Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/a91f849d-e3ae-31d1-8334-f081060c24ad.roa
File:                     a91f849d-e3ae-31d1-8334-f081060c24ad.roa (raw, json)
Hash identifier:          0u+AqIg48BMqS9qFkUNEZ5xiT6T6dWERgA1Dcq8Tfjk=
Subject key identifier:   9B:1E:63:FC:C0:7B:43:81:F8:1C:EA:CF:3B:37:DF:C8:CA:6D:85:D4
Certificate issuer:       /CN=d2bbf297-079d-4c91-9341-1297e788c325
Certificate serial:       010D0C9F432858457FDDCBC7DA4D69CBD3164AF0
Authority key identifier: 15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/a91f849d-e3ae-31d1-8334-f081060c24ad.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     21775
IP address blocks:        2001:500:108::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:cb:c7:da:4d:69:cb:d3:16:4a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bbf297-079d-4c91-9341-1297e788c325
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=84e28f9f-4dac-4641-a4bd-f1a85ff54225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:60:db:0e:3b:92:40:f0:a0:57:40:8b:1a:
                    64:21:40:2b:f9:50:a3:bf:d8:51:10:ea:27:54:4e:
                    c9:c1:e2:80:67:e5:79:b2:61:e7:0c:64:bd:f0:0a:
                    15:5c:54:c4:e1:72:82:8e:e3:96:f0:af:44:bc:cf:
                    c0:cf:02:9c:55:71:3b:b2:32:18:3c:52:57:92:ed:
                    a6:21:0d:dc:4e:70:97:5d:f7:b4:2c:02:eb:11:7f:
                    df:6e:8f:08:7d:58:b2:d3:cf:35:28:0b:27:11:5c:
                    ac:e6:64:9b:2e:1b:61:ec:26:7a:65:0a:7e:bd:b7:
                    ab:de:e5:13:0e:27:5d:ff:39:c7:a5:01:74:9f:46:
                    a4:7f:2b:c9:b3:10:c6:70:fa:3e:e0:a3:04:52:cc:
                    69:d4:71:9d:8a:b3:22:02:2b:54:e5:39:09:56:f3:
                    47:22:44:f1:27:98:24:78:b0:5b:4a:f2:49:91:45:
                    8e:61:97:0d:2c:dd:f6:bf:9e:86:0b:90:af:a9:46:
                    24:5b:a3:9a:d0:bf:a2:4d:7b:20:42:8c:b6:f1:c7:
                    50:fd:01:db:c4:41:28:01:70:fc:2a:38:ab:02:c0:
                    1c:cd:36:68:f2:fc:5b:d4:a3:6f:87:d2:ed:58:4a:
                    be:38:5a:44:45:ad:57:11:27:41:33:7d:fb:0b:85:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1E:63:FC:C0:7B:43:81:F8:1C:EA:CF:3B:37:DF:C8:CA:6D:85:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/a91f849d-e3ae-31d1-8334-f081060c24ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl

            X509v3 Authority Key Identifier:
                keyid:15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:108::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:46:94:2b:2e:d6:ca:f5:90:ac:47:44:35:f1:5a:9b:47:37:
         a7:51:02:96:7d:16:b1:d9:d1:c6:cf:36:fd:56:c2:18:21:d7:
         a2:4f:96:42:8d:79:f5:fa:63:d4:24:7c:80:e1:a6:69:2c:2b:
         87:f0:19:22:80:0b:a9:23:05:3d:69:48:c0:50:ed:f6:7d:39:
         dd:06:ac:7f:eb:d8:24:9b:af:6e:41:9e:b0:6a:e1:39:36:01:
         3a:c2:9b:15:1c:d8:70:a6:da:4b:9a:3a:82:85:e9:dc:e3:78:
         33:81:79:a9:4b:02:96:fd:3e:07:28:ee:34:c8:92:a2:e6:74:
         51:0d:77:b1:f5:88:29:c4:7c:f6:47:01:2f:8c:1e:80:2d:61:
         c8:b8:84:5d:6c:12:f9:be:c9:46:53:f8:95:33:ab:82:ba:11:
         93:a1:d9:7b:dc:aa:c9:27:7a:cb:df:e3:7f:5f:44:e5:40:ea:
         6e:ac:3e:78:70:99:20:83:8d:7b:57:15:2f:88:0e:cb:1c:0a:
         dd:ce:ad:02:5b:9d:3f:cf:01:a3:7c:fb:ff:bd:1a:c4:e3:23:
         48:a6:c4:71:d7:fa:c4:71:98:83:29:3b:db:1a:37:f5:df:1a:
         f7:21:5d:6f:9d:2c:f6:5b:86:81:47:90:a5:8c:30:fe:bc:77:
         a1:14:91:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV/3cvH2k1py9MWSvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJiYmYyOTctMDc5ZC00YzkxLTkzNDEtMTI5N2U3ODhj
MzI1MB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk
ODRlMjhmOWYtNGRhYy00NjQxLWE0YmQtZjFhODVmZjU0MjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBNg2w47kkDwoFdAixpkIUAr+VCjv9hREOon
VE7JweKAZ+V5smHnDGS98AoVXFTE4XKCjuOW8K9EvM/AzwKcVXE7sjIYPFJXku2m
IQ3cTnCXXfe0LALrEX/fbo8IfViy0881KAsnEVys5mSbLhth7CZ6ZQp+vber3uUT
Didd/znHpQF0n0akfyvJsxDGcPo+4KMEUsxp1HGdirMiAitU5TkJVvNHIkTxJ5gk
eLBbSvJJkUWOYZcNLN32v56GC5CvqUYkW6Oa0L+iTXsgQoy28cdQ/QHbxEEoAXD8
KjirAsAczTZo8vxb1KNvh9LtWEq+OFpERa1XESdBM337C4WRlQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJseY/zAe0OB+Bzqzzs338jKbYXUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMmJi
ZjI5Ny0wNzlkLTRjOTEtOTM0MS0xMjk3ZTc4OGMzMjUvYTkxZjg0OWQtZTNhZS0z
MWQxLTgzMzQtZjA4MTA2MGMyNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDJiYmYyOTctMDc5ZC00YzkxLTkz
NDEtMTI5N2U3ODhjMzI1L2QyYmJmMjk3LTA3OWQtNGM5MS05MzQxLTEyOTdlNzg4
YzMyNS5jcmwwHwYDVR0jBBgwFoAUFYvl0Qfxf8fPbbFdLUnwwCx4NMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMmJiZjI5Ny0wNzlkLTRjOTEtOTM0MS0xMjk3
ZTc4OGMzMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH5GlCsu1sr1kKxHRDXxWptHN6dRApZ9FrHZ0cbPNv1Wwhgh16JP
lkKNefX6Y9QkfIDhpmksK4fwGSKAC6kjBT1pSMBQ7fZ9Od0GrH/r2CSbr25BnrBq
4Tk2ATrCmxUc2HCm2kuaOoKF6dzjeDOBealLApb9Pgco7jTIkqLmdFENd7H1iCnE
fPZHAS+MHoAtYci4hF1sEvm+yUZT+JUzq4K6EZOh2Xvcqsknesvf439fROVA6m6s
PnhwmSCDjXtXFS+IDsscCt3OrQJbnT/PAaN8+/+9GsTjI0imxHHX+sRxmIMpO9sa
N/XfGvchXW+dLPZbhoFHkKWMMP68d6EUkRE=
-----END CERTIFICATE-----
Generated at Sun May 5 08:43:46 2024 by rpki-client on console-fra.rpki-client.org