Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c1bd3331-babe-39ee-89d1-deeae79b2011.roa
File:                     c1bd3331-babe-39ee-89d1-deeae79b2011.roa (raw, json)
Hash identifier:          AH+RvdIptP60MYymkRr+oCIrz+ptaBtPUkEmUxYbriI=
Subject key identifier:   7E:D0:CA:67:38:47:0E:E7:3D:4E:B2:32:70:97:62:50:7D:07:70:30
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967CDBFE2ED7732C0B691340
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c1bd3331-babe-39ee-89d1-deeae79b2011.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8097::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7c:db:fe:2e:d7:73:2c:0b:69:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=a0272c12-fcbb-4aae-95aa-5e35dc6cef8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:34:59:b9:1b:be:08:fc:18:10:04:e4:eb:f8:
                    05:df:84:0c:c7:16:98:48:fc:0a:52:3d:73:f2:f3:
                    b0:ab:4e:9e:81:34:0e:e7:70:a7:fe:1e:a4:39:e9:
                    05:98:ba:42:1e:10:2a:86:ab:ba:21:e7:6c:8c:9e:
                    d9:b2:9e:1f:5c:b3:cd:e8:4c:0c:31:21:fa:62:09:
                    12:fd:ff:32:56:67:33:a4:08:10:35:39:62:20:8d:
                    da:d2:24:07:8c:d1:c7:b8:86:1a:ad:99:9b:ac:0c:
                    43:75:c2:e1:b8:d9:80:32:13:95:08:de:2a:f7:96:
                    3c:b5:29:fa:a6:e7:f3:d6:07:fc:a3:ec:20:a9:8b:
                    af:88:a3:f9:c2:02:ad:f3:06:a8:c5:7a:f0:8b:52:
                    c5:5b:4a:1e:72:8d:96:8f:3f:64:c5:0a:a9:31:7c:
                    a0:3f:63:cd:8c:da:64:95:cf:39:ae:b1:c3:c8:e8:
                    53:b0:81:07:a0:ab:0d:38:d6:b8:ac:99:a2:01:93:
                    95:95:73:4b:ff:56:f6:ad:1a:ac:33:50:1e:96:b4:
                    1e:2d:71:26:da:96:04:df:42:d2:21:c7:ed:54:b8:
                    fe:6a:cc:ea:96:98:e0:2c:e2:ac:cc:3c:c3:51:01:
                    54:f0:56:e9:6d:ed:e5:9b:75:12:24:69:47:1c:84:
                    78:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D0:CA:67:38:47:0E:E7:3D:4E:B2:32:70:97:62:50:7D:07:70:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c1bd3331-babe-39ee-89d1-deeae79b2011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8097::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b0:2b:56:2c:b5:bf:50:01:54:c2:e9:ed:a7:83:9b:e2:65:
         af:3c:1f:a9:89:42:31:57:b4:d2:20:70:7b:f6:8d:ee:1f:ee:
         58:bb:d1:3f:95:d4:f6:29:95:b7:79:87:0f:0b:dc:c7:38:b7:
         13:aa:61:b9:a6:96:1b:ea:93:30:4b:60:4e:5d:61:6c:f7:6e:
         fd:ce:13:6d:c9:21:fa:24:31:b4:b1:17:91:74:ea:64:e9:a5:
         1c:78:1c:35:8a:6f:e2:2d:ca:7e:35:1b:b0:2f:0b:8b:55:3d:
         64:c8:e6:43:22:c7:bb:2c:ea:45:7d:0d:fe:d9:11:1f:ef:66:
         b3:d8:3e:df:c3:64:2d:45:7c:0a:3a:b9:65:76:5a:77:01:85:
         ce:96:7d:1a:55:4d:56:1c:13:84:0a:f3:fc:7b:bc:31:b7:fb:
         90:ef:f4:ac:3b:98:59:25:7f:fa:51:6e:89:9a:ed:14:1c:c3:
         ea:35:f5:6f:20:12:6c:4a:ab:d0:5a:4c:9e:7d:9b:e8:f9:e8:
         4d:06:da:03:5d:5c:d3:15:ca:18:90:a6:70:4e:64:b8:f8:22:
         e8:ed:03:fb:50:72:06:5b:7d:93:3c:e7:3c:e0:98:d0:df:a8:
         1f:f7:f1:bf:3f:4a:91:00:c8:8e:49:c7:e7:91:97:44:bf:af:
         e4:8d:10:59
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDmWfNv+LtdzLAtpE0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDQxNDA0MDAwMFoXDTI3MDQwNzA0MDAwMFowLzEtMCsGA1UEAxMk
YTAyNzJjMTItZmNiYi00YWFlLTk1YWEtNWUzNWRjNmNlZjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jRZuRu+CPwYEATk6/gF34QMxxaYSPwKUj1z
8vOwq06egTQO53Cn/h6kOekFmLpCHhAqhqu6IedsjJ7Zsp4fXLPN6EwMMSH6YgkS
/f8yVmczpAgQNTliII3a0iQHjNHHuIYarZmbrAxDdcLhuNmAMhOVCN4q95Y8tSn6
pufz1gf8o+wgqYuviKP5wgKt8waoxXrwi1LFW0oeco2Wjz9kxQqpMXygP2PNjNpk
lc85rrHDyOhTsIEHoKsNONa4rJmiAZOVlXNL/1b2rRqsM1AelrQeLXEm2pYE30LS
IcftVLj+aszqlpjgLOKszDzDUQFU8Fbpbe3lm3USJGlHHIR4LQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH7Qymc4Rw7nPU6yMnCXYlB9B3AwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzFiZDMzMzEtYmFiZS0z
OWVlLTg5ZDEtZGVlYWU3OWIyMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYCX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEKwK1Ystb9QAVTC6e2ng5viZa88H6mJQjFXtNIgcHv2je4f7li7
0T+V1PYplbd5hw8L3Mc4txOqYbmmlhvqkzBLYE5dYWz3bv3OE23JIfokMbSxF5F0
6mTppRx4HDWKb+Ityn41G7AvC4tVPWTI5kMix7ss6kV9Df7ZER/vZrPYPt/DZC1F
fAo6uWV2WncBhc6WfRpVTVYcE4QK8/x7vDG3+5Dv9Kw7mFklf/pRboma7RQcw+o1
9W8gEmxKq9BaTJ59m+j56E0G2gNdXNMVyhiQpnBOZLj4IujtA/tQcgZbfZM85zzg
mNDfqB/38b8/SpEAyI5Jx+eRl0S/r+SNEFk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:09 2024 by rpki-client on console-ams.rpki-client.org