Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dc2bc0c0-d55e-3b43-a992-3c6b00e11d5a.roa
File:                     dc2bc0c0-d55e-3b43-a992-3c6b00e11d5a.roa (raw, json)
Hash identifier:          UAvGBZt6jFZjX/B+FBvwddPsRdmiaSDIUO7Lc5viW+U=
Subject key identifier:   31:AF:45:A2:1D:D0:C5:93:EC:72:73:B6:21:35:1F:79:98:65:3F:AD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2FBAD30BCEF66CE8E7D40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dc2bc0c0-d55e-3b43-a992-3c6b00e11d5a.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     7843
IP address blocks:        2603:90f2::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:fb:ad:30:bc:ef:66:ce:8e:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=410f83bb-72db-4ace-b256-d6ae868d02e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1e:da:c0:88:f3:9a:16:df:86:72:ee:45:1e:
                    7b:d1:bd:b3:18:ff:c8:f0:88:b1:46:53:01:da:25:
                    fe:14:92:98:8e:11:3c:e2:dd:e8:f3:93:df:4e:83:
                    30:8f:58:0e:3c:da:71:08:7c:3a:a1:f0:a9:33:a6:
                    f5:e8:fb:9f:8f:2e:5c:95:29:2e:8b:78:35:c5:19:
                    6e:3d:3f:51:18:4a:a0:13:6d:be:b6:59:a9:b3:2e:
                    9f:d6:47:ce:4e:78:39:37:31:3c:86:d3:9d:69:92:
                    d1:7b:37:e9:66:fe:5c:08:46:50:c1:be:b3:25:1e:
                    6b:27:5e:fe:e0:a3:34:d7:59:e0:02:08:29:e9:6b:
                    a8:e4:40:8d:23:15:12:e3:ec:86:ae:a6:59:32:c0:
                    6e:fe:ab:a9:02:dc:ed:85:e2:3b:ec:d1:dd:fe:35:
                    fb:54:e8:03:c4:80:a0:a7:5d:14:d1:36:a9:1e:41:
                    87:f3:3f:68:5a:ec:e5:b4:2d:a1:bb:bb:c9:22:21:
                    bb:b7:10:e8:0a:64:55:b5:bc:42:c1:fd:6c:0e:74:
                    92:92:56:8a:6b:d9:86:b3:af:a6:2d:fd:9d:e4:3e:
                    cc:56:b9:c1:6b:c8:74:48:69:e6:bc:d0:3c:1f:48:
                    48:49:c4:d3:7e:a1:f2:ee:46:bb:8b:bb:62:30:4f:
                    79:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AF:45:A2:1D:D0:C5:93:EC:72:73:B6:21:35:1F:79:98:65:3F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dc2bc0c0-d55e-3b43-a992-3c6b00e11d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f2::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:57:f1:90:64:5b:19:e6:cd:6c:35:91:04:8a:17:96:39:9b:
         1b:2c:18:22:36:8f:5b:c5:51:0e:81:6e:f2:67:10:a5:8e:66:
         0b:8d:41:15:07:22:2d:d3:38:da:87:66:90:2c:25:f6:a3:0a:
         63:72:5e:cf:d2:9f:71:dc:9a:99:2d:90:06:17:11:3d:f0:60:
         68:27:97:53:ec:37:d6:bd:04:51:5b:9b:f5:fb:ad:c8:94:3c:
         e9:51:ad:02:b1:32:a9:90:76:74:04:0b:c5:c8:a0:68:83:9d:
         97:dc:5f:92:1f:9e:be:8b:26:c1:9c:05:dc:cb:58:0b:4a:9c:
         ec:6b:6c:43:b0:5a:fc:88:61:f0:ed:e7:bb:4b:34:d7:3c:aa:
         ea:32:33:3f:8f:a9:87:2c:53:31:00:8d:83:95:a6:3d:6f:dd:
         2c:42:02:dd:e1:d7:c9:0e:5e:3c:d5:a1:07:43:7b:50:e7:8d:
         7e:15:28:0c:24:03:69:2e:50:63:6e:ad:5a:9c:75:56:fe:79:
         c1:df:b8:76:b1:90:fb:e6:94:e9:43:de:12:23:a4:a6:8e:72:
         12:3c:08:fa:01:a7:d9:bd:66:cc:98:be:07:bf:02:5c:45:0b:
         66:82:99:5d:05:4e:ee:9f:0d:c8:f1:69:b9:90:fe:0f:d1:59:
         92:82:bc:3e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEVfwvutMLzvZs6OfUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
NDEwZjgzYmItNzJkYi00YWNlLWIyNTYtZDZhZTg2OGQwMmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B7awIjzmhbfhnLuRR570b2zGP/I8IixRlMB
2iX+FJKYjhE84t3o85PfToMwj1gOPNpxCHw6ofCpM6b16Pufjy5clSkui3g1xRlu
PT9RGEqgE22+tlmpsy6f1kfOTng5NzE8htOdaZLRezfpZv5cCEZQwb6zJR5rJ17+
4KM011ngAggp6Wuo5ECNIxUS4+yGrqZZMsBu/qupAtztheI77NHd/jX7VOgDxICg
p10U0TapHkGH8z9oWuzltC2hu7vJIiG7txDoCmRVtbxCwf1sDnSSklaKa9mGs6+m
Lf2d5D7MVrnBa8h0SGnmvNA8H0hIScTTfqHy7ka7i7tiME95RQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDGvRaId0MWT7HJztiE1H3mYZT+tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZGMyYmMwYzAtZDU1ZS0z
YjQzLWE5OTItM2M2YjAwZTExZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgOQ8jBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBvV/GQZFsZ5s1sNZEEiheWOZsbLBgiNo9bxVEOgW7yZxCljmYLjUEV
ByIt0zjah2aQLCX2owpjcl7P0p9x3JqZLZAGFxE98GBoJ5dT7DfWvQRRW5v1+63I
lDzpUa0CsTKpkHZ0BAvFyKBog52X3F+SH56+iybBnAXcy1gLSpzsa2xDsFr8iGHw
7ee7SzTXPKrqMjM/j6mHLFMxAI2DlaY9b90sQgLd4dfJDl481aEHQ3tQ541+FSgM
JANpLlBjbq1anHVW/nnB37h2sZD75pTpQ94SI6SmjnISPAj6AafZvWbMmL4HvwJc
RQtmgpldBU7unw3I8Wm5kP4P0VmSgrw+
-----END CERTIFICATE-----
Generated at Thu May 9 15:34:13 2024 by rpki-client on console-fra.rpki-client.org