Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfbd9658-3901-38fd-8dfa-d785bf271275.roa
File:                     dfbd9658-3901-38fd-8dfa-d785bf271275.roa (raw, json)
Hash identifier:          VKZTwkTASEGxXMjz7HgEWaFYTmgT3TWRHlyw5LEnzOM=
Subject key identifier:   C8:E0:1C:F0:87:3B:54:15:74:53:10:4C:72:4F:11:88:CA:57:38:81
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452C6DE0ADB7AAB60984DC9D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfbd9658-3901-38fd-8dfa-d785bf271275.roa
Signing time:             Mon 11 Mar 2024 15:43:02 +0000
ROA not before:           Mon 11 Mar 2024 15:43:02 +0000
ROA not after:            Sun 09 Jun 2024 15:43:02 +0000
asID:                     9498
IP address blocks:        2600:140f:800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:6d:e0:ad:b7:aa:b6:09:84:dc:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 15:43:02 2024 GMT
            Not After : Jun  9 15:43:02 2024 GMT
        Subject: CN=206b1a8c-172d-43e8-8695-a50a1c7254d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:df:44:79:27:df:11:20:62:4c:d1:69:ae:6e:
                    51:7d:11:26:9f:30:0f:4c:fa:a4:ca:21:55:88:92:
                    bc:ef:f4:72:d2:a1:70:50:89:80:c2:35:5a:e6:0c:
                    f2:7d:77:11:dc:b9:94:c4:05:01:6c:15:3f:18:ca:
                    27:4d:15:fb:26:41:a2:f9:09:56:a4:4a:ba:9b:21:
                    ea:40:53:b5:c5:e1:cb:69:e9:40:54:bc:c2:fe:26:
                    a8:38:b2:b2:a1:09:c0:2a:a8:2d:47:43:95:d9:fb:
                    17:a2:bc:aa:d3:0b:a5:eb:10:d6:00:41:53:1d:2e:
                    75:d4:5f:e2:af:86:dc:09:00:db:b9:c1:09:d9:af:
                    86:d5:2a:98:8c:62:e7:97:4b:43:01:47:86:86:e7:
                    f7:83:f0:27:2d:cf:0b:76:29:0a:57:50:a2:bd:69:
                    e1:07:f8:1a:77:2f:13:7f:98:53:2a:ad:74:db:6e:
                    a0:9e:d6:72:87:40:4e:5c:81:8c:25:0c:08:88:28:
                    a0:0a:74:ad:03:7a:6d:f2:f7:03:db:fd:a8:50:74:
                    7a:b8:9e:04:f2:8f:ec:19:63:e9:44:44:c7:fe:4a:
                    ec:4f:67:22:ac:23:12:d9:7f:6c:f3:12:4e:50:4d:
                    92:f4:c9:a4:4e:63:d5:b8:e9:75:15:1b:8a:c3:e8:
                    cf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E0:1C:F0:87:3B:54:15:74:53:10:4C:72:4F:11:88:CA:57:38:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfbd9658-3901-38fd-8dfa-d785bf271275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:bf:b1:d5:1f:6a:fd:cd:71:ed:44:1a:10:23:3d:b0:9e:
         00:d7:a6:eb:d4:20:da:af:8d:4f:4c:fb:d7:6a:6c:6b:9a:58:
         e4:39:46:c4:2c:a2:ea:30:f6:39:c4:3e:55:f1:f9:3c:97:15:
         af:f4:cd:7b:0a:ff:5d:ed:e8:1b:59:8a:29:06:d7:df:6c:80:
         af:84:7f:72:da:91:a5:83:ed:97:b4:94:8c:86:72:89:9a:97:
         66:40:fe:ab:98:0a:8c:c7:24:48:b1:e9:38:b9:67:39:d7:3e:
         2f:9b:c2:c3:6d:66:0f:e5:4d:2c:a5:4a:af:c0:56:a8:ad:ed:
         95:75:49:1b:af:1f:36:2e:b3:67:96:ba:7d:2e:d9:d3:6f:8b:
         b3:83:6d:f0:dd:f9:b8:73:e7:07:06:77:05:87:f2:61:7a:68:
         af:3f:cb:ab:ec:01:9f:c7:f9:b0:79:8d:a6:b8:63:5e:da:a9:
         4d:38:ab:11:7e:5e:33:17:1a:9e:57:0a:1c:ef:80:97:0d:7f:
         c3:d6:76:b9:31:21:1b:ec:e1:c7:f8:9b:ae:dc:03:0d:11:78:
         74:d1:31:ef:5c:2e:f8:95:41:4e:9e:d8:9d:98:5b:62:52:dd:
         4d:20:0a:33:bc:27:02:d0:32:d1:d7:cf:f9:2f:3e:aa:88:ea:
         a4:14:c1:e2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUsbeCtt6q2CYTcnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDMxMTE1NDMwMloXDTI0MDYwOTE1NDMwMlowLzEtMCsGA1UEAxMk
MjA2YjFhOGMtMTcyZC00M2U4LTg2OTUtYTUwYTFjNzI1NGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd9EeSffESBiTNFprm5RfREmnzAPTPqkyiFV
iJK87/Ry0qFwUImAwjVa5gzyfXcR3LmUxAUBbBU/GMonTRX7JkGi+QlWpEq6myHq
QFO1xeHLaelAVLzC/iaoOLKyoQnAKqgtR0OV2fsXoryq0wul6xDWAEFTHS511F/i
r4bcCQDbucEJ2a+G1SqYjGLnl0tDAUeGhuf3g/AnLc8LdikKV1CivWnhB/gady8T
f5hTKq10226gntZyh0BOXIGMJQwIiCigCnStA3pt8vcD2/2oUHR6uJ4E8o/sGWPp
RETH/krsT2cirCMS2X9s8xJOUE2S9MmkTmPVuOl1FRuKw+jPZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMjgHPCHO1QVdFMQTHJPEYjKVziBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZiZDk2NTgtMzkwMS0z
OGZkLThkZmEtZDc4NWJmMjcxMjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUDwgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEW2v7HVH2r9zXHtRBoQIz2wngDXpuvUINqvjU9M+9dqbGuaWOQ5
RsQsouow9jnEPlXx+TyXFa/0zXsK/13t6BtZiikG199sgK+Ef3LakaWD7Ze0lIyG
comal2ZA/quYCozHJEix6Ti5ZznXPi+bwsNtZg/lTSylSq/AVqit7ZV1SRuvHzYu
s2eWun0u2dNvi7ODbfDd+bhz5wcGdwWH8mF6aK8/y6vsAZ/H+bB5jaa4Y17aqU04
qxF+XjMXGp5XChzvgJcNf8PWdrkxIRvs4cf4m67cAw0ReHTRMe9cLviVQU6e2J2Y
W2JS3U0gCjO8JwLQMtHXz/kvPqqI6qQUweI=
-----END CERTIFICATE-----
Generated at Fri May 17 01:58:03 2024 by rpki-client on console-fra.rpki-client.org