Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd15af34-f6a2-3d65-8643-9862111885bf.roa
File:                     cd15af34-f6a2-3d65-8643-9862111885bf.roa (raw, json)
Hash identifier:          4EHrkhZuJbtbGwBqUZvkZ1/pbobdBzRavS88viQr54A=
Subject key identifier:   28:9B:8E:CB:05:04:17:B0:DF:28:D6:76:92:1B:46:57:4A:9E:5A:D4
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F432858474F4B713B40F141BB78E1C500
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd15af34-f6a2-3d65-8643-9862111885bf.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     12189
IP address blocks:        2607:6000:300::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:71:3b:40:f1:41:bb:78:e1:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=ec94be5a-e20e-4519-bf62-225e0b9abe5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:42:ce:8f:5e:d4:70:ad:36:7a:5c:97:a6:
                    5f:08:6f:56:ee:05:28:e7:31:d2:3d:cb:d6:51:04:
                    4a:28:90:ec:a5:82:f0:19:e0:eb:c7:71:58:ea:9e:
                    f9:36:f2:13:93:55:6a:6d:6a:3b:aa:15:f2:43:a0:
                    a5:52:04:de:b2:ba:3c:b3:9e:6f:5b:f8:e8:ca:a2:
                    7f:97:1c:4d:85:a0:ab:4b:36:11:cf:b0:01:4a:51:
                    cc:21:b9:fd:f2:da:f2:77:26:7e:68:f7:66:33:77:
                    9d:c4:53:12:80:55:3e:1e:90:ff:12:54:d9:78:df:
                    6a:6a:dc:9a:d9:d7:e0:b3:84:3b:12:30:c1:c5:82:
                    21:91:cb:2a:22:86:78:1d:91:03:65:8c:62:ac:5d:
                    c6:e0:3b:c3:1b:cd:aa:be:13:cb:27:3a:bf:11:d9:
                    33:0c:88:80:40:c9:15:3c:56:77:d0:87:14:bc:81:
                    03:8e:47:6a:6c:af:e6:e0:5a:82:75:37:ef:c0:e4:
                    c9:2f:e3:44:2d:59:86:3e:4f:c9:ac:54:ad:7a:95:
                    89:86:4b:1c:93:c9:fa:94:25:6b:f6:c9:87:5e:fb:
                    46:66:1b:f8:d6:14:1b:e5:70:80:fb:6f:c7:44:3a:
                    a5:09:31:4c:d4:2e:5b:c1:4c:71:5d:fd:79:b8:a5:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9B:8E:CB:05:04:17:B0:DF:28:D6:76:92:1B:46:57:4A:9E:5A:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd15af34-f6a2-3d65-8643-9862111885bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6000:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d2:82:7c:44:0c:7b:66:ab:f9:aa:8e:39:81:aa:39:71:45:
         fa:f3:71:1a:34:ab:5c:77:cf:94:a3:64:a6:9d:aa:a4:d4:bd:
         ef:77:97:ff:0f:4f:ef:5a:8b:e7:59:c2:62:2a:da:0f:fb:07:
         c1:4c:30:4d:2c:a9:99:69:25:21:cd:64:2d:c3:7c:9a:00:57:
         3c:a2:cd:de:d3:72:ae:1b:03:fa:10:3f:05:e7:f6:6d:8f:75:
         c8:5e:5b:f2:18:e4:65:6f:e9:b6:7e:4e:f2:c8:c1:6d:1a:92:
         19:83:fc:46:31:8c:f8:4f:7f:de:64:1c:5b:45:15:39:8c:69:
         bd:6b:d1:68:34:e9:5f:6e:ea:e6:a4:f4:d3:10:09:6f:63:43:
         b9:b3:73:23:ff:de:25:ff:79:2b:73:9e:d3:4e:90:0e:99:de:
         c6:84:93:43:24:a3:a5:f6:e7:5d:f0:bd:97:5a:49:16:6c:f3:
         0b:a4:32:fc:ed:a9:14:18:d1:20:dd:c9:3b:68:dc:28:aa:7c:
         bd:50:83:be:5b:57:58:09:60:e3:b4:ec:a9:97:7b:97:16:4b:
         3f:04:2a:39:a9:c3:74:43:51:2b:7d:74:a2:33:ed:a7:8a:66:
         34:19:5d:11:0f:64:68:b9:35:1c:86:c8:ff:5b:61:03:3d:3b:
         1c:da:5b:5e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEdPS3E7QPFBu3jhxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5
M2NmMB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk
ZWM5NGJlNWEtZTIwZS00NTE5LWJmNjItMjI1ZTBiOWFiZTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP5Czo9e1HCtNnpcl6ZfCG9W7gUo5zHSPcvW
UQRKKJDspYLwGeDrx3FY6p75NvITk1VqbWo7qhXyQ6ClUgTesro8s55vW/joyqJ/
lxxNhaCrSzYRz7ABSlHMIbn98trydyZ+aPdmM3edxFMSgFU+HpD/ElTZeN9qatya
2dfgs4Q7EjDBxYIhkcsqIoZ4HZEDZYxirF3G4DvDG82qvhPLJzq/EdkzDIiAQMkV
PFZ30IcUvIEDjkdqbK/m4FqCdTfvwOTJL+NELVmGPk/JrFStepWJhksck8n6lCVr
9smHXvtGZhv41hQb5XCA+2/HRDqlCTFM1C5bwUxxXf15uKXbrQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCibjssFBBew3yjWdpIbRldKnlrUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl
MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvY2QxNWFmMzQtZjZhMi0z
ZDY1LTg2NDMtOTg2MjExMTg4NWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy
N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz
OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux
Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAAMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbNKCfEQMe2ar+aqOOYGqOXFF+vNxGjSrXHfPlKNkpp2qpNS973eX
/w9P71qL51nCYiraD/sHwUwwTSypmWklIc1kLcN8mgBXPKLN3tNyrhsD+hA/Bef2
bY91yF5b8hjkZW/ptn5O8sjBbRqSGYP8RjGM+E9/3mQcW0UVOYxpvWvRaDTpX27q
5qT00xAJb2NDubNzI//eJf95K3Oe006QDpnexoSTQySjpfbnXfC9l1pJFmzzC6Qy
/O2pFBjRIN3JO2jcKKp8vVCDvltXWAlg47TsqZd7lxZLPwQqOanDdENRK310ojPt
p4pmNBldEQ9kaLk1HIbI/1thAz07HNpbXg==
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:51 2024 by rpki-client on console-fra.rpki-client.org