Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8cc8432-cddb-3d13-80f7-5b2235ab4ebc.roa
File:                     c8cc8432-cddb-3d13-80f7-5b2235ab4ebc.roa (raw, json)
Hash identifier:          nY46wx+cVZwQzqDiPnB0tJRnVGQYXv+TymsdOeRw4nw=
Subject key identifier:   5A:5C:A5:42:07:23:41:40:D5:03:4C:C4:74:62:E5:EF:06:61:BB:24
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD6011CBAB19999EFF52A80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8cc8432-cddb-3d13-80f7-5b2235ab4ebc.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2603:9031:70::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:01:1c:ba:b1:99:99:ef:f5:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=cccfb7bb-7a4b-479f-9ac0-4f9778634200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:b1:d6:03:78:e3:b8:b5:7c:e8:bf:7c:61:
                    e1:48:ca:d2:b1:f6:9f:ba:a3:56:37:18:26:7e:fb:
                    60:7e:8e:b9:83:61:fe:10:74:4b:c9:17:af:10:64:
                    53:2d:a6:78:5c:fe:1e:e4:88:04:ac:67:7a:d3:46:
                    06:d0:72:6a:f9:55:7f:06:80:ec:c4:64:b8:2c:e0:
                    22:d4:2f:88:53:9e:74:cc:33:6d:04:e2:59:40:63:
                    eb:c3:a3:57:e6:fc:14:49:53:ba:76:0c:83:fd:28:
                    58:b4:2d:a9:1f:d6:a9:ef:c6:90:f9:1a:37:89:b2:
                    07:cd:32:14:dc:d7:35:be:86:d5:22:07:d9:37:80:
                    ba:c7:95:c0:ee:5b:1b:4b:ba:bd:5f:12:c9:9b:52:
                    35:31:26:b0:c6:db:7f:6e:37:16:ac:07:29:78:a1:
                    c9:ad:9c:19:f4:d5:e1:9a:92:ed:fd:6f:3c:79:8f:
                    f5:5f:4a:60:b8:ee:cd:47:9e:8d:67:bd:37:89:d4:
                    56:1b:4b:26:1e:e2:d0:9f:c2:ef:c2:eb:1d:4f:53:
                    d1:c4:7f:bc:16:c4:94:96:c2:11:b8:9d:a7:f5:68:
                    f3:c3:ec:08:eb:35:2e:90:64:6f:c2:ee:73:ac:2e:
                    ec:c5:a9:3c:33:94:aa:de:ab:bc:14:50:f1:8f:09:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5C:A5:42:07:23:41:40:D5:03:4C:C4:74:62:E5:EF:06:61:BB:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8cc8432-cddb-3d13-80f7-5b2235ab4ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9031:70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f2:15:2a:b8:69:b2:a1:91:1b:ed:ef:6f:d3:15:6e:16:15:
         84:70:ad:59:c1:4b:2d:f0:34:4d:d6:75:ac:9a:70:b6:d1:f3:
         0e:90:f7:8e:15:37:40:7d:bd:ec:7d:ad:16:bc:4f:7b:44:43:
         96:1a:51:65:80:ae:8a:ee:4d:d3:d2:fb:4e:ff:a8:4e:ba:df:
         85:1a:f4:ec:0c:41:21:0f:09:b0:92:48:2d:58:32:ee:db:1c:
         f2:da:1c:89:f9:21:e2:4f:ab:7a:6b:b0:1d:e8:e0:1b:c8:ed:
         31:fe:3a:c4:e4:4c:94:1d:eb:4e:a5:87:4d:54:69:9d:92:e1:
         bc:51:91:a1:2e:b7:ab:14:c1:f5:96:4b:5e:8c:01:ad:54:be:
         67:a1:13:14:9d:3a:ad:29:f6:c7:df:df:21:51:b2:78:2a:8b:
         93:19:39:d4:00:cb:da:8a:4f:b0:92:3d:2c:22:aa:5d:78:ef:
         4d:5c:68:39:42:69:f8:30:8b:6a:ca:c0:b5:07:1c:2f:c9:36:
         8d:e4:d9:92:41:c3:ff:bb:a3:94:ff:6a:a5:f8:3e:54:3f:3c:
         10:d5:f0:57:98:81:a7:74:26:ba:d1:2a:75:6e:8b:4b:de:44:
         1b:21:a7:8e:4d:ed:7f:f3:d8:68:67:ab:8b:0a:04:4f:15:df:
         05:56:50:52
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcf1gEcurGZme/1KoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
Y2NjZmI3YmItN2E0Yi00NzlmLTlhYzAtNGY5Nzc4NjM0MjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujmx1gN447i1fOi/fGHhSMrSsfafuqNWNxgm
fvtgfo65g2H+EHRLyRevEGRTLaZ4XP4e5IgErGd600YG0HJq+VV/BoDsxGS4LOAi
1C+IU550zDNtBOJZQGPrw6NX5vwUSVO6dgyD/ShYtC2pH9ap78aQ+Ro3ibIHzTIU
3Nc1vobVIgfZN4C6x5XA7lsbS7q9XxLJm1I1MSawxtt/bjcWrAcpeKHJrZwZ9NXh
mpLt/W88eY/1X0pguO7NR56NZ703idRWG0smHuLQn8LvwusdT1PRxH+8FsSUlsIR
uJ2n9Wjzw+wI6zUukGRvwu5zrC7sxak8M5Sq3qu8FFDxjwnJ4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFpcpUIHI0FA1QNMxHRi5e8GYbskMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzhjYzg0MzItY2RkYi0z
ZDEzLTgwZjctNWIyMjM1YWI0ZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgOQMQBw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACvyFSq4abKhkRvt72/TFW4WFYRwrVnBSy3wNE3WdayacLbR8w6Q
944VN0B9vex9rRa8T3tEQ5YaUWWAroruTdPS+07/qE6634Ua9OwMQSEPCbCSSC1Y
Mu7bHPLaHIn5IeJPq3prsB3o4BvI7TH+OsTkTJQd606lh01UaZ2S4bxRkaEut6sU
wfWWS16MAa1UvmehExSdOq0p9sff3yFRsngqi5MZOdQAy9qKT7CSPSwiql14701c
aDlCafgwi2rKwLUHHC/JNo3k2ZJBw/+7o5T/aqX4PlQ/PBDV8FeYgad0JrrRKnVu
i0veRBshp45N7X/z2Ghnq4sKBE8V3wVWUFI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org