Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/f3c81f4a-d997-391e-bd4f-3480c77100bc.roa
File:                     f3c81f4a-d997-391e-bd4f-3480c77100bc.roa (raw, json)
Hash identifier:          8MQ+UQ0VfcZy5z3eMeFNdHfhoaHYSn/eYamx1l0udNo=
Subject key identifier:   F7:76:E1:0C:B9:9D:38:CB:57:6D:36:FB:B0:21:6D:4A:AA:8D:37:D5
Certificate issuer:       /CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae
Certificate serial:       010D0C9F432858459E935D5E8152114E48EE47C0
Authority key identifier: 5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/f3c81f4a-d997-391e-bd4f-3480c77100bc.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     400725
IP address blocks:        2606:dbc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:5d:5e:81:52:11:4e:48:ee:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=851d2a55-24bc-48b6-8074-786f1378a754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:16:b2:6f:f0:06:fd:23:ec:ff:88:b7:72:18:
                    7d:ee:4d:28:ed:ed:bd:64:2e:9c:d9:6c:0f:0c:30:
                    6e:a5:01:72:65:0a:f5:26:79:83:82:ff:a1:89:04:
                    63:58:b1:15:39:3f:74:26:3b:d2:93:8c:6b:78:0d:
                    fe:e9:95:0d:1c:e3:d0:73:6e:8a:78:07:b6:73:5a:
                    c7:78:1a:57:52:5c:b6:b3:8f:f0:93:df:b6:69:67:
                    90:81:f1:ea:7f:45:5d:22:34:b2:be:20:70:71:ce:
                    54:ea:2d:f9:5a:03:f9:ab:2a:10:a8:ba:56:bb:67:
                    e4:8f:16:60:10:73:7c:90:52:72:e7:14:5b:de:e3:
                    f5:0f:f4:2b:d2:28:9b:93:fe:41:56:e4:ae:63:0a:
                    ad:d8:59:ea:05:9e:a0:29:16:51:89:ff:6c:90:69:
                    46:b4:7b:85:6d:ca:7a:90:45:cb:56:dc:ab:15:11:
                    bd:63:bd:40:d6:be:f9:7d:00:aa:a7:6f:97:a8:92:
                    1c:40:40:97:be:f8:5f:e8:2b:3e:ad:a4:8b:2e:09:
                    96:ee:f3:21:22:75:a4:17:f4:d7:e6:6d:45:17:2e:
                    ef:c1:2b:25:1d:e3:20:78:99:53:9a:30:52:de:0f:
                    1a:09:30:c9:d7:a1:7b:40:50:f6:11:a0:34:76:a5:
                    ca:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:76:E1:0C:B9:9D:38:CB:57:6D:36:FB:B0:21:6D:4A:AA:8D:37:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/f3c81f4a-d997-391e-bd4f-3480c77100bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.crl

            X509v3 Authority Key Identifier:
                keyid:5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dbc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:4e:33:48:9b:8e:fc:46:40:2b:06:70:ab:20:91:9c:e3:65:
         e4:50:3e:fa:b9:c3:39:5d:76:89:68:62:eb:63:90:ea:89:1b:
         0d:20:b6:cc:fb:30:02:4e:9e:00:b7:9c:9e:48:03:ba:3a:50:
         02:b1:43:8e:a4:f1:cc:66:bc:cf:49:17:92:c0:47:29:39:8d:
         e6:3f:98:fc:2e:6a:8c:f4:a9:65:34:8d:44:5a:4c:9b:92:8d:
         f2:de:82:95:64:46:87:e0:43:ef:90:59:83:0e:19:fa:8f:e6:
         1e:a4:53:25:35:d7:a7:37:d2:97:21:f3:a5:4b:19:b3:82:3b:
         0a:67:1e:d0:30:8d:78:b5:45:7c:e4:a0:2b:28:a9:2d:02:10:
         1b:b2:a6:71:58:62:03:59:f8:ee:74:e7:e7:b6:1e:40:d6:c3:
         91:5e:f8:bd:b8:d9:33:00:ba:49:6f:c9:55:a2:5e:ef:fc:44:
         24:89:c3:1b:3e:c7:48:e6:be:94:c5:f3:20:f1:b7:fe:e8:d3:
         2a:f0:00:77:ab:3a:9a:21:26:12:4f:18:d1:af:db:49:13:60:
         59:09:fc:2f:84:5f:ed:18:47:82:3f:7a:0d:0b:e4:7d:96:74:
         db:92:7f:ca:82:4e:70:c0:a3:47:66:55:aa:35:e5:f1:cf:da:
         e4:2c:32:91
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWek11egVIRTkjuR8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDA1MGI0ZGUtZjRjOC00ZWU3LTkwN2EtNGRmMzkyNTNl
MWFlMB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk
ODUxZDJhNTUtMjRiYy00OGI2LTgwNzQtNzg2ZjEzNzhhNzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxayb/AG/SPs/4i3chh97k0o7e29ZC6c2WwP
DDBupQFyZQr1JnmDgv+hiQRjWLEVOT90JjvSk4xreA3+6ZUNHOPQc26KeAe2c1rH
eBpXUly2s4/wk9+2aWeQgfHqf0VdIjSyviBwcc5U6i35WgP5qyoQqLpWu2fkjxZg
EHN8kFJy5xRb3uP1D/Qr0iibk/5BVuSuYwqt2FnqBZ6gKRZRif9skGlGtHuFbcp6
kEXLVtyrFRG9Y71A1r75fQCqp2+XqJIcQECXvvhf6Cs+raSLLgmW7vMhInWkF/TX
5m1FFy7vwSslHeMgeJlTmjBS3g8aCTDJ16F7QFD2EaA0dqXKjwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPd24Qy5nTjLV202+7AhbUqqjTfVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMDUw
YjRkZS1mNGM4LTRlZTctOTA3YS00ZGYzOTI1M2UxYWUvZjNjODFmNGEtZDk5Ny0z
OTFlLWJkNGYtMzQ4MGM3NzEwMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDA1MGI0ZGUtZjRjOC00ZWU3LTkw
N2EtNGRmMzkyNTNlMWFlL2QwNTBiNGRlLWY0YzgtNGVlNy05MDdhLTRkZjM5MjUz
ZTFhZS5jcmwwHwYDVR0jBBgwFoAUW4G2qbzxiX0FzUQN8+oO7x1NeOYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kMDUwYjRkZS1mNGM4LTRlZTctOTA3YS00ZGYz
OTI1M2UxYWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbbwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA/TjNIm478RkArBnCrIJGc42XkUD76ucM5XXaJaGLrY5DqiRsNILbM
+zACTp4At5yeSAO6OlACsUOOpPHMZrzPSReSwEcpOY3mP5j8LmqM9KllNI1EWkyb
ko3y3oKVZEaH4EPvkFmDDhn6j+YepFMlNdenN9KXIfOlSxmzgjsKZx7QMI14tUV8
5KArKKktAhAbsqZxWGIDWfjudOfnth5A1sORXvi9uNkzALpJb8lVol7v/EQkicMb
PsdI5r6UxfMg8bf+6NMq8AB3qzqaISYSTxjRr9tJE2BZCfwvhF/tGEeCP3oNC+R9
lnTbkn/Kgk5wwKNHZlWqNeXxz9rkLDKR
-----END CERTIFICATE-----
Generated at Sat May 18 01:57:47 2024 by rpki-client on console-ams.rpki-client.org