Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/a494647a-1949-385d-8d0c-2bdf8624e210.roa
File:                     a494647a-1949-385d-8d0c-2bdf8624e210.roa (raw, json)
Hash identifier:          +Scdk6W8GlMZwGht8/dPYjNC2B0PVD8vK4xxcBKZ2ag=
Subject key identifier:   BD:59:6F:DB:37:B4:D8:0A:F0:37:CA:5C:9E:07:ED:79:03:38:7A:B7
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F432858457D1318F18E0A53B3189C7C40
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/a494647a-1949-385d-8d0c-2bdf8624e210.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     25795
IP address blocks:        2607:f2f8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:18:f1:8e:0a:53:b3:18:9c:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=865db99c-51fd-4688-b4c5-51e7dffeb785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:de:73:06:ad:b7:5c:3f:7a:78:03:67:bd:
                    44:04:de:4b:c9:81:22:fb:7a:20:e6:c0:ed:00:ff:
                    c6:7b:2c:f2:27:ba:d1:1a:15:95:3a:63:66:ff:48:
                    f4:23:1d:76:e8:31:46:75:ff:8f:84:29:2e:d3:c6:
                    48:71:06:7a:12:12:07:13:b1:e2:d3:e3:47:ad:0f:
                    d0:cd:38:71:da:7f:07:ab:59:67:f1:29:bb:6e:20:
                    0d:c7:e2:6b:b5:04:a7:c0:c0:ee:e6:81:26:cf:06:
                    e5:e3:ea:c5:3a:bb:50:9b:b9:57:8e:65:66:b7:47:
                    e8:bf:1a:51:cb:26:eb:dc:05:c7:c3:a8:fe:04:78:
                    21:8c:f0:fc:e3:5a:c3:02:65:fe:c5:99:76:2a:86:
                    39:f9:06:02:bf:df:e4:f2:18:a8:a6:b3:42:c3:25:
                    64:25:c7:ea:79:60:24:ef:8a:80:76:0f:69:7c:d0:
                    3f:a1:fe:b7:8a:8f:89:59:1b:9b:b3:b1:57:18:a2:
                    08:04:88:29:ec:b3:ae:3e:9b:82:f9:e7:80:fd:e4:
                    42:78:03:08:4b:a2:26:94:3b:71:bb:cf:b5:56:72:
                    f4:d1:f9:17:c8:64:2d:16:3b:5b:2b:77:d8:34:34:
                    65:66:cc:7c:8c:7c:33:52:c0:40:ec:61:a0:1a:5c:
                    bb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:59:6F:DB:37:B4:D8:0A:F0:37:CA:5C:9E:07:ED:79:03:38:7A:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/a494647a-1949-385d-8d0c-2bdf8624e210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f2f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c3:dc:30:24:9f:25:0e:f8:3d:e2:1e:dd:93:ca:99:e1:f9:
         8d:a7:29:bb:4f:ad:99:1a:e8:56:fc:8d:4c:37:ea:1d:1b:f0:
         ca:45:13:95:0a:02:37:b8:f6:6e:ed:f1:56:3f:c7:a9:8f:52:
         4b:72:06:98:ad:06:76:8e:91:65:1e:52:7f:91:9a:94:d2:47:
         5c:44:6e:0e:a0:eb:69:42:83:63:25:55:85:13:60:5d:ef:03:
         4f:f5:11:d6:3f:f1:77:b5:97:e0:76:cc:00:2d:39:6a:8b:86:
         b3:6e:dc:ea:58:f1:e0:af:f7:46:59:ed:cb:44:83:99:c1:b1:
         98:15:f7:38:a4:b3:fa:f9:e5:28:de:ec:ba:a6:67:53:43:74:
         47:ba:c1:50:58:67:a4:ed:2f:2e:d4:ca:5e:a7:e7:25:bb:2f:
         27:4c:ec:ab:93:c9:b0:f1:61:a8:25:07:6d:12:28:a9:00:be:
         a3:21:97:e6:80:7b:77:7e:50:6f:74:d7:94:19:85:22:d7:46:
         f1:49:40:89:e5:ef:e4:59:44:e8:48:ef:e6:ee:15:e7:dc:a9:
         e5:f3:08:07:a5:9c:4c:93:ca:08:a6:0a:2b:17:02:0d:37:1b:
         ba:c5:2b:04:83:09:00:d1:b8:6d:b8:d8:3d:f8:4b:48:48:54:
         7f:81:5a:30
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEV9ExjxjgpTsxicfEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2YTEzYTItZmJmYi00OWVkLTg5YzMtMjMzYzc0NWZm
YTUyMB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk
ODY1ZGI5OWMtNTFmZC00Njg4LWI0YzUtNTFlN2RmZmViNzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraXecwatt1w/engDZ71EBN5LyYEi+3og5sDt
AP/GeyzyJ7rRGhWVOmNm/0j0Ix126DFGdf+PhCku08ZIcQZ6EhIHE7Hi0+NHrQ/Q
zThx2n8Hq1ln8Sm7biANx+JrtQSnwMDu5oEmzwbl4+rFOrtQm7lXjmVmt0fovxpR
yybr3AXHw6j+BHghjPD841rDAmX+xZl2KoY5+QYCv9/k8hioprNCwyVkJcfqeWAk
74qAdg9pfNA/of63io+JWRubs7FXGKIIBIgp7LOuPpuC+eeA/eRCeAMIS6ImlDtx
u8+1VnL00fkXyGQtFjtbK3fYNDRlZsx8jHwzUsBA7GGgGly78wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL1Zb9s3tNgK8DfKXJ4H7XkDOHq3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjZh
MTNhMi1mYmZiLTQ5ZWQtODljMy0yMzNjNzQ1ZmZhNTIvYTQ5NDY0N2EtMTk0OS0z
ODVkLThkMGMtMmJkZjg2MjRlMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjI2YTEzYTItZmJmYi00OWVkLTg5
YzMtMjMzYzc0NWZmYTUyLzIyNmExM2EyLWZiZmItNDllZC04OWMzLTIzM2M3NDVm
ZmE1Mi5jcmwwHwYDVR0jBBgwFoAUN5551oIyh9VQnzmjJFrhIZTZyhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjZhMTNhMi1mYmZiLTQ5ZWQtODljMy0yMzNj
NzQ1ZmZhNTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfy+DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAYw9wwJJ8lDvg94h7dk8qZ4fmNpym7T62ZGuhW/I1MN+odG/DKRROV
CgI3uPZu7fFWP8epj1JLcgaYrQZ2jpFlHlJ/kZqU0kdcRG4OoOtpQoNjJVWFE2Bd
7wNP9RHWP/F3tZfgdswALTlqi4azbtzqWPHgr/dGWe3LRIOZwbGYFfc4pLP6+eUo
3uy6pmdTQ3RHusFQWGek7S8u1Mpep+cluy8nTOyrk8mw8WGoJQdtEiipAL6jIZfm
gHt3flBvdNeUGYUi10bxSUCJ5e/kWUToSO/m7hXn3Knl8wgHpZxMk8oIpgorFwIN
Nxu6xSsEgwkA0bhtuNg9+EtISFR/gVow
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:09 2024 by rpki-client on console-fra.rpki-client.org