Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/bab2fe7d-d041-335d-88c1-5addc6f0ada8.roa
File:                     bab2fe7d-d041-335d-88c1-5addc6f0ada8.roa (raw, json)
Hash identifier:          IysykfQ1/VOssGrlJKKvneMffu3GxCXrutwKl4yz4Mk=
Subject key identifier:   CD:CE:03:DF:DD:A9:26:E9:D9:74:06:42:77:BE:A8:3D:FE:18:A5:21
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F43285844CBEBAEEC7576B054CA39A300
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/bab2fe7d-d041-335d-88c1-5addc6f0ada8.roa
Signing time:             Tue 06 Feb 2024 02:00:26 +0000
ROA not before:           Tue 06 Feb 2024 02:00:26 +0000
ROA not after:            Mon 06 May 2024 01:00:26 +0000
asID:                     399201
IP address blocks:        2605:a380:2001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:cb:eb:ae:ec:75:76:b0:54:ca:39:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Feb  6 02:00:26 2024 GMT
            Not After : May  6 01:00:26 2024 GMT
        Subject: CN=f6e6673f-2bfb-4761-bb00-ce3f27734a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:34:5b:3b:71:5e:2a:8d:52:c4:7e:5d:75:69:
                    6c:cb:56:17:13:01:c6:c4:02:b1:e4:c4:99:50:76:
                    e5:05:ff:b7:eb:73:22:95:56:02:8c:49:20:7b:b4:
                    c9:ac:5d:37:10:3d:d7:41:bc:34:36:fc:5c:52:51:
                    54:af:95:9b:9b:da:3f:68:d6:b3:a4:76:8d:7b:17:
                    2c:c6:bc:fa:ac:78:fb:12:c5:3f:61:0b:d6:00:b4:
                    df:13:5a:92:d8:65:b8:fd:11:10:72:9b:ad:80:c9:
                    c1:07:5e:50:4b:93:83:ca:04:2c:75:5c:85:17:99:
                    a0:f5:3f:f0:30:37:b2:85:f9:08:a9:9c:23:66:ea:
                    4a:de:58:fe:ff:04:f4:92:07:c2:42:62:ec:27:19:
                    63:2c:80:57:db:41:e5:d9:d1:f1:fa:1c:eb:5d:1c:
                    46:ba:c5:9c:78:4b:0f:f0:91:09:8e:20:9e:1e:99:
                    39:dc:fe:f9:1a:86:d1:bb:1f:3f:7f:18:79:1a:c7:
                    2a:90:7b:aa:b7:ca:02:ea:bf:78:16:7f:78:b2:9a:
                    58:42:eb:e8:0b:d4:f0:96:41:40:76:db:3e:98:ab:
                    69:84:99:c3:0b:a9:83:c4:c7:be:56:89:bf:68:a0:
                    ad:d6:66:84:07:fb:e6:62:f0:06:ec:74:85:dc:1b:
                    06:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CE:03:DF:DD:A9:26:E9:D9:74:06:42:77:BE:A8:3D:FE:18:A5:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/bab2fe7d-d041-335d-88c1-5addc6f0ada8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a380:2001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:83:7a:4a:74:b7:1c:38:73:a0:60:af:e8:41:ae:58:40:95:
         d1:6b:7d:ce:47:4d:bc:9e:1a:6d:6d:5f:8f:2f:e1:e0:fb:86:
         bf:22:b4:16:b9:39:05:fd:07:8a:26:54:10:6c:d3:44:ef:66:
         1a:20:8a:a3:e2:d0:aa:9f:a9:9c:66:70:a0:90:e9:da:b8:f8:
         d6:18:2b:78:d8:fe:fe:63:b2:0e:33:d9:0e:27:96:39:2c:07:
         18:98:67:08:42:ce:c0:61:c1:17:11:a7:39:54:4e:02:0a:6e:
         fa:dd:7d:73:fa:21:c6:dc:6b:95:0a:97:bb:79:b1:0d:02:99:
         1a:92:d9:8a:1e:22:a9:33:a5:f0:70:32:a9:df:bf:4c:7f:58:
         8c:b3:62:96:e0:27:8d:0f:0d:da:28:62:ba:9f:79:85:eb:03:
         8e:9b:8c:c9:11:5d:8c:50:92:5a:dc:d8:0a:d2:c0:bd:98:b0:
         56:df:2c:39:42:cf:ff:b4:9d:f4:58:4b:c1:49:13:cc:7a:41:
         a4:99:18:ac:17:f8:5d:dc:56:c1:8e:9b:f0:04:bc:c2:64:07:
         15:13:88:5b:c3:5b:86:27:fa:d9:ba:29:95:90:21:eb:4a:8d:
         5d:c6:80:fe:55:39:19:7a:1f:83:3d:09:7d:df:49:bd:a6:a1:
         ac:9d:d3:d4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWETL667sdXawVMo5owAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj
ZmYxMB4XDTI0MDIwNjAyMDAyNloXDTI0MDUwNjAxMDAyNlowLzEtMCsGA1UEAxMk
ZjZlNjY3M2YtMmJmYi00NzYxLWJiMDAtY2UzZjI3NzM0YTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDRbO3FeKo1SxH5ddWlsy1YXEwHGxAKx5MSZ
UHblBf+363MilVYCjEkge7TJrF03ED3XQbw0NvxcUlFUr5Wbm9o/aNazpHaNexcs
xrz6rHj7EsU/YQvWALTfE1qS2GW4/REQcputgMnBB15QS5ODygQsdVyFF5mg9T/w
MDeyhfkIqZwjZupK3lj+/wT0kgfCQmLsJxljLIBX20Hl2dHx+hzrXRxGusWceEsP
8JEJjiCeHpk53P75GobRux8/fxh5GscqkHuqt8oC6r94Fn94sppYQuvoC9TwlkFA
dts+mKtphJnDC6mDxMe+Vom/aKCt1maEB/vmYvAG7HSF3BsGOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM3OA9/dqSbp2XQGQne+qD3+GKUhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3
YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvYmFiMmZlN2QtZDA0MS0z
MzVkLTg4YzEtNWFkZGM2ZjBhZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0
ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh
Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5
NzA3YWNmZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWjgCAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA2Dekp0txw4c6Bgr+hBrlhAldFrfc5HTbyeGm1tX48v4eD7hr8i
tBa5OQX9B4omVBBs00TvZhogiqPi0KqfqZxmcKCQ6dq4+NYYK3jY/v5jsg4z2Q4n
ljksBxiYZwhCzsBhwRcRpzlUTgIKbvrdfXP6Icbca5UKl7t5sQ0CmRqS2YoeIqkz
pfBwMqnfv0x/WIyzYpbgJ40PDdooYrqfeYXrA46bjMkRXYxQklrc2ArSwL2YsFbf
LDlCz/+0nfRYS8FJE8x6QaSZGKwX+F3cVsGOm/AEvMJkBxUTiFvDW4Yn+tm6KZWQ
IetKjV3GgP5VORl6H4M9CX3fSb2moayd09Q=
-----END CERTIFICATE-----
Generated at Fri Mar 29 03:26:33 2024 by rpki-client on console-ams.rpki-client.org