Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/b54f9863-0d1c-3492-bffe-413827f91a2c.roa
File:                     b54f9863-0d1c-3492-bffe-413827f91a2c.roa (raw, json)
Hash identifier:          YE0mI5z2S3fhQC3L4G4EOEl4v7Ph6ne6svLjB6TYxpE=
Subject key identifier:   77:31:45:F9:A4:70:29:A2:61:23:56:CF:F6:AB:8B:5B:DE:6B:D4:2A
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F432858456C531B047EACB9242339A340
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/b54f9863-0d1c-3492-bffe-413827f91a2c.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     0
IP address blocks:        2001:504:61::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:1b:04:7e:ac:b9:24:23:39:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=73867b16-8ad1-4a93-b19c-ac208dd2eb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:96:f5:f8:8a:6f:3d:44:b4:07:31:e8:19:
                    a7:5f:8e:a1:9e:d6:6e:9f:37:1b:17:13:32:9e:9f:
                    cd:c6:28:a7:41:5e:8f:4c:da:93:cc:fc:12:02:7d:
                    3a:04:f6:ad:2c:ea:dc:b9:99:8c:b4:50:d1:60:b4:
                    f0:33:54:63:ce:db:c4:20:96:82:ee:82:05:29:70:
                    e3:5c:bd:a0:d6:42:cb:78:08:e1:e8:37:42:b5:c3:
                    fd:77:24:65:04:f5:44:7b:35:d0:aa:e0:87:e4:5c:
                    45:63:ed:ed:82:1c:a5:bc:57:d9:97:55:e0:64:26:
                    79:0f:c7:87:8e:a1:e2:83:76:89:4c:7c:3c:08:11:
                    95:b1:23:b5:52:7b:9d:74:ed:50:27:51:40:80:18:
                    41:da:2a:1f:c0:47:c5:8d:a3:c0:2a:ed:81:ba:d2:
                    40:39:1b:5e:27:1d:82:59:5a:83:3a:1e:49:de:ee:
                    95:74:eb:ff:f0:0b:51:92:dd:f7:96:c7:c1:e9:01:
                    df:3e:ae:fd:b6:c6:ad:d1:a6:34:8e:73:0a:7a:7e:
                    9f:22:3f:b2:bc:85:13:09:a3:4b:b6:b9:af:f3:c8:
                    9e:d8:99:04:b4:8f:40:21:7f:08:8c:4c:49:e4:d8:
                    97:aa:85:35:cd:bb:ba:2e:b9:42:f6:a2:35:77:42:
                    0c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:31:45:F9:A4:70:29:A2:61:23:56:CF:F6:AB:8B:5B:DE:6B:D4:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/b54f9863-0d1c-3492-bffe-413827f91a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:61::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:a9:cf:b7:4f:e3:82:33:d2:8a:98:05:83:55:89:8a:5f:b8:
         6c:ab:56:a9:2c:2d:e6:9e:9a:46:fa:b3:8e:68:79:9e:fb:a0:
         ef:c6:93:82:59:dd:a9:29:e8:90:1b:0d:ab:3c:45:cc:cc:a8:
         ab:b0:67:e2:9b:e5:9c:d2:75:d2:ee:7a:3d:86:2e:a2:13:55:
         66:d1:62:23:e0:3e:4a:d2:6a:3d:69:f7:49:bc:7a:ba:ae:46:
         1e:33:62:8e:48:b5:6e:fe:91:68:3a:89:90:93:5b:bf:3e:74:
         ba:fe:32:51:7a:50:96:2d:7a:b6:df:ef:ca:dd:37:14:6b:d7:
         a7:37:52:18:2a:0a:d3:60:03:de:c9:f2:4c:98:16:72:50:82:
         fe:c2:0d:b0:31:a8:5c:45:6a:46:af:d4:ab:4d:a4:ae:d7:3f:
         d4:ab:75:85:b7:34:f5:46:ee:77:cd:4e:ea:40:74:27:c6:9e:
         6d:f4:20:86:dd:80:ef:6f:c0:6e:6f:10:29:1f:80:aa:5b:62:
         6f:57:54:c6:51:e9:20:6c:e5:37:f2:67:7a:08:05:76:37:dc:
         a1:a2:57:1e:55:c0:6e:83:b6:d1:59:13:b5:d5:77:8e:40:44:
         a8:63:b7:c2:f5:0a:9a:d9:34:22:56:bf:2f:e2:f8:b4:eb:53:
         c2:d1:3c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:11:45 2024 by rpki-client on console-ams.rpki-client.org