Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/383a3fcc-da13-31fe-9fb7-abe63f181588.roa
File:                     383a3fcc-da13-31fe-9fb7-abe63f181588.roa (raw, json)
Hash identifier:          tZ0MIPzCk2Qx15eqZUBcCeg9JN6C4AAv5GT/7d1ovPg=
Subject key identifier:   5A:21:BC:7C:2B:C4:27:17:04:B1:71:FB:FF:C1:C6:3F:1C:49:EE:0D
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED002FB1BD8DD37E9FD3480
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/383a3fcc-da13-31fe-9fb7-abe63f181588.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     54858
IP address blocks:        2607:f060:a000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:02:fb:1b:d8:dd:37:e9:fd:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=a192aa52-55cf-43be-9f3a-b40134916138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:a1:ad:7f:f2:9c:51:79:41:d9:07:6b:06:
                    6c:49:fc:74:fd:d8:ce:88:32:c9:e2:3b:54:a1:da:
                    1b:3a:9a:1d:cf:48:b3:86:1a:85:a4:07:aa:63:d0:
                    8a:93:ca:c3:c2:a2:88:e2:e0:1e:38:b1:8d:fa:e4:
                    c7:cf:d3:74:df:7a:64:8b:11:ee:84:56:8c:cf:70:
                    05:fe:de:f9:3c:6e:2b:3d:e3:d0:83:cf:85:b7:ee:
                    20:57:81:fe:84:e7:bc:ab:82:61:26:6f:14:ce:33:
                    e2:66:89:4f:b7:53:04:67:74:3e:ae:d1:5f:87:13:
                    ef:72:cb:57:0b:bf:d4:6d:b9:36:af:61:63:ad:c2:
                    9c:2c:74:9a:3b:ae:cd:cd:45:50:f8:ea:5d:6a:78:
                    b7:98:c7:20:0f:31:49:c4:b9:14:f6:ea:20:e6:d4:
                    0d:35:37:79:82:1d:e3:98:39:dd:a2:f6:8e:3c:5d:
                    9b:e9:ed:4f:8f:59:e1:a0:56:a7:09:f9:bc:e0:9b:
                    75:ab:12:28:33:78:fd:02:7a:7f:52:59:ac:1e:0c:
                    3e:27:7f:8c:15:ac:b5:51:1b:81:65:c1:09:26:a4:
                    b6:93:1d:d0:1d:a0:90:91:8a:d8:07:61:82:5a:c7:
                    f2:af:50:75:38:b8:01:ac:db:0b:8a:f0:f0:34:72:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:21:BC:7C:2B:C4:27:17:04:B1:71:FB:FF:C1:C6:3F:1C:49:EE:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/383a3fcc-da13-31fe-9fb7-abe63f181588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f060:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:8d:95:c6:a3:12:22:1d:61:97:a4:7d:f9:24:20:60:aa:16:
         3d:62:88:ee:23:cf:8b:15:f0:8a:ba:9c:84:bd:e6:02:65:f9:
         19:22:e1:23:d1:ae:c3:67:96:a6:6d:79:07:6f:aa:3f:e1:5d:
         6f:39:82:2c:25:7c:88:b5:27:0f:aa:ac:c5:4f:fd:2c:44:36:
         ce:5d:00:4a:2e:c9:00:d6:ee:e4:0a:69:81:0e:59:78:3c:86:
         32:b2:7f:cb:27:5f:a9:72:51:dd:93:e1:d3:51:e0:3a:80:db:
         4c:51:48:d4:77:27:75:dc:49:75:d3:a2:c8:a9:19:ab:f3:db:
         f3:6a:ff:e5:99:a0:43:6a:63:03:c3:be:1e:22:03:32:ab:eb:
         00:77:56:c1:34:2c:e1:23:0f:9d:47:28:7e:3a:32:4b:84:f8:
         c3:81:1a:0c:c6:d4:52:4c:71:b6:8c:eb:5c:7d:45:92:89:b1:
         e4:9c:70:39:3e:a1:61:9e:c7:61:39:47:ff:c2:14:fc:23:6f:
         3b:3d:44:26:21:ff:12:04:0e:9a:b9:7c:b4:08:f5:c3:86:3d:
         cd:fb:42:5f:56:d8:1b:47:1a:32:f5:2f:c8:b2:6c:d0:8c:0b:
         51:8f:55:7f:1c:2c:96:59:fa:5b:aa:87:8b:d4:01:05:0f:11:
         c2:5d:1a:b8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWETu0AL7G9jdN+n9NIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk
YTE5MmFhNTItNTVjZi00M2JlLTlmM2EtYjQwMTM0OTE2MTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrWhrX/ynFF5QdkHawZsSfx0/djOiDLJ4jtU
odobOpodz0izhhqFpAeqY9CKk8rDwqKI4uAeOLGN+uTHz9N033pkixHuhFaMz3AF
/t75PG4rPePQg8+Ft+4gV4H+hOe8q4JhJm8UzjPiZolPt1MEZ3Q+rtFfhxPvcstX
C7/Ubbk2r2FjrcKcLHSaO67NzUVQ+Opdani3mMcgDzFJxLkU9uog5tQNNTd5gh3j
mDndovaOPF2b6e1Pj1nhoFanCfm84Jt1qxIoM3j9Anp/UlmsHgw+J3+MFay1URuB
ZcEJJqS2kx3QHaCQkYrYB2GCWsfyr1B1OLgBrNsLivDwNHLSZwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFohvHwrxCcXBLFx+//Bxj8cSe4NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMzgzYTNmY2MtZGExMy0z
MWZlLTlmYjctYWJlNjNmMTgxNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfwYKAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANo2VxqMSIh1hl6R9+SQgYKoWPWKI7iPPixXwirqchL3mAmX5GSLh
I9Guw2eWpm15B2+qP+FdbzmCLCV8iLUnD6qsxU/9LEQ2zl0ASi7JANbu5AppgQ5Z
eDyGMrJ/yydfqXJR3ZPh01HgOoDbTFFI1HcnddxJddOiyKkZq/Pb82r/5ZmgQ2pj
A8O+HiIDMqvrAHdWwTQs4SMPnUcofjoyS4T4w4EaDMbUUkxxtozrXH1Fkomx5Jxw
OT6hYZ7HYTlH/8IU/CNvOz1EJiH/EgQOmrl8tAj1w4Y9zftCX1bYG0caMvUvyLJs
0IwLUY9Vfxwslln6W6qHi9QBBQ8Rwl0auA==
-----END CERTIFICATE-----
Generated at Fri May 3 00:07:55 2024 by rpki-client on console-ams.rpki-client.org