Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd8caa2a-8539-35e4-a96f-e382b9b47737.roa
File:                     fd8caa2a-8539-35e4-a96f-e382b9b47737.roa (raw, json)
Hash identifier:          Dx93GWhIfDOzbl4yXiNqYCMir3M1mmKegdAWJwDsW/k=
Subject key identifier:   B5:7A:33:93:1F:17:60:27:F4:31:26:C7:25:8C:6C:E4:48:9E:93:E8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473FF09BEF0C148B0D8862F258
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd8caa2a-8539-35e4-a96f-e382b9b47737.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     35994
IP address blocks:        2600:1401:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:9b:ef:0c:14:8b:0d:88:62:f2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=0151837b-3c1a-4c35-8373-b1e744e46505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c4:7c:4c:28:38:0e:98:b0:98:c6:28:58:64:
                    b0:36:e7:9b:19:3f:7d:de:c6:1b:ec:65:91:72:80:
                    4a:0d:04:ee:73:ee:3d:48:90:7f:ec:92:92:a1:1c:
                    92:a8:74:d3:d8:06:23:e8:e6:03:d8:26:62:7c:09:
                    58:24:9d:71:52:b0:ba:9d:ae:f8:3b:ea:f8:d4:e2:
                    60:37:c7:60:c7:6d:e8:e1:01:2a:d6:dc:db:ea:e2:
                    a8:2a:28:69:d8:6a:d5:94:49:33:c9:2d:9d:65:24:
                    db:90:13:cf:c2:77:77:7c:99:74:c9:9a:9d:91:a6:
                    60:2e:da:1c:ac:16:c5:4a:9f:0c:fe:d4:e5:72:c9:
                    ff:a7:04:92:2d:2d:00:0f:0b:b0:72:64:cf:7a:64:
                    d2:53:98:0c:35:c0:f6:93:3e:87:19:dd:ca:fa:d5:
                    c3:03:33:d4:b7:6e:b8:b5:32:d8:3a:35:0b:d7:bd:
                    67:ca:4e:5d:45:21:12:6b:29:d8:bb:0d:ad:e5:88:
                    17:2e:fc:6c:5b:73:28:e4:5d:53:ea:ce:86:41:cf:
                    59:41:b6:a2:f0:1c:51:60:ec:1d:6b:a9:73:11:16:
                    60:39:34:2f:cf:1e:54:1b:de:57:19:47:17:22:4e:
                    42:95:bf:eb:26:53:5f:c5:c2:f7:67:50:07:94:b7:
                    5a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7A:33:93:1F:17:60:27:F4:31:26:C7:25:8C:6C:E4:48:9E:93:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd8caa2a-8539-35e4-a96f-e382b9b47737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1401:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e5:47:a4:60:b0:cd:6b:3c:38:e7:5e:89:7e:4d:e9:96:c9:
         f8:b1:62:93:4b:c4:d5:91:7d:bc:cd:5b:05:12:b4:b9:f9:fb:
         7f:21:41:69:bf:57:8b:dd:1c:2e:70:95:98:96:cd:84:f4:a7:
         2b:f3:d7:5a:3b:dc:60:91:54:ef:dd:ce:f5:c1:24:2a:d4:81:
         3b:8e:55:aa:7b:12:4b:80:c3:ef:14:3a:7d:2b:ed:97:00:d1:
         7b:d2:9b:c9:e7:71:69:f2:6d:7f:5a:50:34:99:59:b5:71:f0:
         6e:07:65:97:ff:8b:db:cd:52:00:b5:46:19:ec:d6:48:33:87:
         23:0f:f8:1f:f4:02:58:ab:51:03:2e:07:87:b2:55:43:a5:f8:
         e6:54:14:cc:84:ca:f1:81:70:93:4b:13:8a:d0:f7:e8:ab:d1:
         96:cc:8b:af:1d:6f:62:7b:e1:b0:be:a2:b3:34:65:5b:7c:9a:
         c5:22:88:5b:fc:9e:08:c4:46:a4:30:cd:e4:ee:0c:43:c0:ea:
         71:20:ac:2e:91:4c:3d:72:77:0f:59:67:52:09:f3:7d:84:49:
         18:0c:37:d5:df:c1:f9:43:26:7c:d9:6b:e9:6b:c0:a9:3f:fd:
         df:17:01:08:03:5d:64:9a:07:a9:9b:3e:ca:fd:4e:4d:94:3a:
         32:53:54:08
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc/8JvvDBSLDYhi8lgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk
MDE1MTgzN2ItM2MxYS00YzM1LTgzNzMtYjFlNzQ0ZTQ2NTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cR8TCg4DpiwmMYoWGSwNuebGT993sYb7GWR
coBKDQTuc+49SJB/7JKSoRySqHTT2AYj6OYD2CZifAlYJJ1xUrC6na74O+r41OJg
N8dgx23o4QEq1tzb6uKoKihp2GrVlEkzyS2dZSTbkBPPwnd3fJl0yZqdkaZgLtoc
rBbFSp8M/tTlcsn/pwSSLS0ADwuwcmTPemTSU5gMNcD2kz6HGd3K+tXDAzPUt264
tTLYOjUL171nyk5dRSESaynYuw2t5YgXLvxsW3Mo5F1T6s6GQc9ZQbai8BxRYOwd
a6lzERZgOTQvzx5UG95XGUcXIk5Clb/rJlNfxcL3Z1AHlLdaTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLV6M5MfF2An9DEmxyWMbORInpPoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmQ4Y2FhMmEtODUzOS0z
NWU0LWE5NmYtZTM4MmI5YjQ3NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAQAH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAPlR6RgsM1rPDjnXol+TemWyfixYpNLxNWRfbzNWwUStLn5+38h
QWm/V4vdHC5wlZiWzYT0pyvz11o73GCRVO/dzvXBJCrUgTuOVap7EkuAw+8UOn0r
7ZcA0XvSm8nncWnybX9aUDSZWbVx8G4HZZf/i9vNUgC1Rhns1kgzhyMP+B/0Alir
UQMuB4eyVUOl+OZUFMyEyvGBcJNLE4rQ9+ir0ZbMi68db2J74bC+orM0ZVt8msUi
iFv8ngjERqQwzeTuDEPA6nEgrC6RTD1ydw9ZZ1IJ832ESRgMN9XfwflDJnzZa+lr
wKk//d8XAQgDXWSaB6mbPsr9Tk2UOjJTVAg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:59 2024 by rpki-client on console-fra.rpki-client.org