Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/05eb7fae-7a23-3222-9621-15bd9592d38c.roa
File:                     05eb7fae-7a23-3222-9621-15bd9592d38c.roa (raw, json)
Hash identifier:          BqyjvfUIoG37pJXbpRHACe9zynOjXoSCSS/7+YDOwA8=
Subject key identifier:   7C:9E:EC:61:F7:F2:A6:A8:9E:FE:64:1B:36:C2:74:CA:19:9F:72:92
Certificate issuer:       /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial:       010D0C9F43285847792BB472406774206962D5C0
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/05eb7fae-7a23-3222-9621-15bd9592d38c.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     397453
IP address blocks:        2607:3240::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:b4:72:40:67:74:20:69:62:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=15d74e40-a962-4fdf-848b-75f0ab5e625d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:94:cd:25:ad:2c:47:da:8c:ce:47:99:4d:
                    70:f3:cc:9a:da:4c:88:ec:b2:be:d6:5d:a1:2f:cb:
                    d1:66:20:c7:91:de:3b:d3:06:8d:25:ed:33:a3:6e:
                    bd:20:a4:08:74:82:fe:f2:2c:46:e8:16:1d:00:d7:
                    41:54:7f:ed:31:04:ac:67:d8:89:c0:e3:e2:a5:cc:
                    9f:67:6f:8a:29:68:4e:0e:85:be:e2:95:65:eb:83:
                    cf:ad:eb:68:ac:b2:68:01:f0:ba:a6:09:d6:11:09:
                    6d:1d:d2:33:69:d8:60:26:eb:ec:09:da:be:6c:2f:
                    a3:8e:d7:c5:6d:e6:f9:c4:0e:4e:f7:58:03:6f:0a:
                    65:79:9c:a1:9d:35:ac:a1:5b:aa:a6:f6:64:0b:ca:
                    26:b5:9f:21:a0:b6:ec:05:5d:22:28:6d:87:57:4d:
                    52:81:59:d7:dc:0f:25:02:de:6c:cc:90:87:c8:b9:
                    13:69:45:4d:dd:13:91:41:71:b9:af:16:08:69:b4:
                    15:77:ae:27:9a:46:9f:26:52:69:1a:a3:8c:e5:5f:
                    09:6f:48:34:74:87:17:7c:e7:bd:bb:c8:be:84:46:
                    73:4b:2a:66:cb:e9:d0:df:c1:3a:69:da:f7:c7:e7:
                    1e:68:7b:92:54:c7:27:5b:8f:be:81:b1:27:01:62:
                    13:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9E:EC:61:F7:F2:A6:A8:9E:FE:64:1B:36:C2:74:CA:19:9F:72:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/05eb7fae-7a23-3222-9621-15bd9592d38c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl

            X509v3 Authority Key Identifier:
                keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:28:96:60:0d:00:b2:a4:21:54:53:ea:a4:4c:2e:fa:06:66:
         9d:ec:55:ff:e7:89:c2:33:44:1a:a1:7d:b5:f5:30:b1:64:a5:
         73:b1:7c:ce:8f:bf:4a:3c:75:b2:3e:a2:8a:4a:07:6f:bb:5b:
         0e:0e:66:97:1c:83:59:88:db:40:78:04:69:8e:fa:7e:15:e0:
         71:2f:40:17:27:8e:94:94:f9:a3:46:1b:30:e5:84:00:cd:01:
         f6:29:68:d5:7f:e8:c5:f7:34:d3:44:d1:7a:a4:5b:9f:4a:2b:
         62:4d:97:5c:51:e1:f4:61:cd:08:15:88:60:82:7a:62:35:5a:
         2c:8c:b4:74:a4:a0:c7:33:e6:31:d3:49:51:0a:36:ad:32:3c:
         a8:5c:8b:21:92:eb:7d:43:40:5f:37:e8:d0:40:05:60:af:96:
         ee:93:11:30:a6:fa:57:c9:1e:9e:29:66:3f:a1:f8:fa:65:f8:
         7a:1b:14:4e:15:95:f7:b0:0a:a1:7c:c7:25:4c:ba:23:8c:54:
         4a:87:02:37:7f:a6:cd:b1:70:f4:82:91:9b:cf:e0:5a:8e:6f:
         b3:80:cc:a5:79:76:51:76:03:3d:a8:3e:ac:47:d2:47:43:96:
         de:ba:6c:3f:4c:45:1a:e1:56:a2:40:ea:47:70:4b:1d:4d:12:
         34:96:c1:59
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEd5K7RyQGd0IGli1cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE5MzliYmMtZTUwZi00Y2VkLTg0ODItZTdjNDAwOGUz
NTgzMB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
MTVkNzRlNDAtYTk2Mi00ZmRmLTg0OGItNzVmMGFiNWU2MjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMSUzSWtLEfajM5HmU1w88ya2kyI7LK+1l2h
L8vRZiDHkd470waNJe0zo269IKQIdIL+8ixG6BYdANdBVH/tMQSsZ9iJwOPipcyf
Z2+KKWhODoW+4pVl64PPretorLJoAfC6pgnWEQltHdIzadhgJuvsCdq+bC+jjtfF
beb5xA5O91gDbwpleZyhnTWsoVuqpvZkC8omtZ8hoLbsBV0iKG2HV01SgVnX3A8l
At5szJCHyLkTaUVN3RORQXG5rxYIabQVd64nmkafJlJpGqOM5V8Jb0g0dIcXfOe9
u8i+hEZzSypmy+nQ38E6adr3x+ceaHuSVMcnW4++gbEnAWIT1QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHye7GH38qaonv5kGzbCdMoZn3KSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTkz
OWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0MDA4ZTM1ODMvMDVlYjdmYWUtN2EyMy0z
MjIyLTk2MjEtMTViZDk1OTJkMzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE5MzliYmMtZTUwZi00Y2VkLTg0
ODItZTdjNDAwOGUzNTgzLzYxOTM5YmJjLWU1MGYtNGNlZC04NDgyLWU3YzQwMDhl
MzU4My5jcmwwHwYDVR0jBBgwFoAUP434UbbjU/pqwc9K3Q6RzsPeSRYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MTkzOWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0
MDA4ZTM1ODMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcyQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAkKJZgDQCypCFUU+qkTC76Bmad7FX/54nCM0QaoX219TCxZKVzsXzO
j79KPHWyPqKKSgdvu1sODmaXHINZiNtAeARpjvp+FeBxL0AXJ46UlPmjRhsw5YQA
zQH2KWjVf+jF9zTTRNF6pFufSitiTZdcUeH0Yc0IFYhggnpiNVosjLR0pKDHM+Yx
00lRCjatMjyoXIshkut9Q0BfN+jQQAVgr5bukxEwpvpXyR6eKWY/ofj6Zfh6GxRO
FZX3sAqhfMclTLojjFRKhwI3f6bNsXD0gpGbz+Bajm+zgMyleXZRdgM9qD6sR9JH
Q5beumw/TEUa4VaiQOpHcEsdTRI0lsFZ
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:16 2024 by rpki-client on console-ams.rpki-client.org