Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/84250925-d88b-39f6-8710-7f8465ac6236.roa
File:                     84250925-d88b-39f6-8710-7f8465ac6236.roa (raw, json)
Hash identifier:          3zhDFaODHGA92YzX3bMBCadLY8axl85mPjZdZLftY3k=
Subject key identifier:   BA:91:93:26:D5:73:CC:0A:BA:3D:FE:04:39:87:BC:75:5E:B3:2C:16
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F432858450955723B862E7E66BA76FB80
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/84250925-d88b-39f6-8710-7f8465ac6236.roa
Signing time:             Wed 28 Feb 2024 02:00:26 +0000
ROA not before:           Wed 28 Feb 2024 02:00:26 +0000
ROA not after:            Tue 28 May 2024 01:00:26 +0000
asID:                     198949
IP address blocks:        2607:cc80:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:55:72:3b:86:2e:7e:66:ba:76:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Feb 28 02:00:26 2024 GMT
            Not After : May 28 01:00:26 2024 GMT
        Subject: CN=28b0e661-7a1e-47e1-be61-08dd43466bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:b5:34:0f:e4:df:21:4e:2c:70:f6:2b:9d:
                    58:21:52:2b:ec:48:af:c6:2a:f9:7f:f5:aa:13:6a:
                    fe:83:3d:ba:de:c3:49:24:60:83:8c:7c:8d:00:5e:
                    4b:fa:cf:f3:a5:a2:a4:fd:7c:b1:0b:01:91:ca:5a:
                    a8:ba:74:eb:3b:a6:0b:b5:29:02:65:0d:e9:60:c9:
                    e3:79:ed:19:8c:7b:b3:e6:75:26:53:ed:85:40:79:
                    23:0e:21:03:6a:a5:b4:4a:ab:aa:39:a9:a0:6e:4b:
                    f1:e7:0f:ec:0d:8e:dc:ad:cf:c5:84:b2:ad:80:87:
                    30:31:67:87:9c:1e:8f:13:ee:06:6d:9c:64:d7:ef:
                    e1:53:e5:77:eb:5d:d8:9f:7f:02:32:25:6a:0e:40:
                    1e:c9:f6:be:6e:42:c4:b5:d7:25:01:cd:d6:82:e8:
                    f3:fb:3d:4b:11:c0:ce:cb:d1:43:b8:6a:93:cc:01:
                    4f:a9:87:bc:27:25:08:40:ac:29:c4:ff:e5:ad:67:
                    62:a4:4c:76:0b:ff:8f:53:b0:a5:83:07:8d:c7:91:
                    30:1f:fc:00:43:0e:07:50:f4:52:9b:1b:05:04:96:
                    e8:b3:eb:fa:da:24:a5:70:b6:b3:e4:b4:6f:49:ff:
                    f5:86:95:54:93:17:0a:11:6b:63:43:3c:9f:9f:23:
                    42:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:91:93:26:D5:73:CC:0A:BA:3D:FE:04:39:87:BC:75:5E:B3:2C:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/84250925-d88b-39f6-8710-7f8465ac6236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f1:28:3a:9b:e0:c6:a6:80:42:78:15:bf:0a:d9:cc:8d:60:
         b7:05:be:9e:a3:17:14:5e:55:37:d6:e8:a4:2e:f6:2e:01:6b:
         1e:63:7d:a5:8d:d2:eb:7c:57:69:a9:e3:27:0f:29:07:cc:cd:
         9f:02:b1:13:89:03:5c:75:0e:8a:92:63:d2:52:0c:b5:aa:0b:
         c3:5e:62:ed:04:cc:03:ff:11:5a:f0:03:bf:a7:91:13:57:03:
         49:65:a8:39:99:f9:50:9a:14:cd:87:58:9a:44:8d:9c:6f:06:
         5b:38:c5:7b:b5:b4:af:a3:32:07:56:f2:1a:43:9e:ca:06:9a:
         57:50:99:06:a9:04:ab:98:14:e2:05:29:75:ec:fe:7a:f9:de:
         95:4c:a1:ce:bd:03:96:6f:11:4a:42:b1:9a:69:e6:e1:45:7b:
         36:87:fc:1c:41:91:4b:f1:14:cf:b4:c7:5c:bb:c6:51:e6:dd:
         85:ca:b0:75:35:61:df:cb:23:21:5f:be:f3:e0:c0:9d:19:9f:
         c6:cd:2c:9b:61:72:36:e0:62:17:2e:26:48:79:35:52:49:fc:
         4a:51:c6:7b:50:52:4c:b7:1f:43:fe:04:10:84:40:16:0a:05:
         9d:1c:d6:8e:bb:41:7b:4e:d8:70:96:e7:b5:90:92:8b:03:e4:
         7e:7d:9f:c2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUJVXI7hi5+Zrp2+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0
MDc4MB4XDTI0MDIyODAyMDAyNloXDTI0MDUyODAxMDAyNlowLzEtMCsGA1UEAxMk
MjhiMGU2NjEtN2ExZS00N2UxLWJlNjEtMDhkZDQzNDY2YmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N21NA/k3yFOLHD2K51YIVIr7Eivxir5f/Wq
E2r+gz263sNJJGCDjHyNAF5L+s/zpaKk/XyxCwGRylqounTrO6YLtSkCZQ3pYMnj
ee0ZjHuz5nUmU+2FQHkjDiEDaqW0SquqOamgbkvx5w/sDY7crc/FhLKtgIcwMWeH
nB6PE+4GbZxk1+/hU+V3613Yn38CMiVqDkAeyfa+bkLEtdclAc3Wgujz+z1LEcDO
y9FDuGqTzAFPqYe8JyUIQKwpxP/lrWdipEx2C/+PU7ClgweNx5EwH/wAQw4HUPRS
mxsFBJbos+v62iSlcLaz5LRvSf/1hpVUkxcKEWtjQzyfnyNCMQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLqRkybVc8wKuj3+BDmHvHVesywWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk
M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvODQyNTA5MjUtZDg4Yi0z
OWY2LTg3MTAtN2Y4NDY1YWM2MjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3
MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm
NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2
ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgEAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG3xKDqb4MamgEJ4Fb8K2cyNYLcFvp6jFxReVTfW6KQu9i4Bax5j
faWN0ut8V2mp4ycPKQfMzZ8CsROJA1x1DoqSY9JSDLWqC8NeYu0EzAP/EVrwA7+n
kRNXA0llqDmZ+VCaFM2HWJpEjZxvBls4xXu1tK+jMgdW8hpDnsoGmldQmQapBKuY
FOIFKXXs/nr53pVMoc69A5ZvEUpCsZpp5uFFezaH/BxBkUvxFM+0x1y7xlHm3YXK
sHU1Yd/LIyFfvvPgwJ0Zn8bNLJthcjbgYhcuJkh5NVJJ/EpRxntQUky3H0P+BBCE
QBYKBZ0c1o67QXtO2HCW57WQkosD5H59n8I=
-----END CERTIFICATE-----
Generated at Fri Apr 19 06:30:55 2024 by rpki-client on console-fra.rpki-client.org