Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b51e73b-da80-3086-874f-12305101a297.roa
File:                     1b51e73b-da80-3086-874f-12305101a297.roa (raw, json)
Hash identifier:          9MelRwEeCAkekqPHMco6wWERnUOpEy+BMIXSP5ecp3w=
Subject key identifier:   72:12:E5:02:88:1A:93:4B:F5:66:1B:C9:81:80:D9:97:0C:E5:F9:B9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584518A1F0EBCD473E0E811B0738
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b51e73b-da80-3086-874f-12305101a297.roa
Signing time:             Mon 04 Mar 2024 13:31:46 +0000
ROA not before:           Mon 04 Mar 2024 13:31:46 +0000
ROA not after:            Sun 02 Jun 2024 12:31:46 +0000
asID:                     20940
IP address blocks:        2600:1415:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:a1:f0:eb:cd:47:3e:0e:81:1b:07:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  4 13:31:46 2024 GMT
            Not After : Jun  2 12:31:46 2024 GMT
        Subject: CN=83c07f27-6e0d-4fc0-b0de-5c282499e9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:6d:08:c4:71:04:d1:90:75:ac:6a:c2:9c:
                    2d:53:0e:3f:79:b5:1b:81:7e:9d:28:72:23:fb:43:
                    5f:f0:71:89:9a:c6:81:bb:f5:45:27:46:23:ff:59:
                    36:4a:63:00:24:8e:12:e7:e8:12:3d:9b:93:b4:ee:
                    26:60:61:26:6c:92:96:dc:2d:09:61:25:ab:80:2a:
                    0e:f6:00:25:c0:e9:5e:b0:1a:85:2e:fb:8f:5e:cf:
                    ec:31:05:55:09:64:fd:51:68:cb:d8:9f:55:02:c5:
                    a2:0d:df:8f:73:fb:e4:d7:24:b3:3c:5e:39:98:b1:
                    bd:0d:ba:2e:d9:22:9f:51:bd:fd:33:c4:24:d2:21:
                    ad:84:7d:b0:d3:20:6d:32:28:0f:df:b6:b8:5b:58:
                    a2:89:ae:fa:3d:8f:4c:3c:48:16:df:a1:e2:77:99:
                    d0:c2:57:7b:5b:43:ea:4c:da:85:bd:ec:c2:ff:07:
                    4c:7f:db:54:e0:16:6e:ae:b4:38:94:4d:85:e0:05:
                    71:9e:cd:f0:c1:aa:40:59:61:1a:a5:b1:f1:29:90:
                    e9:64:26:62:90:f4:96:f5:fb:02:f1:78:78:d1:95:
                    b4:bf:f3:d9:a0:ca:b5:08:85:05:9b:d2:70:59:3c:
                    ee:1a:f8:d7:12:3c:a9:5b:8a:a6:4b:4c:d2:96:1a:
                    4a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:12:E5:02:88:1A:93:4B:F5:66:1B:C9:81:80:D9:97:0C:E5:F9:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b51e73b-da80-3086-874f-12305101a297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:ee:7d:5a:aa:d3:6a:b1:bd:3a:9c:08:27:9f:e1:d5:8e:
         b3:65:9d:ba:d2:71:6a:ae:0f:ca:8f:c1:10:50:38:a1:aa:c1:
         92:5e:01:ee:59:10:38:29:16:d0:39:72:d8:b6:8e:b5:1e:f5:
         aa:b5:86:ee:0e:39:77:81:6c:8d:87:30:9e:71:03:52:a9:7e:
         d6:b4:e3:15:40:f8:e2:38:aa:8e:73:fa:17:78:1f:6e:30:58:
         e7:f5:a4:05:f3:24:be:e6:fd:1d:2d:ac:57:63:77:73:ab:28:
         1b:a6:68:b8:c1:84:bd:48:d0:b2:04:68:8f:ce:18:b8:ed:28:
         05:84:8e:e7:8e:86:93:ac:ea:92:f2:85:dc:d3:f2:b5:3a:74:
         ce:97:e6:a5:e6:84:cb:04:d6:20:f3:c8:48:88:2f:b9:cb:44:
         f3:08:5f:1a:21:8a:04:f9:cf:9e:da:8b:56:85:e5:44:d2:11:
         5d:4b:f9:d5:77:d1:e9:97:6a:7b:a5:12:f1:c4:45:fd:fb:2a:
         01:c6:7b:bd:36:22:e6:5e:4f:71:16:b8:cc:1d:04:1e:c8:8c:
         26:46:de:bd:54:2d:97:47:93:df:3b:66:f5:6b:19:5a:61:fe:
         d2:32:ee:5b:12:b6:c0:83:29:6f:38:49:9a:7a:13:63:a0:3e:
         f1:fe:35:5d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUYofDrzUc+DoEbBzgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDMwNDEzMzE0NloXDTI0MDYwMjEyMzE0NlowLzEtMCsGA1UEAxMk
ODNjMDdmMjctNmUwZC00ZmMwLWIwZGUtNWMyODI0OTllOWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJhtCMRxBNGQdaxqwpwtUw4/ebUbgX6dKHIj
+0Nf8HGJmsaBu/VFJ0Yj/1k2SmMAJI4S5+gSPZuTtO4mYGEmbJKW3C0JYSWrgCoO
9gAlwOlesBqFLvuPXs/sMQVVCWT9UWjL2J9VAsWiDd+Pc/vk1ySzPF45mLG9Dbou
2SKfUb39M8Qk0iGthH2w0yBtMigP37a4W1iiia76PY9MPEgW36Hid5nQwld7W0Pq
TNqFvezC/wdMf9tU4BZurrQ4lE2F4AVxns3wwapAWWEapbHxKZDpZCZikPSW9fsC
8Xh40ZW0v/PZoMq1CIUFm9JwWTzuGvjXEjypW4qmS0zSlhpKkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHIS5QKIGpNL9WYbyYGA2ZcM5fm5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWI1MWU3M2ItZGE4MC0z
MDg2LTg3NGYtMTIzMDUxMDFhMjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFQAI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADzL7n1aqtNqsb06nAgnn+HVjrNlnbrScWquD8qPwRBQOKGqwZJe
Ae5ZEDgpFtA5cti2jrUe9aq1hu4OOXeBbI2HMJ5xA1Kpfta04xVA+OI4qo5z+hd4
H24wWOf1pAXzJL7m/R0trFdjd3OrKBumaLjBhL1I0LIEaI/OGLjtKAWEjueOhpOs
6pLyhdzT8rU6dM6X5qXmhMsE1iDzyEiIL7nLRPMIXxohigT5z57ai1aF5UTSEV1L
+dV30emXanulEvHERf37KgHGe702IuZeT3EWuMwdBB7IjCZG3r1ULZdHk987ZvVr
GVph/tIy7lsStsCDKW84SZp6E2OgPvH+NV0=
-----END CERTIFICATE-----
Generated at Fri May 17 15:36:14 2024 by rpki-client on console-ams.rpki-client.org