Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18e72337-a183-3633-8ffe-277b0ede636e.roa
File:                     18e72337-a183-3633-8ffe-277b0ede636e.roa (raw, json)
Hash identifier:          SD5JUEP5kyC88E3XF3wV08gT+U5ffVoK2iElWWWGlgE=
Subject key identifier:   08:0E:5C:5E:2E:4A:30:A1:E3:9F:C6:9D:44:9A:96:ED:55:84:89:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473A5B8A05C9F3E3280CB6D700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18e72337-a183-3633-8ffe-277b0ede636e.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     33905
IP address blocks:        2600:1480:4000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:8a:05:c9:f3:e3:28:0c:b6:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=b72ff4a3-8f96-467e-8ae6-b4576b1fb8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:70:32:c8:39:a9:db:ab:5b:c3:6e:6f:08:
                    5d:5d:46:72:ce:67:74:5a:43:d9:37:32:ef:fc:5e:
                    91:a1:06:e0:3a:25:3b:8f:24:e2:dd:e0:cc:86:af:
                    46:59:37:07:f2:0b:70:c7:95:3a:4a:b1:28:3e:f1:
                    78:00:b1:a1:11:43:44:61:d4:33:45:e5:36:e5:75:
                    04:cd:02:0b:34:e3:a4:7c:47:34:c0:82:7d:44:59:
                    5d:31:3e:c2:ca:73:56:42:85:ca:e4:ad:97:e4:eb:
                    63:c4:c2:af:08:84:64:e4:f8:31:bc:88:26:68:f8:
                    e8:3c:fc:55:c0:14:3f:dc:02:b8:a0:a2:0b:80:24:
                    66:4e:2b:12:8f:ed:d7:a0:20:88:49:4e:f5:8c:b7:
                    8a:e0:92:92:f4:53:26:29:ee:f3:52:2e:75:9a:65:
                    69:00:1a:b7:ca:56:d4:46:86:09:c8:1e:24:1a:ce:
                    8d:95:1d:5b:c0:e9:2c:78:3a:06:8f:6f:41:29:a1:
                    ff:69:3a:8a:9a:4b:09:8d:ea:6f:08:b2:93:fb:82:
                    aa:cb:ae:65:35:a7:b3:4f:f8:be:0d:dd:78:ad:01:
                    7b:59:e6:6c:25:52:e8:a5:a5:d7:79:51:c5:52:e4:
                    e8:e2:e5:ea:9d:a7:39:00:6a:78:75:f5:f5:55:1c:
                    94:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0E:5C:5E:2E:4A:30:A1:E3:9F:C6:9D:44:9A:96:ED:55:84:89:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18e72337-a183-3633-8ffe-277b0ede636e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:19:62:eb:1b:53:9c:f2:ee:5f:0a:db:0f:54:f0:82:59:50:
         ea:f3:75:ab:fa:3d:34:c1:65:e3:00:9c:f4:dd:d4:35:46:8a:
         b2:fe:52:d2:e9:d7:6f:97:5f:46:6e:13:96:e2:2e:15:63:5a:
         08:3d:74:1b:59:9b:aa:1d:3d:c2:bb:96:46:c6:71:ae:a2:88:
         6e:e4:c1:f5:61:5c:24:f2:9c:be:9e:7c:e0:0a:50:72:9e:ce:
         10:ab:11:5e:19:3a:ef:9e:b2:96:c5:c9:0c:ab:32:68:ff:5c:
         0f:66:50:eb:41:ec:b9:9c:47:c7:a7:7f:ab:b1:31:80:2a:f6:
         a9:25:1a:b2:61:b8:b7:01:a0:76:c0:e6:b4:33:8e:7e:e5:29:
         66:58:d9:24:bc:66:08:ae:a3:a8:00:d8:fe:ba:d0:43:ab:06:
         8f:e6:89:cd:6a:7d:68:fd:e9:6c:66:8b:de:4b:5f:b1:16:b4:
         bb:3b:2f:d8:55:d1:3e:51:ff:0e:39:cb:37:f0:8b:7b:d3:60:
         86:ad:da:b0:2c:7b:cf:5c:6e:54:af:9f:27:3c:1f:7e:7e:17:
         9f:76:68:7d:36:78:d2:e9:d5:95:17:cb:31:da:1b:61:02:18:
         b3:14:19:5b:58:0c:51:ef:92:10:31:e9:92:7f:0e:72:49:2c:
         b5:2f:f9:d1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEc6W4oFyfPjKAy21wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
YjcyZmY0YTMtOGY5Ni00NjdlLThhZTYtYjQ1NzZiMWZiOGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUxwMsg5qdurW8NubwhdXUZyzmd0WkPZNzLv
/F6RoQbgOiU7jyTi3eDMhq9GWTcH8gtwx5U6SrEoPvF4ALGhEUNEYdQzReU25XUE
zQILNOOkfEc0wIJ9RFldMT7CynNWQoXK5K2X5OtjxMKvCIRk5PgxvIgmaPjoPPxV
wBQ/3AK4oKILgCRmTisSj+3XoCCISU71jLeK4JKS9FMmKe7zUi51mmVpABq3ylbU
RoYJyB4kGs6NlR1bwOkseDoGj29BKaH/aTqKmksJjepvCLKT+4Kqy65lNaezT/i+
Dd14rQF7WeZsJVLopaXXeVHFUuTo4uXqnac5AGp4dfX1VRyUbwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAgOXF4uSjCh45/GnUSalu1VhIkcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMThlNzIzMzctYTE4My0z
NjMzLThmZmUtMjc3YjBlZGU2MzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgAUgEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAjxli6xtTnPLuXwrbD1TwgllQ6vN1q/o9NMFl4wCc9N3UNUaKsv5S
0unXb5dfRm4TluIuFWNaCD10G1mbqh09wruWRsZxrqKIbuTB9WFcJPKcvp584ApQ
cp7OEKsRXhk6756ylsXJDKsyaP9cD2ZQ60HsuZxHx6d/q7ExgCr2qSUasmG4twGg
dsDmtDOOfuUpZljZJLxmCK6jqADY/rrQQ6sGj+aJzWp9aP3pbGaL3ktfsRa0uzsv
2FXRPlH/DjnLN/CLe9Nghq3asCx7z1xuVK+fJzwffn4Xn3ZofTZ40unVlRfLMdob
YQIYsxQZW1gMUe+SEDHpkn8OckkstS/50Q==
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:16:32 2024 by rpki-client on console-fra.rpki-client.org