:d7:0c:99:d3:c3:4c:0e:3e:
                    4e:01:af:da:7b:2f:a5:8f:d8:c0:05:19:16:ed:8a:
                    48:25:12:fd:c5:0c:47:69:c3:3f:c0:d5:a5:f4:13:
                    ad:67:e5:57:41:47:9d:42:e6:37:09:2c:5d:5e:dc:
                    82:f0:4e:4d:93:0b:db:a6:a2:ae:16:3e:85:c4:2c:
                    49:39:b2:68:e5:b2:25:01:ca:42:ef:69:b5:ea:b3:
                    35:8b:cb:ef:7e:89:50:7d:a7:51:18:df:4d:e5:a2:
                    78:52:f0:d0:b2:d8:24:90:b0:87:f2:dc:c7:f7:30:
                    6b:f2:eb:3d:72:b0:01:3f:e4:43:e9:f4:e8:d9:0d:
                    58:27:5c:28:eb:db:48:78:6b:ab:4a:2b:24:fe:73:
                    a4:87:78:ea:70:ba:78:59:6e:dc:c9:09:ed:19:00:
                    b0:db:1f:3d:4c:b7:e1:13:d0:a7:bb:6f:84:90:18:
                    ce:41:18:35:7c:b0:37:ce:01:6e:1d:81:b3:56:85:
                    15:bf:10:bd:17:dd:7b:68:7a:14:f1:31:f3:d3:d8:
                    6c:fb:6f:9b:11:45:30:01:cb:6f:06:6a:16:ae:5e:
                    8a:8d:3a:d5:50:2e:70:ec:4c:f3:63:a9:f2:bb:7e:
                    39:e3:a1:c3:ec:41:05:7d:a2:5f:50:71:65:00:b6:
                    32:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:92:DB:47:A4:ED:A5:B3:85:11:F9:FF:45:B7:A2:6C:1B:43:8A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b82fb0a3-be81-3c87-bcf9-24ecbba045b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8151::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:71:ac:b9:30:3a:c5:b5:d5:72:25:f9:57:96:0c:cf:92:6a:
         e6:05:7c:bf:0f:2e:61:1b:0c:48:04:05:d5:84:00:e9:26:8b:
         37:c3:4a:e4:e3:31:1d:11:b0:c7:45:76:af:bc:bd:b7:71:55:
         89:c7:fa:09:33:03:9d:2e:2b:49:c7:74:bd:9c:c7:13:53:2c:
         c0:08:0b:82:f6:e9:e2:ad:77:ed:a6:96:d4:3a:c0:59:e0:57:
         77:c9:62:67:82:c5:62:3f:c5:3b:47:83:7b:99:c9:42:ab:e4:
         61:45:c1:17:c2:7e:0d:b4:e8:5e:77:79:3c:b7:12:c6:49:d5:
         51:2c:ee:e3:5e:8c:1a:44:ac:66:d3:db:21:7f:3a:10:b9:50:
         00:15:a2:15:4e:08:4a:68:e1:3e:de:59:37:e8:02:7d:1e:6c:
         94:b5:17:17:92:bb:4c:93:fe:3e:17:a9:cc:5e:04:72:33:30:
         da:0d:1c:04:d3:90:72:a5:29:49:b0:48:b5:17:76:ae:9d:b9:
         99:60:fc:31:01:6e:eb:16:23:cf:e0:35:ec:42:ce:28:50:87:
         81:8b:3f:4b:11:25:cb:b6:64:d4:4e:7c:0d:f4:35:58:81:40:
         ec:d9:c9:f1:bd:cc:c7:b5:5e:4e:e0:c3:fe:a0:66:68:97:e0:
         79:8c:02:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVfwxaVq1lZaaI5h8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
OTc2NjYwYjAtMGU1Ni00YzgzLTkwMmEtNDc0MDU2MWYyZTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp7Z0CcE1wyZ08NMDj5OAa/aey+lj9jABRkW
7YpIJRL9xQxHacM/wNWl9BOtZ+VXQUedQuY3CSxdXtyC8E5NkwvbpqKuFj6FxCxJ
ObJo5bIlAcpC72m16rM1i8vvfolQfadRGN9N5aJ4UvDQstgkkLCH8tzH9zBr8us9
crABP+RD6fTo2Q1YJ1wo69tIeGurSisk/nOkh3jqcLp4WW7cyQntGQCw2x89TLfh
E9Cnu2+EkBjOQRg1fLA3zgFuHYGzVoUVvxC9F917aHoU8THz09hs+2+bEUUwActv
BmoWrl6KjTrVUC5w7EzzY6nyu34546HD7EEFfaJfUHFlALYyFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKmS20ek7aWzhRH5/0W3omwbQ4puMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYjgyZmIwYTMtYmU4MS0z
Yzg3LWJjZjktMjRlY2JiYTA0NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYFR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACRxrLkwOsW11XIl+VeWDM+SauYFfL8PLmEbDEgEBdWEAOkmizfD
SuTjMR0RsMdFdq+8vbdxVYnH+gkzA50uK0nHdL2cxxNTLMAIC4L26eKtd+2mltQ6
wFngV3fJYmeCxWI/xTtHg3uZyUKr5GFFwRfCfg206F53eTy3EsZJ1VEs7uNejBpE
rGbT2yF/OhC5UAAVohVOCEpo4T7eWTfoAn0ebJS1FxeSu0yT/j4XqcxeBHIzMNoN
HATTkHKlKUmwSLUXdq6duZlg/DEBbusWI8/gNexCzihQh4GLP0sRJcu2ZNROfA30
NViBQOzZyfG9zMe1Xk7gw/6gZmiX4HmMAjQ=
-----END CERTIFICATE-----
Generated at Fri May 10 14:29:20 2024 by rpki-client on console-fra.rpki-client.org