Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd08c277-7c3d-35fd-ab38-f5a54cffd910.roa
File:                     bd08c277-7c3d-35fd-ab38-f5a54cffd910.roa (raw, json)
Hash identifier:          8HhGxCVGT3ExygG0EGgNghDJ7EvZ/dsWPtv913NLW1c=
Subject key identifier:   51:57:7E:C2:6A:0B:37:0A:14:11:73:11:C8:6E:72:DB:E4:D3:05:57
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC30CC8D847BAE6DAEA0E80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd08c277-7c3d-35fd-ab38-f5a54cffd910.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:0c:c8:d8:47:ba:e6:da:ea:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=17b6c939-ca85-4ce7-92a1-508c1fba35be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:99:65:02:b7:67:54:e9:32:f0:72:76:78:2a:
                    23:ec:b0:0f:62:3c:cc:92:a6:3a:ac:11:bc:2e:e8:
                    eb:ed:8e:b1:b5:73:84:6a:53:c3:f1:96:25:ea:83:
                    3b:a5:8d:dc:ff:65:12:e6:74:f7:b6:8b:de:cf:86:
                    c5:8f:8d:2d:b8:ff:05:5b:e2:ea:68:0e:44:20:2f:
                    23:a0:63:bb:29:3b:9c:c5:c5:21:eb:1b:d4:72:a4:
                    2e:f1:49:4e:a3:79:e3:66:9a:b4:52:b1:a6:ef:22:
                    e1:83:52:09:80:be:81:68:de:04:40:7e:6b:5e:96:
                    9a:54:7a:e1:e4:b1:a8:bc:81:c8:87:4b:b3:a3:06:
                    ea:6d:da:a9:93:c6:de:27:2b:59:2e:4f:c5:ee:36:
                    6a:5a:1a:4c:8b:fc:de:7f:42:bc:b9:4b:64:a1:fe:
                    77:0c:82:33:96:43:1e:81:fd:a2:78:0e:6b:c5:58:
                    73:43:ed:51:3f:94:8a:8f:f2:8d:40:d4:73:e0:8f:
                    09:15:e2:5e:16:5d:de:8a:84:4d:33:e4:33:d6:93:
                    33:68:e1:e7:95:06:67:50:42:e1:d0:98:b1:60:aa:
                    0d:c7:7c:2e:11:ab:fe:7e:32:8b:8d:56:42:22:61:
                    2e:d1:da:45:e5:56:42:3c:95:df:84:0a:a5:f0:4d:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:57:7E:C2:6A:0B:37:0A:14:11:73:11:C8:6E:72:DB:E4:D3:05:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd08c277-7c3d-35fd-ab38-f5a54cffd910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:05:ac:e0:0b:64:da:33:e5:2a:a7:4e:6b:8e:91:9d:c4:e5:
         5e:78:8c:8a:a3:ca:cc:92:1e:0c:1b:a5:18:4a:05:93:49:5f:
         87:30:5b:41:22:11:17:8e:0a:63:64:99:f8:69:86:55:ff:42:
         3d:b1:74:2f:c3:c7:5e:64:40:96:3f:70:88:5f:e1:ea:1c:a2:
         c6:9a:f0:28:e2:e2:f9:f6:82:1d:bf:bc:80:07:75:1a:18:33:
         52:ca:09:82:7a:e2:d0:ab:30:7e:7d:34:1f:b6:85:08:25:d7:
         13:a5:b5:be:7d:64:6d:03:d2:14:79:49:32:02:20:d4:d0:4b:
         4f:e7:be:ce:96:8e:b6:2d:36:24:98:cf:8e:e4:6d:22:23:33:
         4d:2b:ae:66:d9:eb:bd:81:5b:16:ee:66:f7:0b:8f:7f:39:0e:
         63:1d:3b:8f:8f:d3:52:32:6d:c1:65:f6:2a:6d:02:fe:45:3e:
         df:82:e9:99:63:fa:7b:7b:26:89:01:07:9a:26:2e:a9:3d:ad:
         58:a5:70:c4:b7:1c:b4:b7:72:cb:a8:75:03:5c:8f:36:ca:0d:
         9e:89:6e:c6:32:8c:26:49:19:15:58:84:8e:49:1f:84:b2:7f:
         c2:6c:90:65:49:75:cf:d1:ba:ef:ed:17:90:b2:1f:6e:e2:a3:
         91:30:45:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVfwwzI2Ee65trqDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
MTdiNmM5MzktY2E4NS00Y2U3LTkyYTEtNTA4YzFmYmEzNWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpllArdnVOky8HJ2eCoj7LAPYjzMkqY6rBG8
Lujr7Y6xtXOEalPD8ZYl6oM7pY3c/2US5nT3tovez4bFj40tuP8FW+LqaA5EIC8j
oGO7KTucxcUh6xvUcqQu8UlOo3njZpq0UrGm7yLhg1IJgL6BaN4EQH5rXpaaVHrh
5LGovIHIh0uzowbqbdqpk8beJytZLk/F7jZqWhpMi/zef0K8uUtkof53DIIzlkMe
gf2ieA5rxVhzQ+1RP5SKj/KNQNRz4I8JFeJeFl3eioRNM+Qz1pMzaOHnlQZnUELh
0JixYKoNx3wuEav+fjKLjVZCImEu0dpF5VZCPJXfhAql8E1IiwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFFXfsJqCzcKFBFzEchuctvk0wVXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYmQwOGMyNzctN2MzZC0z
NWZkLWFiMzgtZjVhNTRjZmZkOTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYAJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADMFrOALZNoz5SqnTmuOkZ3E5V54jIqjysySHgwbpRhKBZNJX4cw
W0EiEReOCmNkmfhphlX/Qj2xdC/Dx15kQJY/cIhf4eocosaa8Cji4vn2gh2/vIAH
dRoYM1LKCYJ64tCrMH59NB+2hQgl1xOltb59ZG0D0hR5STICINTQS0/nvs6WjrYt
NiSYz47kbSIjM00rrmbZ672BWxbuZvcLj385DmMdO4+P01IybcFl9iptAv5FPt+C
6Zlj+nt7JokBB5omLqk9rVilcMS3HLS3csuodQNcjzbKDZ6JbsYyjCZJGRVYhI5J
H4Syf8JskGVJdc/Ruu/tF5CyH27io5EwRWg=
-----END CERTIFICATE-----
Generated at Fri May 10 17:25:09 2024 by rpki-client on console-fra.rpki-client.org