Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cadadef3-a150-3dcd-bc53-b5fef71649fd.roa
File:                     cadadef3-a150-3dcd-bc53-b5fef71649fd.roa (raw, json)
Hash identifier:          Zr5fwFAnUi4Lqfpsea+ooU6MArmO+uFa3982/LL15LI=
Subject key identifier:   67:AA:98:75:69:33:9E:0A:BA:DB:8B:1A:A0:80:58:FB:47:CA:1B:AC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CD09F74C02889915DDBFC7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cadadef3-a150-3dcd-bc53-b5fef71649fd.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     35994
IP address blocks:        2600:1408:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:f7:4c:02:88:99:15:dd:bf:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=d60d9277-118f-4eb9-8bca-5faf9faf3868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b9:4d:2b:73:b6:7a:90:4f:d8:86:95:b5:b2:
                    0d:d3:3e:19:34:8d:f1:68:70:39:3d:9c:10:88:64:
                    32:5e:d2:c5:69:37:97:8d:17:37:e4:d9:1c:27:46:
                    9c:b4:f0:f9:76:af:c8:12:13:68:ad:3c:92:42:8d:
                    81:d4:19:06:4a:ed:da:76:ce:a0:9c:f3:65:31:08:
                    f0:63:14:e8:db:4a:e6:0e:c1:5d:0d:e0:2b:f5:e5:
                    dc:86:67:72:39:03:74:86:e9:88:72:d7:21:d8:12:
                    5e:ee:42:94:42:99:6f:52:77:73:a5:77:ef:a4:c4:
                    e7:8d:13:3e:85:9e:f8:57:8b:de:fa:8f:7a:1e:c1:
                    49:5d:56:f3:8b:80:bd:1f:b4:c9:0a:2a:a4:25:9f:
                    39:4c:54:a9:d7:1d:f6:f6:08:02:d9:30:16:aa:53:
                    b4:5b:8b:71:8b:b0:ba:28:49:ba:d3:31:99:51:b7:
                    8d:c4:c9:b3:21:56:3a:a0:8d:e5:36:a5:79:be:68:
                    7c:e5:44:a5:d7:fc:7a:e9:28:c0:f3:23:8d:6e:d1:
                    87:f5:d3:f7:fc:06:ad:ce:0e:c5:24:c3:e6:02:19:
                    23:d0:b1:3d:d9:7a:82:10:49:3b:80:e9:f7:13:e0:
                    7c:fe:b4:ea:d3:f9:35:81:af:2b:ac:c3:39:29:79:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AA:98:75:69:33:9E:0A:BA:DB:8B:1A:A0:80:58:FB:47:CA:1B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cadadef3-a150-3dcd-bc53-b5fef71649fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:8d:ff:d2:27:b6:17:f4:ab:0f:ae:99:08:df:04:fb:16:d0:
         15:1c:38:66:4b:42:3a:06:d1:ba:5f:63:d4:4a:c2:5c:06:a6:
         33:4b:26:3c:6f:c6:08:a9:6f:c9:9b:ee:29:27:2f:14:b2:b1:
         31:0f:b7:91:47:72:0a:5c:28:bc:58:ff:01:0a:ff:63:1f:33:
         7b:d7:ce:61:5a:de:29:85:c3:1f:d1:4c:1e:25:81:03:d4:85:
         56:29:37:d9:27:90:95:d8:34:ec:b5:1c:56:c5:f6:0e:96:58:
         48:ac:8b:08:2d:6f:58:5b:1f:cc:4e:63:5c:ec:00:26:61:51:
         b6:9b:ed:c9:9d:fb:d0:0b:ed:8d:d8:e0:0d:01:98:3d:2d:01:
         1c:7b:8c:bb:f1:dc:fc:ca:7d:37:3b:c7:fa:c7:51:6e:79:6f:
         99:ec:19:af:94:7f:f5:41:2b:7a:45:2d:07:b7:a8:7b:c4:3c:
         93:c5:c9:ca:e2:15:7d:62:a1:6b:ca:a5:41:a0:a8:bb:a7:93:
         4c:b5:71:70:c7:01:db:71:2a:e8:b9:48:92:8c:f5:dc:09:84:
         e3:2a:2b:95:5e:c2:7c:49:0c:92:be:5b:45:1f:29:8e:30:e6:
         e0:c8:21:57:37:af:25:46:76:14:d2:f4:4c:e6:f8:a8:c0:fe:
         ce:25:b5:6c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfNCfdMAoiZFd2/x8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEwNzE0MDAzOVoXDTI1MDIwNTE0MDAzOVowLzEtMCsGA1UEAxMk
ZDYwZDkyNzctMTE4Zi00ZWI5LThiY2EtNWZhZjlmYWYzODY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkblNK3O2epBP2IaVtbIN0z4ZNI3xaHA5PZwQ
iGQyXtLFaTeXjRc35NkcJ0actPD5dq/IEhNorTySQo2B1BkGSu3ads6gnPNlMQjw
YxTo20rmDsFdDeAr9eXchmdyOQN0humIctch2BJe7kKUQplvUndzpXfvpMTnjRM+
hZ74V4ve+o96HsFJXVbzi4C9H7TJCiqkJZ85TFSp1x329ggC2TAWqlO0W4txi7C6
KEm60zGZUbeNxMmzIVY6oI3lNqV5vmh85USl1/x66SjA8yONbtGH9dP3/Aatzg7F
JMPmAhkj0LE92XqCEEk7gOn3E+B8/rTq0/k1ga8rrMM5KXlRJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGeqmHVpM54KutuLGqCAWPtHyhusMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2FkYWRlZjMtYTE1MC0z
ZGNkLWJjNTMtYjVmZWY3MTY0OWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCGAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAiN/9Inthf0qw+umQjfBPsW0BUcOGZLQjoG0bpfY9RKwlwGpjNL
Jjxvxgipb8mb7iknLxSysTEPt5FHcgpcKLxY/wEK/2MfM3vXzmFa3imFwx/RTB4l
gQPUhVYpN9knkJXYNOy1HFbF9g6WWEisiwgtb1hbH8xOY1zsACZhUbab7cmd+9AL
7Y3Y4A0BmD0tARx7jLvx3PzKfTc7x/rHUW55b5nsGa+Uf/VBK3pFLQe3qHvEPJPF
ycriFX1ioWvKpUGgqLunk0y1cXDHAdtxKui5SJKM9dwJhOMqK5VewnxJDJK+W0Uf
KY4w5uDIIVc3ryVGdhTS9Ezm+KjA/s4ltWw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:34 2024 by rpki-client on console-fra.rpki-client.org