Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d808975a-cff1-3ca1-b884-2a1aa0d8fe92.roa
File:                     d808975a-cff1-3ca1-b884-2a1aa0d8fe92.roa (raw, json)
Hash identifier:          EdIACUozJwuaTM19XvQQC0+rFVGflZGR+PmvY6MAhlQ=
Subject key identifier:   D2:5E:ED:15:90:DC:D6:E8:5A:8A:46:50:F4:E9:87:ED:0F:F3:3D:24
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967D1183CA8E67AD36507900
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d808975a-cff1-3ca1-b884-2a1aa0d8fe92.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8102::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:11:83:ca:8e:67:ad:36:50:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=91d1ba52-ca53-412a-9d33-5cfe68e01c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:28:d2:a4:c0:31:e8:ea:54:a2:cb:e2:0b:
                    c9:20:7e:b7:74:c8:09:75:45:6e:d5:4c:cd:f0:2b:
                    37:39:12:55:8b:1a:13:d4:f1:6a:b1:ec:98:32:c9:
                    27:ff:53:f6:52:07:4f:c0:d5:56:65:54:cc:bd:d5:
                    93:78:03:66:ed:37:23:d7:ca:8a:f4:1f:ea:49:e6:
                    73:f2:79:a4:51:29:1e:26:ef:73:b6:8c:4d:97:02:
                    eb:01:eb:68:3e:a6:ac:89:de:97:c3:d7:2d:a6:a7:
                    c6:a8:dd:f9:ab:a9:e7:ec:f7:2e:a8:b5:b1:a6:19:
                    ab:38:c4:f8:6a:75:f8:77:68:87:46:16:73:a4:5b:
                    ca:cc:83:fc:19:db:1d:d0:9b:2f:a4:99:1c:49:de:
                    36:b7:f9:8f:44:45:ab:6a:95:9a:16:a4:79:b3:a0:
                    50:c5:a9:bb:2f:03:3e:0e:34:8c:e6:f2:0f:88:ec:
                    33:3c:17:11:8c:c7:d2:28:62:17:eb:07:9a:78:ce:
                    cf:b0:4a:a1:63:89:13:0a:fb:6b:c7:9b:a3:68:10:
                    be:25:f0:0e:a3:4e:29:ad:77:88:f5:36:df:9b:5d:
                    71:48:fa:e9:3b:39:cd:f7:93:db:62:9b:e2:2b:4d:
                    9b:3d:84:fa:04:21:cd:37:ab:e4:45:6f:dc:52:1c:
                    8a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5E:ED:15:90:DC:D6:E8:5A:8A:46:50:F4:E9:87:ED:0F:F3:3D:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d808975a-cff1-3ca1-b884-2a1aa0d8fe92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:01:a4:4d:15:1a:7e:ff:58:5a:aa:e9:4b:39:da:d6:8b:f5:
         13:aa:b5:7c:d0:59:73:6e:5b:2b:df:2b:e0:13:70:7c:33:89:
         8f:7c:e0:15:2e:98:3b:78:f5:9b:25:d9:30:e0:73:8f:c9:13:
         b2:10:31:3b:b1:20:ed:50:65:99:89:7d:64:dc:6a:c1:2b:68:
         cf:49:b7:a6:e4:8f:23:18:8e:d6:cb:b0:13:6d:50:f9:4e:2b:
         3f:03:e2:1e:16:83:a3:9b:42:61:59:ea:e8:12:b0:c9:7c:2c:
         9e:1d:c3:0e:7c:29:57:af:35:be:b0:19:73:53:97:b5:b9:f7:
         65:cb:02:85:41:5a:2b:7b:5c:30:64:79:9c:f1:0d:a6:45:bf:
         73:9a:01:08:51:94:9d:90:04:24:e8:98:44:44:4c:e9:ee:8d:
         a6:dd:11:5c:d9:4d:84:56:b0:a4:85:f7:17:04:24:dc:9b:73:
         54:ee:cf:dc:7c:11:7b:67:5f:b7:f5:41:ff:47:ca:7c:4b:55:
         34:fc:e3:62:61:2f:17:81:54:77:72:4c:ca:7a:19:22:28:bd:
         56:77:83:4e:23:9e:7d:6e:00:79:8c:ae:63:dd:d1:36:62:9a:
         88:fb:a0:82:9d:8a:52:b2:12:5e:13:60:8d:ff:62:a7:7a:b6:
         16:23:05:1f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDmWfRGDyo5nrTZQeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDQxNDA0MDAwMFoXDTI3MDQwNzA0MDAwMFowLzEtMCsGA1UEAxMk
OTFkMWJhNTItY2E1My00MTJhLTlkMzMtNWNmZTY4ZTAxYzE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjko0qTAMejqVKLL4gvJIH63dMgJdUVu1UzN
8Cs3ORJVixoT1PFqseyYMskn/1P2UgdPwNVWZVTMvdWTeANm7Tcj18qK9B/qSeZz
8nmkUSkeJu9ztoxNlwLrAetoPqasid6Xw9ctpqfGqN35q6nn7PcuqLWxphmrOMT4
anX4d2iHRhZzpFvKzIP8Gdsd0JsvpJkcSd42t/mPREWrapWaFqR5s6BQxam7LwM+
DjSM5vIPiOwzPBcRjMfSKGIX6weaeM7PsEqhY4kTCvtrx5ujaBC+JfAOo04prXeI
9Tbfm11xSPrpOznN95PbYpviK02bPYT6BCHNN6vkRW/cUhyK8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNJe7RWQ3NboWopGUPTph+0P8z0kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZDgwODk3NWEtY2ZmMS0z
Y2ExLWI4ODQtMmExYWEwZDhmZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYEC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFYBpE0VGn7/WFqq6Us52taL9ROqtXzQWXNuWyvfK+ATcHwziY98
4BUumDt49Zsl2TDgc4/JE7IQMTuxIO1QZZmJfWTcasEraM9Jt6bkjyMYjtbLsBNt
UPlOKz8D4h4Wg6ObQmFZ6ugSsMl8LJ4dww58KVevNb6wGXNTl7W592XLAoVBWit7
XDBkeZzxDaZFv3OaAQhRlJ2QBCTomERETOnujabdEVzZTYRWsKSF9xcEJNybc1Tu
z9x8EXtnX7f1Qf9HynxLVTT842JhLxeBVHdyTMp6GSIovVZ3g04jnn1uAHmMrmPd
0TZimoj7oIKdilKyEl4TYI3/Yqd6thYjBR8=
-----END CERTIFICATE-----
Generated at Thu May 9 15:34:13 2024 by rpki-client on console-fra.rpki-client.org