Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9eb66b69-5706-318b-a3c4-cc2381918711.roa
File:                     9eb66b69-5706-318b-a3c4-cc2381918711.roa (raw, json)
Hash identifier:          CKPZ2o/QmhL6JW0/vdRG0ufmg7MIXAF+trQY750L98A=
Subject key identifier:   64:75:F2:F5:C8:A2:5B:CB:66:D9:FF:BE:72:69:97:8D:85:9A:95:5F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858457FDDD28E9DEC02E88EC59200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9eb66b69-5706-318b-a3c4-cc2381918711.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     24319
IP address blocks:        2600:1417:3800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d2:8e:9d:ec:02:e8:8e:c5:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=cddfeaba-bb5d-4435-a33b-5546211c1606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:4d:c3:e3:a6:88:c9:53:af:96:7a:31:2b:
                    e4:83:0c:0f:29:9e:fb:bb:6b:1f:6b:ec:52:db:de:
                    1a:7d:eb:8c:80:e4:1f:1e:7d:dc:99:df:aa:6e:23:
                    36:9b:a1:44:02:02:a4:4d:fd:15:cf:95:f9:b8:39:
                    7a:86:d5:b5:c0:f6:f1:c5:97:24:b9:db:76:af:74:
                    03:fe:ba:c0:eb:60:48:ad:83:32:11:7d:21:69:eb:
                    27:34:97:75:2c:6d:22:a8:28:2c:fb:6d:6b:3d:ba:
                    32:6a:f2:0f:83:fb:2f:f4:39:a6:3b:bf:69:22:a7:
                    fc:d7:17:46:21:f0:cb:88:2b:64:62:b7:8c:a9:73:
                    ae:3e:65:d9:a8:7e:f5:6f:b9:a9:03:2f:2b:09:81:
                    38:33:56:21:ab:f8:f3:be:d1:f8:3d:39:69:73:9d:
                    08:74:3d:af:b7:57:b5:5f:4b:8b:5d:de:97:20:8a:
                    7d:a1:7e:32:31:a6:84:2f:15:e7:39:11:94:59:3a:
                    ab:9f:01:81:e6:11:d3:a9:3a:28:ba:26:32:02:a0:
                    a1:95:24:9e:2e:08:b9:6d:1e:61:cf:96:11:56:0b:
                    7c:a6:c0:1b:31:69:20:5b:7d:3d:37:23:d4:fe:85:
                    cf:15:be:81:1b:38:c9:6a:bb:81:e9:cd:dd:95:73:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:75:F2:F5:C8:A2:5B:CB:66:D9:FF:BE:72:69:97:8D:85:9A:95:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9eb66b69-5706-318b-a3c4-cc2381918711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:3800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e2:af:0e:20:91:49:92:1f:fd:f2:32:ad:48:bf:1c:a8:10:
         7f:f1:ff:48:54:5a:df:94:fb:4b:c0:f0:45:c8:98:34:4d:95:
         cd:18:d9:c1:87:a2:6d:06:a9:ec:d5:bb:90:1b:f8:8e:79:af:
         ed:fd:89:72:ee:38:76:fe:a9:60:b9:2d:88:49:c3:4e:d1:5c:
         87:0e:bf:46:b9:1e:b1:08:7e:c2:81:f9:3a:e0:7e:85:be:a8:
         08:fe:4f:35:50:a6:43:2b:63:26:f1:39:ad:d1:d3:d3:05:1a:
         0f:27:b5:fe:f5:df:e8:c4:b0:b6:c7:a0:49:bf:da:58:d3:85:
         ac:e1:e8:59:73:64:03:12:70:96:94:0b:1f:9a:99:a7:65:f5:
         e4:bf:92:90:a5:52:a9:e7:6c:d7:ef:f7:99:d2:f3:e6:5f:95:
         48:a0:fa:ff:d7:e1:1f:49:ee:5e:e9:e4:3d:3b:66:56:21:b9:
         e7:24:3b:8f:80:66:fc:73:d6:31:d0:a6:e9:a5:c8:09:0d:e5:
         2e:77:68:18:ba:aa:f3:15:f8:f3:9c:88:84:79:47:68:ed:0f:
         19:f9:30:06:08:a8:19:4b:0a:03:f6:06:7c:cf:42:49:3f:c1:
         51:71:be:a1:aa:06:8a:33:1f:ad:04:d2:be:45:2b:ff:62:68:
         39:a1:30:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV/3dKOnewC6I7FkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk
Y2RkZmVhYmEtYmI1ZC00NDM1LWEzM2ItNTU0NjIxMWMxNjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKFNw+OmiMlTr5Z6MSvkgwwPKZ77u2sfa+xS
294afeuMgOQfHn3cmd+qbiM2m6FEAgKkTf0Vz5X5uDl6htW1wPbxxZckudt2r3QD
/rrA62BIrYMyEX0haesnNJd1LG0iqCgs+21rPboyavIPg/sv9DmmO79pIqf81xdG
IfDLiCtkYreMqXOuPmXZqH71b7mpAy8rCYE4M1Yhq/jzvtH4PTlpc50IdD2vt1e1
X0uLXd6XIIp9oX4yMaaELxXnORGUWTqrnwGB5hHTqToouiYyAqChlSSeLgi5bR5h
z5YRVgt8psAbMWkgW309NyPU/oXPFb6BGzjJaruB6c3dlXPmgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGR18vXIolvLZtn/vnJpl42FmpVfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWViNjZiNjktNTcwNi0z
MThiLWEzYzQtY2MyMzgxOTE4NzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFzgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB3irw4gkUmSH/3yMq1IvxyoEH/x/0hUWt+U+0vA8EXImDRNlc0Y
2cGHom0GqezVu5Ab+I55r+39iXLuOHb+qWC5LYhJw07RXIcOv0a5HrEIfsKB+Trg
foW+qAj+TzVQpkMrYybxOa3R09MFGg8ntf713+jEsLbHoEm/2ljThazh6FlzZAMS
cJaUCx+amadl9eS/kpClUqnnbNfv95nS8+ZflUig+v/X4R9J7l7p5D07ZlYhueck
O4+AZvxz1jHQpumlyAkN5S53aBi6qvMV+POciIR5R2jtDxn5MAYIqBlLCgP2BnzP
Qkk/wVFxvqGqBoozH60E0r5FK/9iaDmhMIs=
-----END CERTIFICATE-----
Generated at Fri May 17 21:41:18 2024 by rpki-client on console-fra.rpki-client.org