Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/ebee0977-640d-3d99-96dd-ce85b00ed859.roa
File:                     ebee0977-640d-3d99-96dd-ce85b00ed859.roa (raw, json)
Hash identifier:          PtESNWN7+PcffClMNCzJBYi0DPxGKOveRU52bs4RTzU=
Subject key identifier:   5F:2A:00:C2:D3:5E:A0:AD:8D:13:DB:31:4D:F0:3C:12:3F:8A:BC:B9
Certificate issuer:       /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial:       010D0C9F43285845ECBE773A54813CE2A271A000
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/ebee0977-640d-3d99-96dd-ce85b00ed859.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     29169
IP address blocks:        2604:3400:ca01::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:77:3a:54:81:3c:e2:a2:71:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=78d13505-2299-441b-90b6-bf1028cfcb7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:36:fb:e4:df:a9:9b:2a:3f:71:04:b2:63:
                    3b:12:1c:10:7e:d5:91:18:3f:aa:7d:8e:95:4e:b6:
                    fa:6b:2e:36:2d:bd:84:25:5e:cc:c7:df:7b:c9:d9:
                    9e:43:7b:bf:98:24:d2:d2:df:60:cb:6b:8e:ae:00:
                    9f:85:4d:73:aa:1d:48:96:2d:11:8c:9b:6a:40:33:
                    41:ab:6f:7a:ba:cb:f1:5e:a8:9d:fb:76:98:e2:d3:
                    1e:dd:80:fa:b7:70:1f:e5:8e:92:a0:37:80:50:c3:
                    89:de:cc:e1:b9:34:1f:5b:65:2d:84:b0:63:bd:cf:
                    56:01:a3:61:86:27:5d:0e:00:e8:be:f9:90:b8:ea:
                    e3:86:4e:97:d8:44:18:f3:4c:66:95:ba:25:48:d8:
                    31:24:f9:e6:88:ac:54:1f:0d:e2:54:79:4b:d3:04:
                    b1:4d:91:e3:a9:af:40:84:6c:cb:0b:50:02:93:2c:
                    9a:0f:a1:4d:48:f2:6b:7f:bd:9f:47:72:a9:ed:9d:
                    e9:23:14:fb:05:78:ba:07:71:2d:60:18:3d:08:ce:
                    32:61:7b:77:a6:b6:ea:d0:48:e2:c5:96:14:3e:03:
                    2a:91:2b:75:f0:3a:ba:2c:51:e7:91:9c:06:0b:1f:
                    4c:32:a4:8f:cf:c8:62:81:01:f4:ef:17:56:ae:80:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2A:00:C2:D3:5E:A0:AD:8D:13:DB:31:4D:F0:3C:12:3F:8A:BC:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/ebee0977-640d-3d99-96dd-ce85b00ed859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3400:ca01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:0e:cd:e4:3a:fb:d4:79:8d:d9:4d:26:b5:01:96:8f:b0:3a:
         96:10:06:f4:6f:34:46:86:dc:f6:86:4a:77:93:78:b6:d8:02:
         ac:44:29:f4:73:83:ea:eb:ae:05:ef:5e:b5:4d:df:7c:0d:d0:
         4b:51:af:73:12:c4:2c:40:08:53:c3:2b:7f:b5:61:6b:71:c7:
         d6:8b:63:42:c8:52:58:09:05:35:81:2e:02:6e:ce:5a:e8:02:
         0b:50:b7:c8:9c:ea:e5:8b:9d:a7:6c:34:c5:57:81:b4:9e:a1:
         76:d1:65:fe:e2:a3:4b:35:ff:dc:ce:5b:fe:07:ac:07:c3:69:
         67:92:a5:4d:73:3c:ef:da:e3:5a:e8:e2:5b:3f:69:7b:a4:ec:
         3c:75:c1:f7:59:65:be:ee:25:29:4e:8a:78:50:dc:07:43:85:
         60:2c:bb:30:26:3a:60:52:10:5c:cd:a5:e4:20:15:0f:be:21:
         7a:fd:b6:56:d2:f2:4e:6d:aa:fa:de:2d:61:c0:91:bc:b3:86:
         d9:5e:af:11:29:83:94:fe:23:c1:60:07:72:22:c5:42:71:ef:
         89:d7:16:22:36:98:bb:9c:00:f9:d2:dd:34:7d:0b:fc:89:58:
         e4:d3:d0:b8:46:f9:ec:64:1a:66:6f:fa:8f:f1:c3:85:b8:10:
         6a:e0:6e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:23:17 2024 by rpki-client on console-ams.rpki-client.org