Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/bb601275-156b-3a32-902f-cdcc9c3484d9.roa
File:                     bb601275-156b-3a32-902f-cdcc9c3484d9.roa (raw, json)
Hash identifier:          zfcFaPaTmJ64OVjl+bVWCJd3JTpeRGbU751JNIrvzWE=
Subject key identifier:   8C:16:8C:EB:33:EE:9C:70:62:46:90:3C:A9:E5:09:AD:A0:29:B8:AD
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858456DE7A047680A20D3FBD87300
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/bb601275-156b-3a32-902f-cdcc9c3484d9.roa
Signing time:             Thu 04 Apr 2024 02:35:53 +0000
ROA not before:           Thu 04 Apr 2024 02:35:53 +0000
ROA not after:            Wed 03 Jul 2024 02:35:53 +0000
asID:                     15169
IP address blocks:        2605:ef80:c030::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6d:e7:a0:47:68:0a:20:d3:fb:d8:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Apr  4 02:35:53 2024 GMT
            Not After : Jul  3 02:35:53 2024 GMT
        Subject: CN=3db61b4b-06e1-4e65-ae5e-3c649e0785a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c9:80:ab:e3:6e:e2:ba:38:a9:3f:33:e5:d8:
                    69:13:52:fb:8f:ed:3d:99:64:e7:b6:8d:46:c4:79:
                    28:1b:1c:ab:f9:ae:b3:a5:97:70:e3:49:bb:01:9f:
                    46:b5:e7:8d:77:37:80:4e:60:fc:c4:77:5a:ef:43:
                    d5:a8:28:b6:6c:80:46:9a:c8:7a:14:33:d3:b3:c8:
                    a0:5a:ae:a8:72:96:f4:38:37:2c:11:46:94:7d:c5:
                    f4:59:17:c5:b7:ff:e0:05:2b:ac:85:d2:8a:4a:a8:
                    a7:04:47:72:de:ef:d8:d7:56:c1:a6:96:73:a4:60:
                    1c:1b:3b:4f:b5:c5:f2:9e:76:66:d9:cf:a8:59:93:
                    a1:9a:f0:89:1e:6b:7a:99:b6:5c:ff:cc:74:c9:ee:
                    b7:8a:d9:8d:97:af:75:21:f5:b4:01:ef:33:d4:4e:
                    67:bd:71:01:d0:9b:db:82:45:59:e6:0a:2a:04:06:
                    ef:fc:aa:15:8b:ff:27:2c:f6:0b:55:68:bd:6f:ac:
                    8e:e4:76:ee:e1:ed:4c:43:fe:aa:0f:ec:97:84:41:
                    c9:9b:8d:00:ec:74:26:d7:c7:08:39:73:59:1d:c2:
                    f7:b4:de:37:82:15:a4:d3:42:20:04:bd:f9:23:28:
                    33:31:43:ad:2d:3d:d7:b7:11:60:84:98:39:54:de:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:16:8C:EB:33:EE:9C:70:62:46:90:3C:A9:E5:09:AD:A0:29:B8:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/bb601275-156b-3a32-902f-cdcc9c3484d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ef80:c030::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ef:b8:bb:0a:dc:23:70:5b:af:37:4d:d5:f3:3e:86:cb:4c:
         21:84:7a:77:b4:5e:de:e3:6d:00:bc:1b:e5:89:c3:d6:b8:fd:
         be:2a:8d:0c:af:6f:45:88:79:0e:7d:03:9c:43:5a:c7:88:fe:
         ed:7a:45:be:d5:27:06:7d:6a:4b:d1:7a:df:0a:f8:8c:6d:d7:
         04:c1:85:24:f9:0d:27:57:a3:e0:2b:c2:74:f2:8e:b6:24:58:
         06:87:f4:dc:2d:b1:72:f0:b1:52:c1:ea:fe:8a:81:00:87:b7:
         95:76:af:a7:85:5e:b0:6b:2b:3f:cf:06:41:de:52:2a:45:69:
         5b:9e:74:f2:98:0a:ad:5b:72:c5:79:3f:77:31:af:bb:89:99:
         51:4b:57:84:dd:01:f0:98:a8:5b:ca:62:d2:78:94:a7:38:66:
         62:b5:82:68:c7:f4:a2:4b:77:68:ed:4c:b5:4c:23:13:56:3e:
         f6:0c:0b:a1:0b:34:06:fa:16:ca:e8:47:2d:c3:ae:1b:7f:6e:
         27:70:25:5b:1f:6f:bf:e4:df:62:52:86:35:f4:fe:87:8b:7c:
         43:ac:dd:e1:b5:11:b3:99:6a:41:ef:8c:21:5f:51:a3:30:12:
         ed:e4:42:47:2e:4e:df:31:b5:d6:40:bf:72:92:bd:9e:93:03:
         3f:96:0c:fb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVt56BHaAog0/vYcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTI0MDQwNDAyMzU1M1oXDTI0MDcwMzAyMzU1M1owLzEtMCsGA1UEAxMk
M2RiNjFiNGItMDZlMS00ZTY1LWFlNWUtM2M2NDllMDc4NWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMmAq+Nu4ro4qT8z5dhpE1L7j+09mWTnto1G
xHkoGxyr+a6zpZdw40m7AZ9GteeNdzeATmD8xHda70PVqCi2bIBGmsh6FDPTs8ig
Wq6ocpb0ODcsEUaUfcX0WRfFt//gBSushdKKSqinBEdy3u/Y11bBppZzpGAcGztP
tcXynnZm2c+oWZOhmvCJHmt6mbZc/8x0ye63itmNl691IfW0Ae8z1E5nvXEB0Jvb
gkVZ5goqBAbv/KoVi/8nLPYLVWi9b6yO5Hbu4e1MQ/6qD+yXhEHJm40A7HQm18cI
OXNZHcL3tN43ghWk00IgBL35IygzMUOtLT3XtxFghJg5VN7/7wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIwWjOsz7pxwYkaQPKnlCa2gKbitMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvYmI2MDEyNzUtMTU2Yi0z
YTMyLTkwMmYtY2RjYzljMzQ4NGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgXvgMAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGbvuLsK3CNwW683TdXzPobLTCGEene0Xt7jbQC8G+WJw9a4/b4q
jQyvb0WIeQ59A5xDWseI/u16Rb7VJwZ9akvRet8K+Ixt1wTBhST5DSdXo+ArwnTy
jrYkWAaH9NwtsXLwsVLB6v6KgQCHt5V2r6eFXrBrKz/PBkHeUipFaVuedPKYCq1b
csV5P3cxr7uJmVFLV4TdAfCYqFvKYtJ4lKc4ZmK1gmjH9KJLd2jtTLVMIxNWPvYM
C6ELNAb6FsroRy3Drht/bidwJVsfb7/k32JShjX0/oeLfEOs3eG1EbOZakHvjCFf
UaMwEu3kQkcuTt8xtdZAv3KSvZ6TAz+WDPs=
-----END CERTIFICATE-----
Generated at Sat May 18 01:57:21 2024 by rpki-client on console-ams.rpki-client.org