Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d15608ab-fec8-3fd0-bd02-a9938da01004.roa
File:                     d15608ab-fec8-3fd0-bd02-a9938da01004.roa (raw, json)
Hash identifier:          wrOplnoQtsTHGnt0NAvfkcsRrKkCxWDARFxMC2Z/UYk=
Subject key identifier:   0F:18:6B:DF:8B:96:4B:67:A5:EF:48:26:EC:B8:A1:9C:2A:1E:11:84
Certificate issuer:       /CN=d2bbf297-079d-4c91-9341-1297e788c325
Certificate serial:       010D0C9F4328584582A87C33AD26CA563177D680
Authority key identifier: 15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d15608ab-fec8-3fd0-bd02-a9938da01004.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     55002
IP address blocks:        2001:500:103::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:7c:33:ad:26:ca:56:31:77:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bbf297-079d-4c91-9341-1297e788c325
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=8419201b-4749-4dcf-9490-1a5b7a06249f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a8:79:38:08:b7:2c:98:03:d3:6c:8d:7a:d8:
                    b6:17:80:3b:79:c1:c2:28:de:64:99:87:ce:e3:73:
                    33:2f:bb:10:6d:f6:ef:ff:96:a3:01:95:ea:f8:84:
                    c6:65:ce:96:ab:41:fd:99:56:94:fe:e3:2a:d3:aa:
                    e3:23:eb:90:92:a3:38:b9:7c:eb:0b:59:3c:4f:c1:
                    53:3c:c2:dc:42:eb:15:56:27:bb:3e:6e:60:ad:0d:
                    7a:69:f7:3d:a7:d3:8b:38:a6:45:44:93:f3:bf:01:
                    76:31:41:91:01:23:1b:c0:b3:27:46:36:0d:97:d9:
                    dd:28:a6:07:e2:58:78:da:14:e4:fc:35:32:f0:2c:
                    f3:c2:29:12:3d:d2:48:6b:6f:d3:9c:08:3c:cc:17:
                    a0:d9:d1:eb:dc:a9:5d:90:77:7e:96:e0:fe:49:b0:
                    90:a2:c7:8c:ef:41:0f:c2:37:95:12:c7:39:45:ec:
                    7f:53:d7:9c:b0:17:f7:8f:0c:12:0e:55:8e:a1:f0:
                    7c:e5:e3:c4:f0:c0:0b:52:2d:50:a6:3c:c6:78:43:
                    3a:1e:9b:b8:8c:5f:13:e4:37:7d:79:30:91:9d:61:
                    d5:17:79:f3:21:00:7e:02:80:c5:85:70:33:5f:93:
                    07:55:ce:b7:c3:ee:bb:29:71:54:e1:5f:4d:0a:da:
                    1c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:18:6B:DF:8B:96:4B:67:A5:EF:48:26:EC:B8:A1:9C:2A:1E:11:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d15608ab-fec8-3fd0-bd02-a9938da01004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl

            X509v3 Authority Key Identifier:
                keyid:15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:103::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:40:c1:ac:37:47:cb:67:37:2e:a0:2f:85:7f:5d:52:9e:ff:
         41:ee:19:49:4d:9c:01:07:21:d8:96:a2:65:55:99:a1:04:3f:
         bf:66:d0:52:e2:ed:62:e7:3e:73:6d:e7:17:7d:07:71:72:7b:
         bb:90:c3:cd:fd:fd:81:d0:29:52:6b:dc:e4:8d:c0:89:c0:d0:
         cc:57:63:81:fb:06:67:d6:0b:a6:89:de:f2:5f:70:cc:a1:5f:
         02:78:f8:5d:65:21:43:76:18:bd:49:77:33:c6:67:62:a5:f5:
         17:95:9c:f4:c4:df:89:f2:81:d9:d8:7f:be:b6:e7:2b:78:47:
         ce:7a:b2:a9:1f:02:9b:71:32:4d:f1:26:44:b8:a5:97:06:c4:
         a4:f3:48:99:49:da:06:f7:39:55:4a:52:68:64:c2:23:22:64:
         ba:b8:92:61:c7:0c:9d:62:93:6b:a7:af:ac:d8:73:12:33:ed:
         b1:15:3d:cc:21:08:d7:d1:75:10:4d:52:bd:a0:74:70:b7:ef:
         a0:90:39:3e:e8:54:4d:b5:fb:23:88:24:ea:bc:3b:7f:ca:fd:
         f7:93:2e:af:c9:6f:00:0a:3b:19:3c:43:e0:85:2c:eb:24:a2:
         21:ee:1d:90:b7:c6:94:6d:dd:c1:2c:98:1a:e7:89:a4:21:b6:
         aa:60:3a:d3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWCqHwzrSbKVjF31oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJiYmYyOTctMDc5ZC00YzkxLTkzNDEtMTI5N2U3ODhj
MzI1MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
ODQxOTIwMWItNDc0OS00ZGNmLTk0OTAtMWE1YjdhMDYyNDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKh5OAi3LJgD02yNeti2F4A7ecHCKN5kmYfO
43MzL7sQbfbv/5ajAZXq+ITGZc6Wq0H9mVaU/uMq06rjI+uQkqM4uXzrC1k8T8FT
PMLcQusVVie7Pm5grQ16afc9p9OLOKZFRJPzvwF2MUGRASMbwLMnRjYNl9ndKKYH
4lh42hTk/DUy8CzzwikSPdJIa2/TnAg8zBeg2dHr3KldkHd+luD+SbCQoseM70EP
wjeVEsc5Rex/U9ecsBf3jwwSDlWOofB85ePE8MALUi1QpjzGeEM6Hpu4jF8T5Dd9
eTCRnWHVF3nzIQB+AoDFhXAzX5MHVc63w+67KXFU4V9NCtocowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA8Ya9+Llktnpe9IJuy4oZwqHhGEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMmJi
ZjI5Ny0wNzlkLTRjOTEtOTM0MS0xMjk3ZTc4OGMzMjUvZDE1NjA4YWItZmVjOC0z
ZmQwLWJkMDItYTk5MzhkYTAxMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDJiYmYyOTctMDc5ZC00YzkxLTkz
NDEtMTI5N2U3ODhjMzI1L2QyYmJmMjk3LTA3OWQtNGM5MS05MzQxLTEyOTdlNzg4
YzMyNS5jcmwwHwYDVR0jBBgwFoAUFYvl0Qfxf8fPbbFdLUnwwCx4NMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMmJiZjI5Ny0wNzlkLTRjOTEtOTM0MS0xMjk3
ZTc4OGMzMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAED
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADZAwaw3R8tnNy6gL4V/XVKe/0HuGUlNnAEHIdiWomVVmaEEP79m
0FLi7WLnPnNt5xd9B3Fye7uQw839/YHQKVJr3OSNwInA0MxXY4H7BmfWC6aJ3vJf
cMyhXwJ4+F1lIUN2GL1JdzPGZ2Kl9ReVnPTE34nygdnYf7625yt4R856sqkfAptx
Mk3xJkS4pZcGxKTzSJlJ2gb3OVVKUmhkwiMiZLq4kmHHDJ1ik2unr6zYcxIz7bEV
PcwhCNfRdRBNUr2gdHC376CQOT7oVE21+yOIJOq8O3/K/feTLq/JbwAKOxk8Q+CF
LOskoiHuHZC3xpRt3cEsmBrniaQhtqpgOtM=
-----END CERTIFICATE-----
Generated at Sun May 5 08:24:41 2024 by rpki-client on console-ams.rpki-client.org