Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b452aca1-6e6e-3d87-b658-e44b8b3b0e23.roa
File:                     b452aca1-6e6e-3d87-b658-e44b8b3b0e23.roa (raw, json)
Hash identifier:          KTy4kAzwr/LeRhFaHvPTztqu5LWWxz2gD0EJQj8Z+GM=
Subject key identifier:   B9:8B:27:D0:C5:F8:49:82:9B:AB:42:B5:A9:BB:1A:78:1D:F8:84:D6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2ACAF1B035095846EEBF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b452aca1-6e6e-3d87-b658-e44b8b3b0e23.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        2600:40ff:fffb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:ca:f1:b0:35:09:58:46:ee:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=32d76f01-e0f3-4d37-a37d-72a96dc44ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d4:57:77:11:90:75:ae:3e:a4:fc:86:2e:30:
                    f5:c3:93:9c:d8:7b:af:8a:f3:fa:92:c2:7b:e5:33:
                    b1:2e:74:34:e1:3e:a3:90:28:04:ca:d8:1a:bf:e4:
                    57:93:29:d9:4e:06:d8:9a:98:20:ac:1c:de:43:e3:
                    03:77:41:5a:4e:89:0d:df:8a:1b:1f:34:da:8a:2a:
                    f6:a7:c8:ec:2f:ef:db:78:d5:3a:f8:44:09:6d:2d:
                    f8:17:27:9a:fe:18:f5:9c:33:77:cd:0d:73:0f:22:
                    aa:cb:5e:d5:81:06:b2:7d:0e:82:05:39:1e:b6:fa:
                    ba:f2:a7:3f:cc:d4:37:a0:ce:46:79:92:1e:8c:f7:
                    65:d3:58:59:f1:51:47:8d:5b:2b:d3:d4:4e:51:1e:
                    d3:8d:83:61:c3:34:54:65:20:84:23:0f:24:bf:d3:
                    60:27:62:60:6a:a9:20:3d:08:70:d8:8a:b7:54:9f:
                    71:b1:ec:b8:8b:c7:be:90:83:41:d5:e0:b7:09:e9:
                    3f:78:1a:0a:d4:12:5c:b2:6d:00:f2:2f:27:58:34:
                    b2:b3:11:ce:d4:d4:06:45:15:85:78:a8:44:60:2e:
                    6b:05:5f:fb:8f:0f:ea:53:c4:1c:0d:c4:08:59:85:
                    8a:e1:24:75:38:06:73:77:97:ea:cb:57:84:de:22:
                    14:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8B:27:D0:C5:F8:49:82:9B:AB:42:B5:A9:BB:1A:78:1D:F8:84:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b452aca1-6e6e-3d87-b658-e44b8b3b0e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:40ff:fffb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:af:a4:2d:a7:db:82:0b:e1:be:78:03:77:ab:7f:fc:de:2b:
         c4:cb:8d:50:a1:2c:51:a2:4a:ca:37:dc:2b:82:ca:6a:c3:db:
         83:7b:39:03:02:a3:85:be:8a:a1:19:30:cc:de:0c:ae:0f:b3:
         c4:44:e4:5f:db:c4:7d:f9:5f:e1:38:85:87:9b:5a:a8:6d:60:
         82:47:41:c9:6e:d0:db:53:e8:23:8d:1c:9e:ed:8f:48:fa:36:
         ab:31:20:0f:ba:7c:65:b9:1b:77:78:53:ad:46:77:35:63:6c:
         04:d2:85:e5:21:51:bf:a6:34:9b:41:2d:77:77:ae:03:2a:b6:
         3a:c7:7a:67:a6:27:47:1d:62:ce:32:53:98:af:0c:34:84:10:
         b2:ae:7a:4c:53:9c:38:fa:dc:d4:da:5d:f9:80:50:3a:4c:b5:
         65:c3:bf:7e:c0:4d:79:67:21:c9:ac:12:ac:86:25:ca:68:c9:
         b1:31:7a:52:3a:07:df:7b:d6:05:6d:87:9a:27:f9:06:62:17:
         15:04:87:44:d5:95:3a:91:8c:0f:5b:8d:e6:6e:ef:46:b3:67:
         a6:7e:65:e7:8a:d6:83:b5:43:0f:53:16:fb:70:66:8b:35:96:
         45:43:48:af:b6:ff:63:9b:a4:a7:81:93:9e:95:72:2e:fa:e8:
         ea:ba:cd:36
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET+KsrxsDUJWEbuvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk
MzJkNzZmMDEtZTBmMy00ZDM3LWEzN2QtNzJhOTZkYzQ0Y2U1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9RXdxGQda4+pPyGLjD1w5Oc2HuvivP6ksJ7
5TOxLnQ04T6jkCgEytgav+RXkynZTgbYmpggrBzeQ+MDd0FaTokN34obHzTaiir2
p8jsL+/beNU6+EQJbS34Fyea/hj1nDN3zQ1zDyKqy17VgQayfQ6CBTketvq68qc/
zNQ3oM5GeZIejPdl01hZ8VFHjVsr09ROUR7TjYNhwzRUZSCEIw8kv9NgJ2Jgaqkg
PQhw2Iq3VJ9xsey4i8e+kINB1eC3Cek/eBoK1BJcsm0A8i8nWDSysxHO1NQGRRWF
eKhEYC5rBV/7jw/qU8QcDcQIWYWK4SR1OAZzd5fqy1eE3iIU8QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLmLJ9DF+EmCm6tCtam7Gngd+ITWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjQ1MmFjYTEtNmU2ZS0z
ZDg3LWI2NTgtZTQ0YjhiM2IwZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBA///7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGSvpC2n24IL4b54A3erf/zeK8TLjVChLFGiSso33CuCymrD24N7
OQMCo4W+iqEZMMzeDK4Ps8RE5F/bxH35X+E4hYebWqhtYIJHQclu0NtT6CONHJ7t
j0j6NqsxIA+6fGW5G3d4U61GdzVjbATSheUhUb+mNJtBLXd3rgMqtjrHememJ0cd
Ys4yU5ivDDSEELKuekxTnDj63NTaXfmAUDpMtWXDv37ATXlnIcmsEqyGJcpoybEx
elI6B9971gVth5on+QZiFxUEh0TVlTqRjA9bjeZu70azZ6Z+ZeeK1oO1Qw9TFvtw
Zos1lkVDSK+2/2ObpKeBk56Vci766Oq6zTY=
-----END CERTIFICATE-----
Generated at Thu May 9 15:35:59 2024 by rpki-client on console-fra.rpki-client.org