Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab09c07a-dd77-3414-a8f6-7a6c42d872f1.roa
File:                     ab09c07a-dd77-3414-a8f6-7a6c42d872f1.roa (raw, json)
Hash identifier:          EY/KkRtHluEWiPFQnJ5+uPFV8atEEIXodOwhCPwbrSE=
Subject key identifier:   AD:22:4C:39:FB:23:B6:C6:F1:D3:12:CF:0B:45:0F:59:74:6A:5E:16
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858471500D42261B29669813C4D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab09c07a-dd77-3414-a8f6-7a6c42d872f1.roa
Signing time:             Mon 02 Sep 2024 15:53:36 +0000
ROA not before:           Mon 02 Sep 2024 15:53:36 +0000
ROA not after:            Sun 01 Dec 2024 16:53:36 +0000
asID:                     20940
IP address blocks:        2600:1488:a007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:15:00:d4:22:61:b2:96:69:81:3c:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  2 15:53:36 2024 GMT
            Not After : Dec  1 16:53:36 2024 GMT
        Subject: CN=6f99b7ad-bf92-4bc7-a6bb-7642de75e61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:74:18:1f:ca:34:ec:ac:5d:db:4f:fb:a7:
                    33:73:bd:08:99:32:85:01:3e:85:3d:f4:eb:88:72:
                    be:ec:56:ba:58:15:5e:f9:ee:3d:1c:01:cd:80:ca:
                    5b:18:b7:b9:c8:a2:e5:88:08:ac:c4:07:2f:26:84:
                    61:75:08:85:bb:98:c0:53:d1:75:53:9d:79:09:7c:
                    2c:25:2b:dd:7f:81:d7:18:49:13:d3:74:d9:44:7f:
                    df:f7:40:48:6d:01:6b:bd:19:27:42:3f:ec:69:5e:
                    a6:ae:34:8d:27:98:bb:5a:94:d6:c4:e8:2d:39:b7:
                    3c:8b:9f:05:81:1f:a1:e6:1f:37:ff:2e:36:98:ad:
                    d1:82:52:e8:bc:b6:f8:93:b6:b9:82:0a:88:b6:99:
                    04:6b:a1:9a:99:fd:ca:3b:bf:f3:f9:0e:78:9f:92:
                    32:7c:ef:71:50:7c:09:8a:5b:a6:53:6a:f4:2b:bb:
                    d2:e3:39:68:8b:65:f1:83:5c:df:9d:9b:15:c8:d4:
                    cb:eb:d5:9e:c2:e1:40:bc:12:9a:8b:7e:b6:5f:b6:
                    64:ad:82:22:4e:25:fa:24:aa:d7:a6:2d:4f:fc:21:
                    2c:64:1b:48:10:69:09:35:21:a5:46:33:99:5b:8e:
                    db:f2:56:38:64:5f:dc:f1:ec:35:3d:5e:ff:3d:2a:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:22:4C:39:FB:23:B6:C6:F1:D3:12:CF:0B:45:0F:59:74:6A:5E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab09c07a-dd77-3414-a8f6-7a6c42d872f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:a007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:5e:68:b1:63:22:6d:70:05:ef:cd:b3:45:b2:e9:b3:f4:65:
         88:9c:a8:bc:b4:e1:41:5e:ae:ae:46:75:55:b0:b9:91:fb:f5:
         19:c5:d1:7f:bb:40:6e:3d:e3:d8:a7:13:48:45:bc:5b:af:6f:
         ce:98:5c:19:d5:74:5f:67:d0:0b:01:71:6a:4a:7e:c8:95:86:
         7e:08:5c:17:95:df:5a:b4:ae:5e:98:b7:02:82:3a:77:f3:c8:
         20:b4:c1:1c:47:d6:ac:b0:42:36:dd:91:ea:d5:5d:2e:16:44:
         e2:f1:16:72:a4:0e:0a:43:23:21:d8:91:df:89:15:12:43:83:
         8f:ea:5f:68:a7:0e:58:3b:95:60:5a:00:d0:1f:db:b3:7e:33:
         4b:d4:42:d8:fb:98:0e:84:37:f5:1a:d7:7f:c4:53:39:62:3e:
         d9:cc:00:8a:ab:3c:0b:9f:ff:9d:16:91:1f:b2:3a:a8:2b:e2:
         28:20:a5:cd:d0:b3:14:a1:27:4c:47:5e:2f:92:b5:2b:e8:ad:
         79:0e:73:80:66:ba:6e:30:61:d7:95:1f:00:49:8d:c8:17:11:
         94:c7:b2:0f:bb:a3:67:bd:e3:76:94:26:11:65:69:9d:b5:5c:
         60:7c:6d:65:c9:b7:2f:b1:c7:e0:ff:6b:2a:e7:6f:42:54:b1:
         b1:17:50:d4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcVANQiYbKWaYE8TQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkwMjE1NTMzNloXDTI0MTIwMTE2NTMzNlowLzEtMCsGA1UEAxMk
NmY5OWI3YWQtYmY5Mi00YmM3LWE2YmItNzY0MmRlNzVlNjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XR0GB/KNOysXdtP+6czc70ImTKFAT6FPfTr
iHK+7Fa6WBVe+e49HAHNgMpbGLe5yKLliAisxAcvJoRhdQiFu5jAU9F1U515CXws
JSvdf4HXGEkT03TZRH/f90BIbQFrvRknQj/saV6mrjSNJ5i7WpTWxOgtObc8i58F
gR+h5h83/y42mK3RglLovLb4k7a5ggqItpkEa6Gamf3KO7/z+Q54n5IyfO9xUHwJ
ilumU2r0K7vS4zloi2Xxg1zfnZsVyNTL69WewuFAvBKai362X7ZkrYIiTiX6JKrX
pi1P/CEsZBtIEGkJNSGlRjOZW47b8lY4ZF/c8ew1PV7/PSotqwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK0iTDn7I7bG8dMSzwtFD1l0al4WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWIwOWMwN2EtZGQ3Ny0z
NDE0LWE4ZjYtN2E2YzQyZDg3MmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKAH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH9eaLFjIm1wBe/Ns0Wy6bP0ZYicqLy04UFerq5GdVWwuZH79RnF
0X+7QG4949inE0hFvFuvb86YXBnVdF9n0AsBcWpKfsiVhn4IXBeV31q0rl6YtwKC
OnfzyCC0wRxH1qywQjbdkerVXS4WROLxFnKkDgpDIyHYkd+JFRJDg4/qX2inDlg7
lWBaANAf27N+M0vUQtj7mA6EN/Ua13/EUzliPtnMAIqrPAuf/50WkR+yOqgr4igg
pc3QsxShJ0xHXi+StSvorXkOc4Bmum4wYdeVHwBJjcgXEZTHsg+7o2e943aUJhFl
aZ21XGB8bWXJty+xx+D/ayrnb0JUsbEXUNQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:25 2024 by rpki-client on console-fra.rpki-client.org