Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/3e6cd683-aae2-3590-bf94-21296e80c180.roa
File:                     3e6cd683-aae2-3590-bf94-21296e80c180.roa (raw, json)
Hash identifier:          DviXKSgNFjXXCgraILzlSK1nwhpjnHACSXxhpju1oOE=
Subject key identifier:   5C:7F:12:75:49:7E:14:77:34:60:11:16:98:82:75:6E:60:5C:9E:BC
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F432858457082FEC8C2FDD243BD63AE00
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/3e6cd683-aae2-3590-bf94-21296e80c180.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     62529
IP address blocks:        2607:fae0:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:82:fe:c8:c2:fd:d2:43:bd:63:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=6f0d398a-0331-4aee-b30c-18009d76606e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bf:a0:3f:5a:bb:7b:e0:d5:d2:3b:65:35:3d:
                    fe:ba:59:45:14:04:43:3c:19:09:96:ed:65:25:68:
                    c9:45:c6:46:30:e0:f2:c1:dc:fc:90:b1:e3:b5:9b:
                    c4:b1:c3:16:65:60:09:06:85:4a:2c:0b:97:ad:67:
                    79:9f:62:3c:cf:8e:23:89:23:75:75:ae:04:d8:0e:
                    bb:0c:b8:67:3c:e3:0f:f5:43:0c:3f:ab:b4:40:ac:
                    6f:7b:de:39:2e:83:dc:22:0e:71:ed:8b:b5:cb:9f:
                    c1:e9:c4:67:8b:d9:a0:3e:07:31:86:a2:32:c6:f3:
                    34:61:3a:80:b4:6b:7d:e3:44:af:27:f3:a3:42:02:
                    15:a6:58:98:83:b3:72:c6:c8:ca:12:bf:a6:66:88:
                    45:da:d3:2f:ef:d7:46:e7:9e:df:98:f0:0c:97:a3:
                    4f:56:c2:97:ea:8b:6d:cd:3b:ff:71:da:1b:6d:ca:
                    b1:87:fc:6a:f3:ab:5d:c1:33:3b:90:0b:00:40:fe:
                    f1:fd:4b:3a:52:07:bd:30:6b:c5:97:c8:8d:51:93:
                    99:ae:2a:cb:1c:cc:c5:73:d6:ed:e7:6f:10:e1:01:
                    bc:83:d0:ae:d8:93:99:59:6a:00:9d:05:88:7f:3d:
                    6c:a4:11:8f:b3:57:be:02:e1:da:f4:3a:cf:64:74:
                    21:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7F:12:75:49:7E:14:77:34:60:11:16:98:82:75:6E:60:5C:9E:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/3e6cd683-aae2-3590-bf94-21296e80c180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fae0:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a1:9f:52:51:5d:a6:a8:f3:ec:fb:31:5f:57:87:ef:1a:b2:
         7f:7c:be:0c:79:11:e4:59:fc:83:7e:1e:d2:01:4b:31:05:97:
         ce:f8:5f:66:fb:31:8f:4d:68:cf:b3:c1:80:74:da:53:99:61:
         d4:69:3c:ce:04:73:83:25:e1:9f:23:82:6f:c8:de:f1:dc:85:
         2a:82:32:ef:28:1d:e4:8f:f6:02:53:fe:c1:03:92:e1:20:43:
         86:26:a5:5e:3f:ab:54:1e:dd:e5:9e:e0:56:9d:a3:b8:d1:42:
         6b:51:a2:d6:c0:f2:53:b2:59:b9:1a:c8:44:1a:6c:6c:5f:0d:
         ed:9f:08:47:97:8c:33:5d:ee:04:14:c5:69:cf:ea:34:77:97:
         fe:46:dd:d0:95:f5:1c:33:6e:67:60:02:4f:f5:d2:5e:d9:64:
         42:bd:1c:aa:1c:50:0f:3b:0e:54:c9:ca:e5:b2:0d:9a:a0:ef:
         3e:49:b4:61:96:39:84:b2:1e:0a:cd:73:98:20:79:90:10:76:
         e2:97:45:62:5d:98:48:0a:ce:14:cf:90:34:7e:9c:17:3d:ae:
         3b:32:32:5a:5f:68:b6:a9:ee:56:1d:7e:d4:94:35:41:00:f1:
         13:73:3e:2e:bc:51:73:a1:14:b5:00:3f:16:41:23:91:6e:dc:
         d5:c0:45:a3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVwgv7Iwv3SQ71jrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQzMTNjYTctODFlNy00MmUyLWJmMzgtYzk2YmI4Mzll
Y2Y0MB4XDTI0MDQwNTAxMDAyOFoXDTI0MDcwNDAxMDAyOFowLzEtMCsGA1UEAxMk
NmYwZDM5OGEtMDMzMS00YWVlLWIzMGMtMTgwMDlkNzY2MDZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7+gP1q7e+DV0jtlNT3+ullFFARDPBkJlu1l
JWjJRcZGMODywdz8kLHjtZvEscMWZWAJBoVKLAuXrWd5n2I8z44jiSN1da4E2A67
DLhnPOMP9UMMP6u0QKxve945LoPcIg5x7Yu1y5/B6cRni9mgPgcxhqIyxvM0YTqA
tGt940SvJ/OjQgIVpliYg7NyxsjKEr+mZohF2tMv79dG557fmPAMl6NPVsKX6ott
zTv/cdobbcqxh/xq86tdwTM7kAsAQP7x/Us6Uge9MGvFl8iNUZOZrirLHMzFc9bt
528Q4QG8g9Cu2JOZWWoAnQWIfz1spBGPs1e+AuHa9DrPZHQhTQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFx/EnVJfhR3NGARFpiCdW5gXJ68MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZDMx
M2NhNy04MWU3LTQyZTItYmYzOC1jOTZiYjgzOWVjZjQvM2U2Y2Q2ODMtYWFlMi0z
NTkwLWJmOTQtMjEyOTZlODBjMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWQzMTNjYTctODFlNy00MmUyLWJm
MzgtYzk2YmI4MzllY2Y0L2VkMzEzY2E3LTgxZTctNDJlMi1iZjM4LWM5NmJiODM5
ZWNmNC5jcmwwHwYDVR0jBBgwFoAUXZd2euVa2pUu/hSsnovu5Oj9kt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZDMxM2NhNy04MWU3LTQyZTItYmYzOC1jOTZi
YjgzOWVjZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgf64JAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHqGfUlFdpqjz7PsxX1eH7xqyf3y+DHkR5Fn8g34e0gFLMQWXzvhf
Zvsxj01oz7PBgHTaU5lh1Gk8zgRzgyXhnyOCb8je8dyFKoIy7ygd5I/2AlP+wQOS
4SBDhialXj+rVB7d5Z7gVp2juNFCa1Gi1sDyU7JZuRrIRBpsbF8N7Z8IR5eMM13u
BBTFac/qNHeX/kbd0JX1HDNuZ2ACT/XSXtlkQr0cqhxQDzsOVMnK5bINmqDvPkm0
YZY5hLIeCs1zmCB5kBB24pdFYl2YSArOFM+QNH6cFz2uOzIyWl9otqnuVh1+1JQ1
QQDxE3M+LrxRc6EUtQA/FkEjkW7c1cBFow==
-----END CERTIFICATE-----
Generated at Thu Apr 18 16:22:30 2024 by rpki-client on console-fra.rpki-client.org