Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89166128-160e-3405-8ab1-8eeae863e1f4.roa
File:                     89166128-160e-3405-8ab1-8eeae863e1f4.roa (raw, json)
Hash identifier:          2x6LjXCN63ooJp2/mplVqIuvhWibboStSCJ0RP75Qrg=
Subject key identifier:   9F:27:B1:F0:99:00:13:41:20:59:6F:57:8E:F3:BB:B2:E1:9B:72:D6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CE6F4529BE3DBF8434724B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89166128-160e-3405-8ab1-8eeae863e1f4.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     24319
IP address blocks:        2600:1413:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:45:29:be:3d:bf:84:34:72:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=d2090206-a709-4313-92d8-9ace10af58fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:09:e4:9f:ed:ef:c8:5b:13:85:4f:1b:78:
                    a8:f3:84:05:71:56:62:6e:f4:aa:34:84:e3:93:c0:
                    60:7f:2c:49:ef:34:07:1b:03:d2:6d:11:f7:22:cc:
                    8f:46:75:c5:d6:fa:62:e5:02:ec:4f:93:c7:b3:dc:
                    2f:5a:1d:dd:58:90:57:9c:86:4c:61:6f:f1:d5:55:
                    95:10:ca:60:f1:c8:53:ee:5b:5d:ae:f4:00:ea:4a:
                    ad:e3:a0:5d:18:3d:57:82:cd:9c:fc:d0:ab:e9:2e:
                    2d:fe:22:02:95:13:b1:fe:a0:39:84:f1:c2:ea:d1:
                    b9:48:7a:63:3a:5d:ab:ba:45:72:0d:f3:de:e4:96:
                    e3:fb:86:b5:2b:f1:88:9c:52:61:25:dd:3f:ab:9c:
                    61:8b:f6:40:db:56:a8:ba:b0:15:9b:0d:3f:e5:07:
                    e0:41:d0:71:32:b4:32:83:92:8d:3e:39:f0:a0:e1:
                    b0:a8:a3:36:8a:82:cf:06:df:a9:86:c9:26:e9:c3:
                    ce:80:e0:76:7b:b9:72:2f:b1:e7:48:c7:8d:e4:aa:
                    54:d1:50:46:9a:a3:1a:44:61:ed:a2:1e:1e:e8:f7:
                    88:b1:b8:bd:e7:d6:6c:22:df:cd:da:ea:c4:c7:fb:
                    7c:db:83:b2:5b:8c:13:9f:49:d4:d0:00:14:cd:86:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:27:B1:F0:99:00:13:41:20:59:6F:57:8E:F3:BB:B2:E1:9B:72:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89166128-160e-3405-8ab1-8eeae863e1f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1413:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f1:ac:e8:f7:eb:20:02:d3:75:0f:50:24:fe:02:09:7e:61:
         31:67:93:d8:55:3e:23:a3:12:b2:3f:ba:33:28:a5:0b:08:dd:
         26:df:81:1a:39:06:2b:41:69:d0:82:d4:63:f1:98:90:c5:f1:
         5a:54:e3:6d:eb:55:0a:9e:89:65:fb:20:ab:5a:f5:49:1c:0f:
         6d:5a:0a:cd:df:7b:09:79:17:a6:79:1a:fa:2d:a1:eb:9b:b1:
         0f:ca:08:3a:bf:e0:ac:79:cf:19:8f:7d:9c:24:94:80:c8:0d:
         1c:17:e4:b8:ed:ae:13:49:a5:d7:ac:25:06:02:81:a2:0f:a0:
         03:e0:df:6d:0a:fa:80:10:cc:b8:5f:17:67:8d:af:b9:f2:9f:
         07:b9:03:08:45:d3:27:2b:02:1e:0f:12:f8:ab:86:3e:ad:31:
         6b:86:e2:96:97:23:21:c0:3e:d7:82:e6:06:31:c8:5f:55:38:
         3b:08:49:a9:f9:48:1c:b1:3f:82:b4:57:84:2c:0e:20:c3:a3:
         9e:c1:02:1f:e2:2f:a8:54:ea:22:d2:80:a6:22:4d:19:e4:df:
         3d:03:1f:83:fc:67:5f:1b:23:fe:d3:b5:14:ed:45:ae:e2:ef:
         e6:60:9f:ce:8c:4a:51:c5:bd:9f:70:c8:60:0e:47:52:85:94:
         c7:c2:70:35
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfOb0Upvj2/hDRyS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk
ZDIwOTAyMDYtYTcwOS00MzEzLTkyZDgtOWFjZTEwYWY1OGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcgJ5J/t78hbE4VPG3io84QFcVZibvSqNITj
k8BgfyxJ7zQHGwPSbRH3IsyPRnXF1vpi5QLsT5PHs9wvWh3dWJBXnIZMYW/x1VWV
EMpg8chT7ltdrvQA6kqt46BdGD1Xgs2c/NCr6S4t/iIClROx/qA5hPHC6tG5SHpj
Ol2rukVyDfPe5Jbj+4a1K/GInFJhJd0/q5xhi/ZA21aourAVmw0/5QfgQdBxMrQy
g5KNPjnwoOGwqKM2ioLPBt+phskm6cPOgOB2e7lyL7HnSMeN5KpU0VBGmqMaRGHt
oh4e6PeIsbi959ZsIt/N2urEx/t824OyW4wTn0nU0AAUzYaqTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ8nsfCZABNBIFlvV47zu7Lhm3LWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODkxNjYxMjgtMTYwZS0z
NDA1LThhYjEtOGVlYWU4NjNlMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUExAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACrxrOj36yAC03UPUCT+Agl+YTFnk9hVPiOjErI/ujMopQsI3Sbf
gRo5BitBadCC1GPxmJDF8VpU423rVQqeiWX7IKta9UkcD21aCs3fewl5F6Z5Gvot
oeubsQ/KCDq/4Kx5zxmPfZwklIDIDRwX5LjtrhNJpdesJQYCgaIPoAPg320K+oAQ
zLhfF2eNr7nynwe5AwhF0ycrAh4PEvirhj6tMWuG4paXIyHAPteC5gYxyF9VODsI
San5SByxP4K0V4QsDiDDo57BAh/iL6hU6iLSgKYiTRnk3z0DH4P8Z18bI/7TtRTt
Ra7i7+Zgn86MSlHFvZ9wyGAOR1KFlMfCcDU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:27:20 2024 by rpki-client on console-fra.rpki-client.org