Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/9ff25308-6406-35b7-8e9c-6d713fd2578e.roa
File:                     9ff25308-6406-35b7-8e9c-6d713fd2578e.roa (raw, json)
Hash identifier:          DgiZjqnwIz/fYl5DNl9onNRWX35UMXJ/ECeLTHWtoBo=
Subject key identifier:   76:06:15:F7:49:74:C5:21:07:E6:6D:70:0B:D7:A4:84:2D:A5:BA:FB
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285845777DDB4C37EDCCFA2B7AE0D8
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/9ff25308-6406-35b7-8e9c-6d713fd2578e.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     30133
IP address blocks:        2001:500:68::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:db:4c:37:ed:cc:fa:2b:7a:e0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=7fdb0a8a-c2fd-49b5-90cd-5a4d7105b5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c0:8e:06:64:f6:0b:6d:74:92:dc:9c:b8:4c:
                    ff:f0:ef:47:cd:b4:fd:bf:89:54:00:a9:97:8b:39:
                    c6:8e:05:80:cc:ea:f8:45:a0:6c:18:31:25:0a:55:
                    4f:38:8c:e0:b4:4b:72:65:e8:42:eb:ab:6f:d5:4b:
                    3d:f5:e5:51:d0:62:14:7d:da:7e:60:fb:b0:99:7c:
                    73:5d:81:a2:2b:65:68:43:e3:38:b3:1b:d5:32:ea:
                    14:d4:01:6b:c9:0a:5c:c8:9c:f1:b4:3b:1c:56:f8:
                    26:f1:67:a6:da:1d:f7:c3:04:93:02:b5:8c:87:e0:
                    bb:21:b8:6c:26:04:6f:a2:d1:64:f4:27:62:00:15:
                    8f:e4:9c:54:88:ec:8a:c6:10:13:73:e3:cf:32:30:
                    1f:47:33:63:19:d2:f1:e6:70:c9:1f:d2:92:66:64:
                    4e:d4:94:71:f2:04:ff:44:3e:a4:53:2d:27:58:8f:
                    cc:70:41:6e:e2:a1:50:d2:5f:09:47:63:e4:75:7d:
                    04:5a:21:75:13:70:5b:bf:42:9e:f6:23:4e:e4:52:
                    89:f1:82:f5:5e:20:0b:4a:24:71:49:da:3a:b2:70:
                    23:95:10:f8:04:70:8b:a6:c2:dd:c1:ee:99:d3:89:
                    ea:0e:c5:8d:13:5f:62:cb:5f:62:84:e5:fe:6d:5b:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:06:15:F7:49:74:C5:21:07:E6:6D:70:0B:D7:A4:84:2D:A5:BA:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/9ff25308-6406-35b7-8e9c-6d713fd2578e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:68::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:74:4d:b9:75:97:72:68:b6:68:92:69:ab:af:95:7c:e4:3f:
         ab:86:d5:6f:09:28:8a:ac:d6:93:43:57:11:30:06:9a:a6:42:
         e9:e2:4e:c4:ff:56:b6:0d:06:bf:5c:ab:58:45:73:7a:69:03:
         99:c6:87:46:aa:0a:ca:be:47:f4:76:b4:ba:87:3e:ec:01:aa:
         5b:9e:56:4b:fd:7f:cd:4c:23:5b:90:1b:ce:39:d0:4a:6d:b9:
         2b:74:60:b9:71:c7:77:ff:35:17:2e:33:d1:e7:5a:9b:da:82:
         79:53:5c:ac:68:db:16:a2:21:12:68:6a:bf:d1:09:d9:d8:03:
         42:d9:0f:20:8a:d7:43:71:ca:ec:31:1c:4f:6e:8e:14:40:3e:
         44:51:1e:c1:ae:46:3f:4b:16:b2:7b:f0:f4:b5:f2:ef:5d:ce:
         24:5a:0e:b9:7e:4c:2a:1e:b5:17:8f:e8:49:d1:cd:34:2f:f6:
         79:ec:0d:77:ec:e1:22:46:b2:42:ad:4b:56:eb:ef:5a:8a:e2:
         9e:bc:fc:91:5b:61:00:b8:ad:f1:b6:8c:b5:d9:c0:ab:04:eb:
         ba:6b:f3:54:33:77:4a:49:f5:4b:de:44:12:8f:1a:5a:cd:60:
         d5:2f:28:fe:54:fd:ec:62:57:01:70:87:7b:6f:93:34:b8:9a:
         85:fa:85:76
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV3fdtMN+3M+it64NgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
N2ZkYjBhOGEtYzJmZC00OWI1LTkwY2QtNWE0ZDcxMDViNWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMCOBmT2C210ktycuEz/8O9HzbT9v4lUAKmX
iznGjgWAzOr4RaBsGDElClVPOIzgtEtyZehC66tv1Us99eVR0GIUfdp+YPuwmXxz
XYGiK2VoQ+M4sxvVMuoU1AFryQpcyJzxtDscVvgm8Wem2h33wwSTArWMh+C7Ibhs
JgRvotFk9CdiABWP5JxUiOyKxhATc+PPMjAfRzNjGdLx5nDJH9KSZmRO1JRx8gT/
RD6kUy0nWI/McEFu4qFQ0l8JR2PkdX0EWiF1E3Bbv0Ke9iNO5FKJ8YL1XiALSiRx
Sdo6snAjlRD4BHCLpsLdwe6Z04nqDsWNE19iy19ihOX+bVufkwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHYGFfdJdMUhB+ZtcAvXpIQtpbr7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvOWZmMjUzMDgtNjQwNi0z
NWI3LThlOWMtNmQ3MTNmZDI1NzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF10Tbl1l3JotmiSaauvlXzkP6uG1W8JKIqs1pNDVxEwBpqmQuni
TsT/VrYNBr9cq1hFc3ppA5nGh0aqCsq+R/R2tLqHPuwBqlueVkv9f81MI1uQG845
0EptuSt0YLlxx3f/NRcuM9HnWpvagnlTXKxo2xaiIRJoar/RCdnYA0LZDyCK10Nx
yuwxHE9ujhRAPkRRHsGuRj9LFrJ78PS18u9dziRaDrl+TCoetReP6EnRzTQv9nns
DXfs4SJGskKtS1br71qK4p68/JFbYQC4rfG2jLXZwKsE67pr81Qzd0pJ9UveRBKP
GlrNYNUvKP5U/exiVwFwh3tvkzS4moX6hXY=
-----END CERTIFICATE-----
Generated at Thu May 9 20:35:19 2024 by rpki-client on console-ams.rpki-client.org