Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa
File:                     8cad8b2d-6269-31fa-a87b-fc60824d517b.roa (raw, json)
Hash identifier:          ctis3vc4VP++NXBdqugkPBZdM3k7wit3Xed+NlxRDa0=
Subject key identifier:   31:BA:B3:AA:C9:3A:91:C5:40:33:A7:B8:E4:EC:37:85:AF:D3:11:CE
Certificate issuer:       /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial:       010D0C9F43285845E729195FA5628F7B4A1DA380
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     3756
IP address blocks:        2620:f:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:19:5f:a5:62:8f:7b:4a:1d:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=637ed482-4527-4d29-94eb-357643f4b481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:15:fb:e6:59:8e:fe:90:3e:03:59:ce:91:1f:
                    bf:06:0e:04:39:36:d7:b3:fc:5c:ad:cf:6d:f5:4e:
                    4e:13:9a:02:43:80:05:06:9a:14:2f:e6:c2:de:3d:
                    4e:d1:80:90:b2:45:c3:91:18:fd:ad:fa:52:2a:9b:
                    0c:21:45:f7:88:e1:0a:f6:a0:93:93:04:00:ca:fc:
                    e4:b5:b6:53:c5:01:f9:93:04:0f:80:eb:4f:a1:9d:
                    04:74:38:97:4b:25:c8:a6:95:30:81:67:0d:db:5e:
                    cc:23:02:47:79:76:ea:41:82:49:7b:17:39:60:7e:
                    e9:97:6b:ef:28:62:98:e7:0c:d0:3e:8a:be:f7:20:
                    21:50:33:89:54:33:46:95:d0:cb:9d:8e:be:7d:60:
                    75:43:19:d7:45:9e:4e:61:c5:c9:65:3d:4f:32:0f:
                    b7:52:b3:6f:f4:6b:ca:65:f7:e1:6c:5e:f9:4f:c6:
                    8f:d0:e4:ba:00:47:0c:d7:37:f9:4a:90:14:0c:80:
                    13:34:96:53:4f:97:26:4f:3c:a2:d4:dc:2c:cd:82:
                    af:07:de:19:36:ce:1c:3b:67:51:75:eb:28:e3:a3:
                    f0:8e:4c:c8:75:10:98:0b:d2:a5:be:76:6f:7e:33:
                    2e:3b:55:d4:0d:0f:4f:30:9f:ff:12:15:65:1c:cc:
                    a2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BA:B3:AA:C9:3A:91:C5:40:33:A7:B8:E4:EC:37:85:AF:D3:11:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:3d:7c:16:0e:33:b7:86:1c:0d:ea:f1:79:58:4e:1e:a4:fe:
         5d:bf:78:4f:2f:2e:93:ce:c1:4b:ea:8e:f5:31:84:58:44:53:
         b7:17:c8:65:cc:3c:f9:13:2d:ac:9f:0a:06:e6:4d:17:ec:f3:
         d5:b0:a8:29:bf:b3:ce:ab:87:a6:2e:2c:f7:19:e6:ea:50:09:
         c7:2a:22:3f:60:c2:6e:68:9b:12:64:6e:70:e0:e8:36:04:ec:
         3b:f6:57:47:12:9b:cc:fb:70:4b:29:6a:01:39:8b:fa:e3:64:
         ab:57:b7:20:d9:c7:91:9a:14:d6:fb:88:30:54:15:92:8d:04:
         c2:eb:ad:c7:e7:19:76:4c:19:80:24:fa:98:9b:b1:66:86:3d:
         d0:19:02:a8:90:2e:35:b3:28:2d:45:f1:7e:ea:ab:de:89:a8:
         c7:30:d2:aa:d2:2f:f4:9f:92:26:ef:20:e9:12:8a:fe:ae:68:
         e1:21:48:37:e7:2d:9f:67:42:f9:4d:aa:d7:dc:9f:b0:d3:15:
         32:ac:b1:31:66:b4:52:7d:29:fd:a5:e8:bd:e7:39:ca:69:88:
         af:55:39:f1:c4:35:f6:2c:5d:8a:21:5e:e0:6c:5c:ff:43:b2:
         21:58:b4:cb:23:02:61:8f:e9:18:c1:5f:73:0d:fe:8f:0f:98:
         f4:a8:8a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:57:20 2024 by rpki-client on console-fra.rpki-client.org