Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dbecde4a-f954-39d7-a9df-bfd0f9f5b98e.roa
File:                     dbecde4a-f954-39d7-a9df-bfd0f9f5b98e.roa (raw, json)
Hash identifier:          alqXhcigsOGQlW57MFe4tmRWmR/8a+xhyjKOnsLDhx8=
Subject key identifier:   D7:69:90:CB:60:BD:76:DA:2A:19:D4:3E:4B:49:8F:C0:72:BC:37:D3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC312CFA46D1CF561139D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dbecde4a-f954-39d7-a9df-bfd0f9f5b98e.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8268::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:12:cf:a4:6d:1c:f5:61:13:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=767fa2d8-0c9f-41c4-a921-457cc0e79591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:ed:32:b0:07:6c:f2:a7:cf:c6:a7:fe:c8:
                    38:08:08:61:fc:a5:88:ef:1d:e2:8a:8e:2d:28:c2:
                    95:30:5e:95:25:f6:52:87:11:70:9d:a6:08:30:c5:
                    b0:58:61:3d:e4:13:06:83:5c:87:3d:04:da:8d:b5:
                    85:3d:ea:fe:be:2b:99:e8:2b:b0:34:aa:7e:c6:e0:
                    c3:74:e2:a9:2f:84:bc:52:ee:1b:61:1d:2f:2b:d0:
                    0c:06:d0:fb:31:ec:05:b7:48:a3:8e:31:5b:35:0b:
                    ae:7f:31:03:7a:fd:a2:5d:f7:fb:17:b3:f5:26:6f:
                    70:5d:b5:89:b7:7d:55:b9:1c:7d:83:12:28:f6:73:
                    42:4b:88:43:be:cd:53:3b:e7:04:c8:6e:7a:f9:4f:
                    db:29:20:f5:52:04:c5:89:7b:e0:a0:42:d3:1c:14:
                    c0:42:be:e7:74:0d:b1:87:27:34:e5:4e:94:f3:d3:
                    f8:cb:23:e1:86:ec:82:fe:68:d6:38:d2:d6:54:99:
                    2a:f4:a1:5f:46:12:dc:61:4c:58:59:14:61:cc:c3:
                    ed:67:cf:cd:8e:dc:60:d9:0c:6e:62:6a:7f:8d:9e:
                    79:ac:1f:a7:5d:7c:10:fc:0b:d4:59:d5:15:cc:6e:
                    d3:5c:6a:e6:a6:d0:1e:67:ed:ca:ec:2e:ca:1c:09:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:69:90:CB:60:BD:76:DA:2A:19:D4:3E:4B:49:8F:C0:72:BC:37:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dbecde4a-f954-39d7-a9df-bfd0f9f5b98e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8268::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c7:2f:83:66:38:0e:8c:c5:8f:93:78:e0:1d:79:fb:3a:4d:
         16:be:83:ab:51:e8:60:21:3c:b2:b2:7a:3d:94:7b:66:90:2b:
         ab:8e:49:69:48:9c:b2:dd:f4:49:ad:a5:7c:af:b4:0e:80:99:
         58:2a:a5:c0:d4:14:19:87:78:26:9c:cc:f6:27:c9:a4:22:bf:
         13:fa:28:79:d1:6b:f9:7e:42:e4:8f:47:97:4d:8b:1b:78:a3:
         39:01:3b:f4:1d:76:56:7a:97:fd:ff:46:38:ce:ec:07:72:bc:
         21:b8:0e:a9:a6:32:4a:a4:62:72:74:38:fd:84:73:0c:57:f3:
         c7:16:a4:b7:13:64:61:02:3b:fd:47:59:0a:a7:a5:a1:a1:ac:
         fe:3b:22:12:2c:32:47:11:72:2b:ce:55:fe:ee:1b:8b:74:f6:
         01:dd:e5:1c:a0:ee:88:61:df:67:25:fa:ed:e8:21:fd:1c:4e:
         b9:ad:45:fd:e0:51:58:15:3f:6b:d6:e2:65:c9:25:cd:88:1d:
         99:58:36:1f:07:db:59:80:1e:21:c1:0c:52:b5:c3:09:9d:d5:
         6f:5e:4d:e6:81:94:d1:85:4b:ea:1f:98:37:2c:44:63:99:f8:
         7f:4b:3d:af:9c:da:78:01:df:a6:51:91:d6:f9:8a:b6:f6:5a:
         46:4f:cc:d7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVfwxLPpG0c9WETnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
NzY3ZmEyZDgtMGM5Zi00MWM0LWE5MjEtNDU3Y2MwZTc5NTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul/tMrAHbPKnz8an/sg4CAhh/KWI7x3iio4t
KMKVMF6VJfZShxFwnaYIMMWwWGE95BMGg1yHPQTajbWFPer+viuZ6CuwNKp+xuDD
dOKpL4S8Uu4bYR0vK9AMBtD7MewFt0ijjjFbNQuufzEDev2iXff7F7P1Jm9wXbWJ
t31VuRx9gxIo9nNCS4hDvs1TO+cEyG56+U/bKSD1UgTFiXvgoELTHBTAQr7ndA2x
hyc05U6U89P4yyPhhuyC/mjWONLWVJkq9KFfRhLcYUxYWRRhzMPtZ8/Njtxg2Qxu
Ymp/jZ55rB+nXXwQ/AvUWdUVzG7TXGrmptAeZ+3K7C7KHAkMUQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNdpkMtgvXbaKhnUPktJj8ByvDfTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZGJlY2RlNGEtZjk1NC0z
OWQ3LWE5ZGYtYmZkMGY5ZjViOThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYJo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADLHL4NmOA6MxY+TeOAdefs6TRa+g6tR6GAhPLKyej2Ue2aQK6uO
SWlInLLd9EmtpXyvtA6AmVgqpcDUFBmHeCaczPYnyaQivxP6KHnRa/l+QuSPR5dN
ixt4ozkBO/QddlZ6l/3/RjjO7AdyvCG4DqmmMkqkYnJ0OP2EcwxX88cWpLcTZGEC
O/1HWQqnpaGhrP47IhIsMkcRcivOVf7uG4t09gHd5Ryg7ohh32cl+u3oIf0cTrmt
Rf3gUVgVP2vW4mXJJc2IHZlYNh8H21mAHiHBDFK1wwmd1W9eTeaBlNGFS+ofmDcs
RGOZ+H9LPa+c2ngB36ZRkdb5irb2WkZPzNc=
-----END CERTIFICATE-----
Generated at Fri May 10 17:25:10 2024 by rpki-client on console-fra.rpki-client.org