Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/134a8934-a6e6-3602-a0f7-86fb551d7c06.roa
File:                     134a8934-a6e6-3602-a0f7-86fb551d7c06.roa (raw, json)
Hash identifier:          pZLM86/V74k/YtDdhIdD1wAT6LiMQje7DgbNC33ZRXs=
Subject key identifier:   35:0C:7B:E1:90:75:65:82:11:A7:31:C7:A1:96:3C:A9:A2:32:BB:36
Certificate issuer:       /CN=fc9f4430-0302-4502-ba1d-52836c0222ae
Certificate serial:       010D0C9F43285845347D4B7D7DEB0D4535042180
Authority key identifier: F3:FF:1F:AC:CF:B8:AE:DD:EF:8A:B4:07:D4:FB:F2:11:D2:E7:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/134a8934-a6e6-3602-a0f7-86fb551d7c06.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     36719
IP address blocks:        2620:b1:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/fc9f4430-0302-4502-ba1d-52836c0222ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/fc9f4430-0302-4502-ba1d-52836c0222ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:4b:7d:7d:eb:0d:45:35:04:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9f4430-0302-4502-ba1d-52836c0222ae
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=3ff9a3dc-2560-45f4-a143-286fd8d869ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:32:48:92:01:b4:53:d6:5b:00:49:2a:ea:cf:
                    fa:2b:26:68:db:54:4e:1e:c1:e2:fe:50:92:94:63:
                    99:48:5c:83:7d:96:74:bc:86:f7:6f:61:86:39:d4:
                    66:99:8b:af:e7:f7:cc:23:eb:fa:dd:d2:ad:64:f1:
                    ec:81:59:c3:15:46:d4:3d:13:fc:cc:fd:6f:69:72:
                    0d:ee:e5:c8:62:6a:aa:59:3e:f6:70:ab:98:d8:36:
                    68:f3:e4:c4:b3:3e:68:63:a5:df:e8:aa:00:ae:a7:
                    bd:f5:85:64:a7:19:10:03:62:2c:59:66:1f:ea:7b:
                    eb:1c:91:3b:41:7f:78:98:04:67:68:b7:0e:17:43:
                    d7:61:f9:64:57:7e:4a:6f:13:3c:0b:b7:8d:63:53:
                    c5:0e:d5:b6:b9:ff:3e:1c:74:3d:d8:cc:ac:de:94:
                    d7:58:b9:1d:cf:51:cc:11:58:4c:ea:e5:ea:fd:69:
                    6b:f4:e9:cf:ba:11:22:28:2b:16:f1:e8:5a:c5:e8:
                    73:bc:ee:6e:3c:4c:de:99:e9:37:2f:22:8a:52:3d:
                    88:47:4b:21:6f:12:65:14:7f:b8:5b:7d:8e:be:0e:
                    93:c4:5e:cf:a2:ae:51:c3:95:03:e6:e9:61:3b:4b:
                    ab:d2:e2:ce:30:37:da:64:a0:7f:f2:4c:e2:df:38:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0C:7B:E1:90:75:65:82:11:A7:31:C7:A1:96:3C:A9:A2:32:BB:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/134a8934-a6e6-3602-a0f7-86fb551d7c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/fc9f4430-0302-4502-ba1d-52836c0222ae.crl

            X509v3 Authority Key Identifier:
                keyid:F3:FF:1F:AC:CF:B8:AE:DD:EF:8A:B4:07:D4:FB:F2:11:D2:E7:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b1:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:08:ab:2a:d6:33:90:11:b6:4c:71:36:ed:e9:85:47:d0:1f:
         68:50:c5:b9:33:32:7f:a0:13:39:e6:dc:ce:f6:2b:86:71:71:
         9f:93:51:61:57:4c:cb:98:a5:27:19:ab:5c:71:bf:84:2c:c2:
         d9:16:56:43:90:b4:63:59:90:a8:97:1f:89:93:00:e7:90:64:
         6b:3b:54:1a:dd:91:84:a8:95:49:12:11:86:78:d9:dc:1a:1d:
         88:9a:86:e2:04:f5:1d:51:e0:78:77:a5:ab:21:8c:ae:e3:2f:
         72:16:2c:4d:ef:88:8f:a9:53:6a:1e:51:df:19:5d:c5:0e:8b:
         c3:56:c5:cb:71:9e:db:59:61:38:1e:01:d7:56:04:76:1f:34:
         74:15:aa:19:bc:04:e6:2f:95:ef:8e:ee:c1:8e:fc:f1:14:4a:
         46:04:a5:8a:af:a9:ee:7b:35:d8:13:58:a7:87:c4:8e:ac:16:
         ac:05:ab:d8:2c:60:de:19:6a:1c:41:c5:4e:cb:55:f3:7f:a4:
         aa:7f:50:91:d8:9f:5b:25:5e:ea:7e:ee:73:4d:5f:c0:6e:64:
         00:03:da:3e:8e:0d:2b:8e:66:76:dc:ba:ad:d0:82:04:9a:b9:
         c2:0d:40:1b:96:dd:de:c6:a9:a3:23:37:94:9a:c8:1f:e1:2a:
         3e:a3:3c:38
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEU0fUt9fesNRTUEIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmM5ZjQ0MzAtMDMwMi00NTAyLWJhMWQtNTI4MzZjMDIy
MmFlMB4XDTI0MDMxNDEzMDAzMFoXDTI0MDYxMjEzMDAzMFowLzEtMCsGA1UEAxMk
M2ZmOWEzZGMtMjU2MC00NWY0LWExNDMtMjg2ZmQ4ZDg2OWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DJIkgG0U9ZbAEkq6s/6KyZo21ROHsHi/lCS
lGOZSFyDfZZ0vIb3b2GGOdRmmYuv5/fMI+v63dKtZPHsgVnDFUbUPRP8zP1vaXIN
7uXIYmqqWT72cKuY2DZo8+TEsz5oY6Xf6KoArqe99YVkpxkQA2IsWWYf6nvrHJE7
QX94mARnaLcOF0PXYflkV35KbxM8C7eNY1PFDtW2uf8+HHQ92Mys3pTXWLkdz1HM
EVhM6uXq/Wlr9OnPuhEiKCsW8ehaxehzvO5uPEzemek3LyKKUj2IR0shbxJlFH+4
W32Ovg6TxF7Poq5Rw5UD5ulhO0ur0uLOMDfaZKB/8kzi3zhX5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDUMe+GQdWWCEacxx6GWPKmiMrs2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mYzlm
NDQzMC0wMzAyLTQ1MDItYmExZC01MjgzNmMwMjIyYWUvMTM0YTg5MzQtYTZlNi0z
NjAyLWEwZjctODZmYjU1MWQ3YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmM5ZjQ0MzAtMDMwMi00NTAyLWJh
MWQtNTI4MzZjMDIyMmFlL2ZjOWY0NDMwLTAzMDItNDUwMi1iYTFkLTUyODM2YzAy
MjJhZS5jcmwwHwYDVR0jBBgwFoAU8/8frM+4rt3virQH1PvyEdLnFCEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mYzlmNDQzMC0wMzAyLTQ1MDItYmExZC01Mjgz
NmMwMjIyYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAsUAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHQIqyrWM5ARtkxxNu3phUfQH2hQxbkzMn+gEznm3M72K4ZxcZ+T
UWFXTMuYpScZq1xxv4QswtkWVkOQtGNZkKiXH4mTAOeQZGs7VBrdkYSolUkSEYZ4
2dwaHYiahuIE9R1R4Hh3pashjK7jL3IWLE3viI+pU2oeUd8ZXcUOi8NWxctxnttZ
YTgeAddWBHYfNHQVqhm8BOYvle+O7sGO/PEUSkYEpYqvqe57NdgTWKeHxI6sFqwF
q9gsYN4ZahxBxU7LVfN/pKp/UJHYn1slXup+7nNNX8BuZAAD2j6ODSuOZnbcuq3Q
ggSaucINQBuW3d7GqaMjN5SayB/hKj6jPDg=
-----END CERTIFICATE-----
Generated at Wed May 15 19:25:58 2024 by rpki-client on console-ams.rpki-client.org