Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e0dffb79-030c-32ff-a443-dc21e61cbd98.roa
File:                     e0dffb79-030c-32ff-a443-dc21e61cbd98.roa (raw, json)
Hash identifier:          p9lRIL6oS8u4SbR4kfoJamqY7NUKRlehjT3ItXoC/3s=
Subject key identifier:   C3:9B:59:1C:27:FE:0E:F8:BE:A9:15:B3:53:D4:C3:9B:A3:DA:FC:ED
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC311B0E67809D1BB1D4D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e0dffb79-030c-32ff-a443-dc21e61cbd98.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8155::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:11:b0:e6:78:09:d1:bb:1d:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=c208dc16-7f3b-48ab-a79c-2d8453fa82b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0d:d1:54:7c:d2:90:97:9f:19:a9:af:15:05:
                    cc:56:91:d2:aa:d5:62:e4:1f:f0:51:08:e3:fc:62:
                    9b:60:c1:cb:b7:8b:f1:4b:43:74:30:d3:30:b1:bd:
                    e2:5c:fa:72:af:a9:44:be:75:c7:76:51:81:e8:58:
                    58:9b:a8:a4:45:ce:e3:0d:ec:e1:3c:14:4a:33:27:
                    53:56:cd:91:f9:c1:91:df:f8:32:2d:cc:ad:4a:14:
                    d3:d8:90:27:2d:84:33:14:37:56:51:1a:89:41:a1:
                    ea:d0:c9:b3:24:76:33:4b:59:80:5d:90:24:3d:e5:
                    40:44:ec:bd:1a:53:07:45:15:8c:6e:37:1b:47:25:
                    58:88:7b:3f:b0:45:2a:7a:05:ce:a5:2c:b8:67:52:
                    bb:a4:5b:02:cf:02:7c:1b:b2:46:41:db:d0:13:14:
                    8b:56:28:50:b9:c3:e4:38:7c:05:2d:48:04:98:39:
                    19:3c:61:ab:55:53:68:cb:76:f5:a5:ca:15:e6:65:
                    ad:43:2f:de:b4:fa:af:ee:0f:36:15:eb:30:ab:a9:
                    1d:50:6e:22:07:e3:88:32:d1:60:1c:ef:bd:27:3b:
                    a1:43:48:b1:36:24:3b:15:30:ba:76:e0:8f:ba:c7:
                    86:c4:f6:61:da:32:b6:7e:af:bb:fe:43:f6:21:d0:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9B:59:1C:27:FE:0E:F8:BE:A9:15:B3:53:D4:C3:9B:A3:DA:FC:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e0dffb79-030c-32ff-a443-dc21e61cbd98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8155::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2e:05:ec:47:68:9f:e6:99:1e:f2:0b:52:f7:85:55:a7:d7:
         29:8c:3b:ee:89:31:f7:17:91:9f:b9:77:ba:0d:d4:df:21:99:
         5e:64:8c:ec:94:78:df:33:76:e1:3d:f4:b7:e3:dd:d2:fd:ce:
         43:1e:7a:c6:45:4b:e1:62:34:64:9f:35:f3:d4:cb:a0:3d:ca:
         d7:47:fa:ba:1b:a8:21:90:a7:9a:63:56:4a:42:fa:63:a4:9a:
         fb:95:cf:a5:36:89:a0:e1:bd:6a:8e:dd:b0:28:d7:3f:2e:40:
         5e:7d:c8:fa:eb:07:70:b0:58:39:39:05:81:59:7a:4d:38:0a:
         87:60:1f:6d:32:84:66:e2:48:5e:50:91:27:c4:f0:2f:20:7b:
         5c:a7:b4:f4:33:78:b9:cb:3d:b4:5f:42:d8:95:ab:30:e4:a9:
         a2:b7:ea:59:d9:4a:6d:07:0d:6b:c8:0b:56:e6:50:cb:3f:16:
         9b:1a:7b:ee:c9:b5:22:5e:0e:05:ef:b1:f3:05:a0:f9:86:68:
         bc:3f:af:7c:b4:69:0d:ed:5c:8c:ad:17:fe:b0:82:51:88:c5:
         b7:cc:4e:05:52:a8:04:ee:f0:bb:bf:99:71:27:55:da:0e:76:
         28:48:f9:2a:70:3b:f2:ca:bd:c0:6f:9c:a7:48:60:0c:c1:36:
         22:ff:2e:67
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVfwxGw5ngJ0bsdTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
YzIwOGRjMTYtN2YzYi00OGFiLWE3OWMtMmQ4NDUzZmE4MmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA3RVHzSkJefGamvFQXMVpHSqtVi5B/wUQjj
/GKbYMHLt4vxS0N0MNMwsb3iXPpyr6lEvnXHdlGB6FhYm6ikRc7jDezhPBRKMydT
Vs2R+cGR3/gyLcytShTT2JAnLYQzFDdWURqJQaHq0MmzJHYzS1mAXZAkPeVAROy9
GlMHRRWMbjcbRyVYiHs/sEUqegXOpSy4Z1K7pFsCzwJ8G7JGQdvQExSLVihQucPk
OHwFLUgEmDkZPGGrVVNoy3b1pcoV5mWtQy/etPqv7g82Feswq6kdUG4iB+OIMtFg
HO+9JzuhQ0ixNiQ7FTC6duCPuseGxPZh2jK2fq+7/kP2IdAOaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMObWRwn/g74vqkVs1PUw5uj2vztMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZTBkZmZiNzktMDMwYy0z
MmZmLWE0NDMtZGMyMWU2MWNiZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYFV
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHAuBexHaJ/mmR7yC1L3hVWn1ymMO+6JMfcXkZ+5d7oN1N8hmV5k
jOyUeN8zduE99Lfj3dL9zkMeesZFS+FiNGSfNfPUy6A9ytdH+robqCGQp5pjVkpC
+mOkmvuVz6U2iaDhvWqO3bAo1z8uQF59yPrrB3CwWDk5BYFZek04CodgH20yhGbi
SF5QkSfE8C8ge1yntPQzeLnLPbRfQtiVqzDkqaK36lnZSm0HDWvIC1bmUMs/Fpsa
e+7JtSJeDgXvsfMFoPmGaLw/r3y0aQ3tXIytF/6wglGIxbfMTgVSqATu8Lu/mXEn
VdoOdihI+SpwO/LKvcBvnKdIYAzBNiL/Lmc=
-----END CERTIFICATE-----
Generated at Thu May 9 15:34:13 2024 by rpki-client on console-fra.rpki-client.org