Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5372cff9-908a-394e-bcd5-28c0573274b7.roa
File:                     5372cff9-908a-394e-bcd5-28c0573274b7.roa (raw, json)
Hash identifier:          vAhAeQmDZewrL4N+zZuGZMiksDx2lU7V9z1uhO82820=
Subject key identifier:   20:57:F1:FD:CE:1F:03:9B:51:DC:B2:FD:9A:07:F9:46:B0:CE:56:2D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858450D4A0132F33E26C0B46E17E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5372cff9-908a-394e-bcd5-28c0573274b7.roa
Signing time:             Thu 29 Feb 2024 12:00:42 +0000
ROA not before:           Thu 29 Feb 2024 12:00:42 +0000
ROA not after:            Wed 29 May 2024 11:00:42 +0000
asID:                     20940
IP address blocks:        2600:1402:800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:4a:01:32:f3:3e:26:c0:b4:6e:17:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 29 12:00:42 2024 GMT
            Not After : May 29 11:00:42 2024 GMT
        Subject: CN=2c15d09f-0f05-428f-a7aa-f8e73f4978e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:43:17:d7:ad:00:32:4a:e9:55:9e:15:f4:
                    b1:87:aa:a8:85:c2:ed:05:7c:e4:9c:37:86:b9:a8:
                    b4:56:c9:2b:5d:8f:d8:dc:6f:f3:92:f1:c5:06:7d:
                    df:ec:6d:85:6e:32:22:b4:e6:82:42:de:ec:aa:3c:
                    66:06:ab:0a:4d:d5:25:22:b6:60:40:90:14:7c:06:
                    36:c1:f9:6c:b9:00:d8:48:96:aa:22:75:94:14:ec:
                    42:ec:9b:9a:b1:a1:9b:18:20:20:e7:a5:41:97:6b:
                    b2:af:3d:c2:65:99:e3:9f:17:75:6b:c7:98:27:69:
                    28:04:7a:44:a6:59:80:84:00:11:10:3b:64:f6:c8:
                    90:1b:43:92:39:0e:cd:06:44:ec:ca:73:12:df:de:
                    91:5e:c4:68:31:bc:12:84:c1:16:e3:32:01:9e:de:
                    9b:0e:db:b9:20:a9:c9:c0:2a:61:0a:35:cf:c6:bf:
                    c7:a3:68:a2:cc:c3:71:0e:20:9a:ce:9e:91:2a:a6:
                    fe:25:bf:f4:3e:21:ec:9e:5f:0d:97:ad:90:6d:fd:
                    a6:2c:f8:1f:7b:5c:ff:d9:66:f1:57:31:0a:da:b9:
                    8f:61:24:e1:f8:42:7b:02:f4:b2:c7:cf:90:96:af:
                    c4:15:35:6e:6a:7a:aa:17:e5:71:11:5a:e1:b6:96:
                    95:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:57:F1:FD:CE:1F:03:9B:51:DC:B2:FD:9A:07:F9:46:B0:CE:56:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5372cff9-908a-394e-bcd5-28c0573274b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1402:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:52:4c:3e:b1:59:60:98:7a:f7:e7:fc:22:cb:12:e6:a0:c4:
         53:1e:79:71:d3:71:a8:18:26:4b:e5:d9:29:10:70:92:7c:87:
         10:7d:81:75:53:4f:df:f7:4c:ea:08:88:40:2d:5b:c9:24:f6:
         40:bf:e9:28:73:65:21:ee:1f:4f:be:e8:53:50:cd:e4:52:5d:
         f9:47:f3:81:20:c7:73:34:97:ec:f1:89:cd:a5:1a:62:4e:ef:
         5f:58:a8:88:89:8a:2b:b4:87:3c:0c:a4:66:db:42:0a:ea:18:
         84:de:34:aa:23:12:b0:bf:e5:a2:f8:22:98:38:d8:30:b7:aa:
         89:c9:4d:c2:e4:ac:49:c2:28:3a:4f:75:ec:a3:de:d3:7b:d7:
         ea:29:90:68:0f:b0:55:c7:44:51:f8:07:54:05:49:54:27:e8:
         53:87:dc:34:9e:eb:4b:04:12:13:fa:da:45:9c:d9:f2:43:3b:
         27:16:67:3c:a4:d3:19:86:f8:7a:1b:58:d1:43:eb:37:58:1c:
         4e:30:ee:a0:46:ef:8b:18:33:ea:61:6c:b7:43:10:89:7f:a6:
         04:54:fb:60:b2:f7:7b:76:bc:98:43:f2:9f:a1:e1:b0:8f:21:
         f0:55:15:0c:62:f3:44:27:3e:73:0e:41:60:79:b6:80:f1:e0:
         06:01:ad:7d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUNSgEy8z4mwLRuF+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDIyOTEyMDA0MloXDTI0MDUyOTExMDA0MlowLzEtMCsGA1UEAxMk
MmMxNWQwOWYtMGYwNS00MjhmLWE3YWEtZjhlNzNmNDk3OGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNJDF9etADJK6VWeFfSxh6qohcLtBXzknDeG
uai0VskrXY/Y3G/zkvHFBn3f7G2FbjIitOaCQt7sqjxmBqsKTdUlIrZgQJAUfAY2
wflsuQDYSJaqInWUFOxC7JuasaGbGCAg56VBl2uyrz3CZZnjnxd1a8eYJ2koBHpE
plmAhAAREDtk9siQG0OSOQ7NBkTsynMS396RXsRoMbwShMEW4zIBnt6bDtu5IKnJ
wCphCjXPxr/Ho2iizMNxDiCazp6RKqb+Jb/0PiHsnl8Nl62Qbf2mLPgfe1z/2Wbx
VzEK2rmPYSTh+EJ7AvSyx8+Qlq/EFTVuanqqF+VxEVrhtpaVAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCBX8f3OHwObUdyy/ZoH+UawzlYtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTM3MmNmZjktOTA4YS0z
OTRlLWJjZDUtMjhjMDU3MzI3NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAggA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIVSTD6xWWCYevfn/CLLEuagxFMeeXHTcagYJkvl2SkQcJJ8hxB9
gXVTT9/3TOoIiEAtW8kk9kC/6ShzZSHuH0++6FNQzeRSXflH84Egx3M0l+zxic2l
GmJO719YqIiJiiu0hzwMpGbbQgrqGITeNKojErC/5aL4Ipg42DC3qonJTcLkrEnC
KDpPdeyj3tN71+opkGgPsFXHRFH4B1QFSVQn6FOH3DSe60sEEhP62kWc2fJDOycW
Zzyk0xmG+HobWNFD6zdYHE4w7qBG74sYM+phbLdDEIl/pgRU+2Cy93t2vJhD8p+h
4bCPIfBVFQxi80QnPnMOQWB5toDx4AYBrX0=
-----END CERTIFICATE-----
Generated at Fri May 17 15:36:21 2024 by rpki-client on console-ams.rpki-client.org