Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa
File:                     8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa (raw, json)
Hash identifier:          YMRUVKJA8o40CXnJIPFm1SkUixDi7qVuHS2ohvnuhw4=
Subject key identifier:   1D:1B:30:F4:9C:7B:1E:A3:92:47:54:38:2A:1A:8F:A0:60:08:04:7E
Certificate issuer:       /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial:       010D0C9F43285845E45E6A6D270732DAF6DA3DC0
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     3755
IP address blocks:        2620:f:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:6a:6d:27:07:32:da:f6:da:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=0b250d1c-4fa3-4771-bcbe-5e05d2e86fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:d3:e6:b0:db:0f:7f:0a:37:fb:03:aa:f7:
                    43:01:83:25:5e:93:dd:e8:7f:3f:a2:0b:7e:a4:7c:
                    79:66:ff:be:25:23:3b:1a:d0:f3:82:9d:b7:6a:9f:
                    8d:92:ad:90:c6:fd:9c:e2:35:c7:e3:22:c2:0b:0c:
                    5e:ef:33:83:15:ea:e2:1f:21:93:9c:49:d9:c3:e2:
                    1e:f9:7f:d0:a3:a1:d8:d2:b6:3f:67:24:7c:43:7b:
                    e5:3e:ce:df:28:08:e9:b6:dc:80:a1:aa:d0:97:38:
                    03:c2:28:49:45:b3:ee:ea:71:ce:95:7e:b1:84:e5:
                    62:49:ea:98:08:25:69:df:44:a3:7c:48:fd:9a:0a:
                    25:68:b4:7e:14:a0:f7:2d:b4:8c:c4:8d:cd:d5:02:
                    4b:c3:fe:8c:bd:ec:42:98:43:47:b9:4a:fa:78:d6:
                    6f:5c:38:ef:8a:65:4e:33:1b:df:06:ac:93:51:46:
                    4b:bf:6c:41:6b:9b:42:fd:ea:1c:56:5f:92:34:c6:
                    f5:d8:8a:0a:c0:41:e7:b7:a2:36:47:c8:7e:d6:76:
                    7b:e5:a5:eb:2a:3e:19:c5:ad:f5:3d:e5:48:0a:c8:
                    da:5e:ae:b4:d2:10:ba:10:ad:77:34:88:df:ba:6b:
                    d7:96:c7:67:b3:36:c9:d0:c3:78:b0:71:d1:ec:f4:
                    14:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1B:30:F4:9C:7B:1E:A3:92:47:54:38:2A:1A:8F:A0:60:08:04:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:29:dc:b9:d7:59:17:64:c7:6b:e4:79:77:ef:ea:c0:fb:0d:
         d2:95:f3:89:c4:e3:9b:2c:bd:71:9a:a0:df:8c:1b:a4:4b:de:
         c7:71:d8:0c:03:8b:56:29:36:ec:b7:66:4e:69:27:6e:f6:8b:
         0e:24:d0:76:c1:d8:33:28:44:89:be:8e:02:43:46:7c:7a:5c:
         76:78:d5:6e:db:f2:97:bf:8b:24:cb:c7:c2:c6:45:a4:49:a0:
         e5:30:d0:1d:50:fe:7f:15:a9:3e:05:f1:ef:74:de:c8:6e:38:
         4c:a5:27:cf:f3:ec:ad:6f:b7:3a:60:01:83:a3:fd:ab:14:4c:
         29:56:de:1f:2b:29:17:91:a7:28:97:0a:c2:55:98:9a:5c:95:
         d8:57:fe:30:51:a3:08:e0:ec:2b:ad:82:ec:4c:c7:62:35:80:
         a6:21:b3:9b:ea:45:7d:0d:6b:01:8b:fc:94:ae:ad:7c:ae:25:
         2c:dd:96:e0:89:3c:23:f7:df:72:67:58:78:01:96:97:22:88:
         a2:e7:ea:e7:b1:fd:30:b3:25:71:6f:52:f4:4b:35:24:ff:80:
         4f:e3:e4:df:68:7c:f3:f4:11:4e:66:7d:7e:04:cf:d6:45:0b:
         8d:b6:98:39:c6:4a:ef:5d:ba:bb:d2:3d:f6:fe:bf:bd:9f:32:
         57:27:09:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:50 2024 by rpki-client on console-ams.rpki-client.org