Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cb8211-26bc-3364-9e10-6881f39b4e6d.roa
File:                     17cb8211-26bc-3364-9e10-6881f39b4e6d.roa (raw, json)
Hash identifier:          o+arROkxqFaSjBD88B1DmcDRfQFIiMRruxK/KWWUtqI=
Subject key identifier:   7E:1C:AD:C3:34:95:D6:9B:58:35:C2:2D:24:70:09:2D:98:B2:61:77
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C1DF70D912A8527300F24B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cb8211-26bc-3364-9e10-6881f39b4e6d.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     20940
IP address blocks:        2600:1414::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:70:d9:12:a8:52:73:00:f2:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=1b0ae20c-6031-4d67-a40d-62c83f35e60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0c:a5:bc:f0:d6:56:9d:6a:81:8a:eb:15:f3:
                    59:57:4d:3d:92:b4:f5:ef:00:06:c3:5d:9a:ea:01:
                    d5:4e:38:fd:dc:a8:84:f1:00:78:f9:84:8f:22:7e:
                    a2:ab:bc:d8:be:1f:70:7d:e3:37:1e:e1:e5:8c:f1:
                    42:5b:c0:0a:b1:60:fd:c2:4e:24:4e:7b:54:95:f3:
                    91:e4:b5:06:27:6d:59:69:bd:3b:a5:fb:e8:c5:d7:
                    72:74:96:28:37:d5:34:8f:1e:e5:a4:c6:9f:05:95:
                    10:4c:9c:dd:70:4f:b9:ec:83:e1:14:5b:50:a8:43:
                    d2:09:f9:86:8a:bf:79:5c:94:45:4e:cc:0b:ef:04:
                    3b:93:58:1c:59:dd:39:a3:90:76:df:25:8a:23:32:
                    a3:f7:ab:14:8c:4a:48:88:1c:47:7a:13:bf:59:c9:
                    9e:1e:74:cf:9e:10:6e:51:3c:37:68:e7:9f:6c:5a:
                    23:4d:06:84:29:e5:cf:28:ec:79:09:2d:64:7a:90:
                    41:27:68:50:7b:a5:7c:e8:33:ba:42:17:ee:33:b2:
                    02:c8:b1:90:79:55:73:ab:31:90:b3:01:bf:5a:c1:
                    0a:96:37:3b:4b:14:2f:5a:58:c5:21:1f:9a:a9:d3:
                    f1:98:8b:96:93:2b:f6:14:ba:a7:55:34:f8:2d:89:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1C:AD:C3:34:95:D6:9B:58:35:C2:2D:24:70:09:2D:98:B2:61:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cb8211-26bc-3364-9e10-6881f39b4e6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1414::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:2d:36:b4:9d:77:b6:c4:5b:7b:a8:aa:78:ff:f1:b7:55:2f:
         d4:7c:21:f6:00:21:c5:83:d1:58:0a:52:34:a6:c8:05:fd:23:
         f8:5d:5d:63:59:42:c2:e9:2d:c7:15:81:d1:92:71:20:87:8f:
         fa:eb:6c:41:18:45:4a:e7:21:3a:bf:79:f1:31:f1:7b:64:7f:
         fc:a0:fb:2a:21:3c:cb:aa:d0:87:57:a1:46:98:2c:d9:7e:fb:
         78:1f:1c:f6:05:36:d2:46:65:83:53:91:41:17:1e:48:0d:04:
         26:be:af:a1:d4:2d:e6:ec:ee:bc:e6:dd:6c:20:5b:dc:bb:57:
         69:54:cd:78:4d:61:09:62:88:ea:4a:fd:77:07:fc:33:9e:cc:
         8b:89:7f:d2:2c:e0:bb:bd:98:f5:d8:95:78:ff:ec:34:5c:d4:
         4e:af:71:b4:35:7b:87:91:c1:08:e6:9d:85:1e:fc:fa:2e:d0:
         fc:50:ec:dc:e0:4c:dc:31:2a:26:b6:a3:c1:c4:e5:37:8f:24:
         70:2e:fb:f0:96:db:e9:02:2c:54:0e:ea:b3:4d:a2:35:c1:b8:
         f0:38:99:15:a8:56:cd:2d:0e:07:f2:73:28:1f:3b:fd:3a:9d:
         75:e6:59:37:34:25:cc:0b:d4:67:8f:23:52:d0:ec:bc:4e:17:
         94:8e:ca:42
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfB33DZEqhScwDyS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk
MWIwYWUyMGMtNjAzMS00ZDY3LWE0MGQtNjJjODNmMzVlNjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAylvPDWVp1qgYrrFfNZV009krT17wAGw12a
6gHVTjj93KiE8QB4+YSPIn6iq7zYvh9wfeM3HuHljPFCW8AKsWD9wk4kTntUlfOR
5LUGJ21Zab07pfvoxddydJYoN9U0jx7lpMafBZUQTJzdcE+57IPhFFtQqEPSCfmG
ir95XJRFTswL7wQ7k1gcWd05o5B23yWKIzKj96sUjEpIiBxHehO/WcmeHnTPnhBu
UTw3aOefbFojTQaEKeXPKOx5CS1kepBBJ2hQe6V86DO6QhfuM7ICyLGQeVVzqzGQ
swG/WsEKljc7SxQvWljFIR+aqdPxmIuWkyv2FLqnVTT4LYmlzwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH4crcM0ldabWDXCLSRwCS2YsmF3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTdjYjgyMTEtMjZiYy0z
MzY0LTllMTAtNjg4MWYzOWI0ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADwtNrSdd7bEW3uoqnj/8bdVL9R8IfYAIcWD0VgKUjSmyAX9I/hd
XWNZQsLpLccVgdGScSCHj/rrbEEYRUrnITq/efEx8Xtkf/yg+yohPMuq0IdXoUaY
LNl++3gfHPYFNtJGZYNTkUEXHkgNBCa+r6HULebs7rzm3WwgW9y7V2lUzXhNYQli
iOpK/XcH/DOezIuJf9Is4Lu9mPXYlXj/7DRc1E6vcbQ1e4eRwQjmnYUe/Pou0PxQ
7NzgTNwxKia2o8HE5TePJHAu+/CW2+kCLFQO6rNNojXBuPA4mRWoVs0tDgfycygf
O/06nXXmWTc0JcwL1GePI1LQ7LxOF5SOykI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:22 2024 by rpki-client on console-fra.rpki-client.org