Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa
File:                     8a673006-55a5-3418-963c-f9a5b7571cea.roa (raw, json)
Hash identifier:          p8Zd1wgqaG2xvfI7wONKVkaWZEj255D1FpvQNE7miqc=
Subject key identifier:   10:5A:AE:B2:E7:EB:65:A1:86:ED:13:A7:F2:53:9F:DC:08:C3:64:6D
Certificate issuer:       /CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc
Certificate serial:       010D0C9F43285845EF892D1E53927E55B5ABD550
Authority key identifier: 43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     393869
IP address blocks:        2620:11f:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:2d:1e:53:92:7e:55:b5:ab:d5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=e5b905bf-a2ee-4e2b-8625-fc9768d48534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a1:4d:2c:09:fb:48:b7:dc:ec:f6:d2:38:c6:
                    75:ba:dd:ea:2b:e3:14:12:b8:6b:70:c6:66:8b:c9:
                    1f:59:5e:c9:b0:c1:cd:aa:b3:d3:d0:5e:6b:83:b4:
                    34:9b:e9:3a:91:c2:5e:79:8d:13:4c:0f:e0:51:57:
                    59:6d:5f:f5:44:ed:8f:3d:dc:11:da:09:49:08:a7:
                    49:3f:9d:08:24:d1:78:b6:0f:88:1c:e3:a9:3b:f1:
                    cc:59:39:96:cb:97:b0:78:19:7d:4b:89:e0:77:21:
                    70:32:c1:e3:c1:30:e0:93:d2:6d:c8:37:99:b1:71:
                    ec:ac:39:e6:f4:30:b4:b5:58:8c:32:0f:04:40:08:
                    13:4c:52:f2:89:7f:b7:24:57:6e:d6:f1:8a:21:9a:
                    7d:40:7a:83:b2:13:e6:ec:fd:3a:34:2b:82:f3:8b:
                    1a:3e:4a:61:9b:6f:1f:06:23:27:03:9b:8a:62:2e:
                    84:e5:6b:ab:1c:11:e5:1d:c1:b0:ce:9a:c7:82:08:
                    16:3c:16:78:73:f2:d3:88:19:2b:94:b8:a3:86:8e:
                    e2:e6:b9:10:b6:4a:7c:e7:10:49:fd:a8:95:28:8a:
                    48:5a:8a:86:c3:80:db:a8:69:af:3f:51:f0:49:38:
                    b5:01:01:9f:6c:8d:0a:0f:a6:a6:2f:39:0f:f6:53:
                    39:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5A:AE:B2:E7:EB:65:A1:86:ED:13:A7:F2:53:9F:DC:08:C3:64:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl

            X509v3 Authority Key Identifier:
                keyid:43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:1a:28:88:58:90:bb:61:30:77:a9:f2:21:20:96:d1:21:59:
         48:6b:70:4e:fc:b9:9a:9d:8d:cf:2d:7e:5d:00:d6:26:8f:bb:
         ed:31:17:b6:68:19:71:3b:3d:2f:d5:18:82:51:c3:43:c7:77:
         84:c9:d7:2d:87:8d:56:01:2a:34:20:c6:b5:bc:1a:6a:22:32:
         25:ec:f7:39:b2:5b:fb:22:44:30:70:0a:13:ff:25:da:f7:76:
         75:7a:66:93:82:f5:fd:3a:ef:23:97:fa:65:b8:76:a5:ff:cd:
         7c:67:05:1e:9c:1c:aa:d5:4e:5c:d5:4d:b1:81:d7:6e:45:56:
         40:44:13:3b:ce:84:7f:b6:44:79:cb:46:73:8e:74:7d:b8:1e:
         ec:bb:21:e5:41:cd:cd:9e:5d:4f:82:72:96:83:9c:63:f8:df:
         6e:15:75:ca:8b:6e:87:1d:ba:98:dd:65:86:56:ed:2b:0c:5b:
         08:6a:f0:a5:a3:de:88:02:1a:e7:19:95:b8:40:fb:05:5f:db:
         b0:53:eb:cb:c6:80:ff:2c:ac:70:16:9d:49:51:af:89:04:3b:
         b3:d3:e3:d4:48:ac:e3:81:5f:9b:6c:63:de:54:87:70:9f:ba:
         6d:5b:6b:75:de:29:3f:21:5c:f7:41:c2:5b:e2:7d:fc:a2:9c:
         f4:ca:0e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 04:36:58 2024 by rpki-client on console-fra.rpki-client.org