Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/8ed43c12-a8e4-370a-bd7a-c47e2fdf11ce.roa
File:                     8ed43c12-a8e4-370a-bd7a-c47e2fdf11ce.roa (raw, json)
Hash identifier:          XBDWnXd+L6Me/RIBv1+If7+bNlAK++MtT9hAX85lKrs=
Subject key identifier:   BB:5B:2E:18:DA:31:E7:66:22:81:C1:44:FA:A8:82:59:C4:40:32:6E
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F43285845A15E0040A3CC3E17311CAE40
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/8ed43c12-a8e4-370a-bd7a-c47e2fdf11ce.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        2620:df:4000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:00:40:a3:cc:3e:17:31:1c:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=c1db7528-d44f-4f2a-b0dc-108cf99c96dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:48:97:5b:96:f9:72:e6:80:bb:d5:f3:94:
                    db:53:ec:29:3b:3a:d8:ff:a3:0f:10:3f:78:79:3f:
                    35:37:a2:cf:6b:eb:32:e9:69:f4:c7:2b:9b:3d:4c:
                    7f:2e:6a:3e:7f:8d:7b:ae:b0:c4:78:f3:e9:5f:5b:
                    0a:26:4f:60:8e:29:f6:8a:c4:19:12:7c:5e:8c:70:
                    48:04:11:8f:cc:cc:09:67:81:4c:16:d7:2c:3e:16:
                    46:be:c1:57:63:61:26:2e:3c:5e:a3:89:23:cd:a2:
                    53:fa:a6:74:03:f2:d8:8c:4b:2c:61:99:b8:9f:cd:
                    b1:77:bd:98:7f:aa:d5:d1:47:70:84:fb:46:a2:d2:
                    fd:1e:d1:89:06:48:c7:36:83:a9:45:25:40:50:b5:
                    a4:8a:d1:cd:a0:4f:f9:f4:28:2d:6c:35:a6:a8:3b:
                    26:81:8a:5d:31:d3:25:cc:2e:92:21:58:f1:2d:52:
                    a4:1d:54:1d:d3:97:a8:55:58:22:79:ec:2a:6b:46:
                    ff:d5:e0:b1:66:cc:3c:f1:ec:2e:1b:2b:be:75:68:
                    89:b8:c6:bf:a1:1e:89:d8:b8:74:44:12:e0:02:46:
                    32:0d:12:15:bd:88:47:ce:6a:c9:4e:b8:46:3f:32:
                    c1:14:df:a4:72:9b:1f:8f:61:31:43:f8:2e:a7:89:
                    2c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5B:2E:18:DA:31:E7:66:22:81:C1:44:FA:A8:82:59:C4:40:32:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/8ed43c12-a8e4-370a-bd7a-c47e2fdf11ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:df:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ca:1d:d4:a7:d6:1e:b2:07:f9:e6:32:0c:fe:e0:f6:93:5f:
         26:84:62:1e:9f:3a:e1:1f:ff:ab:9d:21:8c:72:04:74:ed:20:
         6c:d7:fc:86:8d:70:e7:ee:53:19:f8:0c:08:31:1a:1f:55:e9:
         84:d8:21:2a:dc:55:c5:ef:56:5f:94:a0:4d:dd:98:ae:90:20:
         c3:96:8d:87:10:cd:72:33:52:d7:00:39:bc:69:b9:25:9e:c3:
         36:d3:e8:26:0b:ba:a5:a5:5f:de:19:ff:68:07:2c:81:5e:2b:
         cd:9d:8e:b1:ec:a2:4a:bd:f4:35:14:51:9e:4b:16:c7:f4:74:
         3b:d2:76:fb:f0:51:cd:79:85:1a:53:83:8c:76:92:55:f4:eb:
         e9:e1:be:9d:61:9f:57:0e:aa:3b:a7:3b:2f:f9:f3:4e:c9:e8:
         7a:ce:9c:1b:84:e5:60:7b:2e:88:01:98:81:78:f7:dd:78:42:
         71:59:3c:e9:1c:56:8e:da:8e:d5:3d:c4:39:c8:e3:e8:c7:b0:
         31:cc:c1:3b:fa:c9:2c:e9:ef:56:88:79:10:ad:15:22:da:b5:
         44:b7:b2:73:f7:fa:68:eb:cd:85:c0:a9:eb:36:6a:bb:46:a0:
         b9:e6:21:85:01:8b:f2:51:42:ee:8a:bb:f9:f4:90:7b:e5:bd:
         c5:86:e0:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWhXgBAo8w+FzEcrkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli
Njc2MB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk
YzFkYjc1MjgtZDQ0Zi00ZjJhLWIwZGMtMTA4Y2Y5OWM5NmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO1Il1uW+XLmgLvV85TbU+wpOzrY/6MPED94
eT81N6LPa+sy6Wn0xyubPUx/Lmo+f417rrDEePPpX1sKJk9gjin2isQZEnxejHBI
BBGPzMwJZ4FMFtcsPhZGvsFXY2EmLjxeo4kjzaJT+qZ0A/LYjEssYZm4n82xd72Y
f6rV0UdwhPtGotL9HtGJBkjHNoOpRSVAULWkitHNoE/59CgtbDWmqDsmgYpdMdMl
zC6SIVjxLVKkHVQd05eoVVgieewqa0b/1eCxZsw88ewuGyu+dWiJuMa/oR6J2Lh0
RBLgAkYyDRIVvYhHzmrJTrhGPzLBFN+kcpsfj2ExQ/gup4ksYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLtbLhjaMedmIoHBRPqoglnEQDJuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5
MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvOGVkNDNjMTItYThlNC0z
NzBhLWJkN2EtYzQ3ZTJmZGYxMWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3
ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5
YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy
Y2ZjOWI2NzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAA30AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKHKHdSn1h6yB/nmMgz+4PaTXyaEYh6fOuEf/6udIYxyBHTtIGzX
/IaNcOfuUxn4DAgxGh9V6YTYISrcVcXvVl+UoE3dmK6QIMOWjYcQzXIzUtcAObxp
uSWewzbT6CYLuqWlX94Z/2gHLIFeK82djrHsokq99DUUUZ5LFsf0dDvSdvvwUc15
hRpTg4x2klX06+nhvp1hn1cOqjunOy/5807J6HrOnBuE5WB7LogBmIF49914QnFZ
POkcVo7ajtU9xDnI4+jHsDHMwTv6ySzp71aIeRCtFSLatUS3snP3+mjrzYXAqes2
artGoLnmIYUBi/JRQu6Ku/n0kHvlvcWG4Ns=
-----END CERTIFICATE-----
Generated at Wed May 1 15:59:38 2024 by rpki-client on console-ams.rpki-client.org