Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fc4ff9c-434b-3aa2-a723-2d5afc39b4b7.roa
File:                     1fc4ff9c-434b-3aa2-a723-2d5afc39b4b7.roa (raw, json)
Hash identifier:          GyKFOjPVypQaFpwAVLA68/lq0oESv01Xhut9GFHsw18=
Subject key identifier:   76:AA:E5:52:00:9F:C0:82:A5:46:8C:90:6C:D5:46:C0:E9:10:CB:47
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CD09FB2EC9ACC1AE3C250780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fc4ff9c-434b-3aa2-a723-2d5afc39b4b7.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     35994
IP address blocks:        2600:141b:c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:fb:2e:c9:ac:c1:ae:3c:25:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=60dcc7af-16d6-49b1-bd61-2b08830710b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:ae:b9:43:6e:56:4a:52:96:bb:f5:e7:cc:
                    8f:82:f3:4a:07:67:82:9d:5e:56:c8:b4:bd:92:0f:
                    61:9b:de:fa:03:59:5f:2a:7a:18:1d:2d:b3:b6:94:
                    95:f7:6e:37:46:59:5c:13:ad:1c:01:42:7a:53:4f:
                    66:17:84:02:91:0d:4c:45:3c:af:8b:8b:eb:db:bd:
                    36:dc:fe:60:00:bf:3f:b2:d2:57:dc:92:9f:ec:37:
                    af:06:d5:e9:b2:b0:c8:9f:24:0a:27:80:4c:6d:3a:
                    0c:ed:71:03:4d:62:82:69:54:ca:63:6a:c6:7b:37:
                    b5:ce:25:34:bd:74:6c:3d:06:39:06:01:ce:52:cd:
                    eb:48:53:6d:cb:cf:3c:87:42:a2:b4:3b:87:76:c0:
                    c7:2f:48:eb:41:d9:71:40:08:19:90:38:d5:32:76:
                    13:ee:f9:da:c5:70:3c:f5:f1:e7:9b:87:02:61:c1:
                    7e:c6:e3:d9:8a:a4:3e:21:72:97:4f:06:97:66:49:
                    66:14:14:25:d9:96:39:ca:58:ee:79:30:2c:7a:3a:
                    09:09:99:21:81:30:ac:26:17:80:82:40:de:bf:62:
                    93:b1:75:4c:01:5e:9b:60:4b:86:8c:1d:2d:bb:20:
                    f7:b6:e6:25:e1:95:0a:b5:bd:70:ae:45:50:f7:f9:
                    1a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AA:E5:52:00:9F:C0:82:A5:46:8C:90:6C:D5:46:C0:E9:10:CB:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fc4ff9c-434b-3aa2-a723-2d5afc39b4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:64:e0:ca:a4:b4:26:6b:1f:6c:7f:0f:a2:57:8f:a3:a5:e9:
         bf:23:8e:48:66:7a:fa:88:b6:f7:df:cf:8c:5d:d9:72:22:25:
         b5:88:2d:ae:7a:58:83:74:98:84:f7:f5:3c:df:48:d1:78:04:
         c2:63:6c:7c:8f:ce:51:5b:25:b4:90:16:29:b9:52:7e:23:6e:
         68:c9:c7:e6:fb:f3:88:2e:16:1e:4b:39:17:9c:bf:d1:4b:fc:
         ee:fd:89:69:39:05:df:2c:90:9d:14:89:8c:12:58:f4:2a:51:
         5c:88:ba:12:84:ee:82:af:d0:9e:b0:16:6d:f1:37:50:f0:b5:
         00:b5:54:66:f0:f0:1a:8d:fd:dc:00:8b:54:04:6c:43:ee:a3:
         6a:eb:13:ee:25:35:22:5c:4e:b7:57:02:78:27:25:70:7d:5a:
         1f:f5:cd:ff:b2:4c:71:5e:dc:9f:d8:e4:b7:66:77:2b:a6:d7:
         1c:f4:57:76:13:15:5e:20:94:8f:87:62:1a:f2:ab:00:2e:ee:
         73:0c:50:01:44:bc:09:c0:94:33:3e:96:42:d7:79:bc:8c:73:
         99:ef:e7:76:08:3e:96:99:e0:a2:f7:11:03:4f:b8:b2:cd:f3:
         e9:cb:ad:bf:af:cd:44:36:8e:3c:02:d1:cd:6c:9b:db:7e:aa:
         81:3e:bc:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfNCfsuyazBrjwlB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEwNzE0MDAzOVoXDTI1MDIwNTE0MDAzOVowLzEtMCsGA1UEAxMk
NjBkY2M3YWYtMTZkNi00OWIxLWJkNjEtMmIwODgzMDcxMGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbWuuUNuVkpSlrv158yPgvNKB2eCnV5WyLS9
kg9hm976A1lfKnoYHS2ztpSV9243RllcE60cAUJ6U09mF4QCkQ1MRTyvi4vr2702
3P5gAL8/stJX3JKf7DevBtXpsrDInyQKJ4BMbToM7XEDTWKCaVTKY2rGeze1ziU0
vXRsPQY5BgHOUs3rSFNty888h0KitDuHdsDHL0jrQdlxQAgZkDjVMnYT7vnaxXA8
9fHnm4cCYcF+xuPZiqQ+IXKXTwaXZklmFBQl2ZY5yljueTAsejoJCZkhgTCsJheA
gkDev2KTsXVMAV6bYEuGjB0tuyD3tuYl4ZUKtb1wrkVQ9/kajwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHaq5VIAn8CCpUaMkGzVRsDpEMtHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWZjNGZmOWMtNDM0Yi0z
YWEyLWE3MjMtMmQ1YWZjMzliNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGwAM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABBk4MqktCZrH2x/D6JXj6Ol6b8jjkhmevqItvffz4xd2XIiJbWI
La56WIN0mIT39TzfSNF4BMJjbHyPzlFbJbSQFim5Un4jbmjJx+b784guFh5LORec
v9FL/O79iWk5Bd8skJ0UiYwSWPQqUVyIuhKE7oKv0J6wFm3xN1DwtQC1VGbw8BqN
/dwAi1QEbEPuo2rrE+4lNSJcTrdXAngnJXB9Wh/1zf+yTHFe3J/Y5Ldmdyum1xz0
V3YTFV4glI+HYhryqwAu7nMMUAFEvAnAlDM+lkLXebyMc5nv53YIPpaZ4KL3EQNP
uLLN8+nLrb+vzUQ2jjwC0c1sm9t+qoE+vBk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:32 2024 by rpki-client on console-ams.rpki-client.org