Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/5a43cba6-014f-340f-bcdd-067f86dc02be.roa
File:                     5a43cba6-014f-340f-bcdd-067f86dc02be.roa (raw, json)
Hash identifier:          GpdAsJmarYTk62mLwbkkJoNX1P5n8IT6XWVagWXmks8=
Subject key identifier:   DA:96:74:2E:FE:B7:E4:ED:B7:C2:68:EF:84:E2:A8:4B:1E:23:43:EA
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F432858459368BC664F7E63B91E96A480
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/5a43cba6-014f-340f-bcdd-067f86dc02be.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     399728
IP address blocks:        2620:98:e002::/48 maxlen: 48
                          2620:98:e00b::/48 maxlen: 48
                          2620:98:e006::/48 maxlen: 48
                          2620:98:e009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:bc:66:4f:7e:63:b9:1e:96:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=281cbcd3-9e0e-4c8f-9ab8-360d78b5715d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7a:e8:bc:d6:c4:32:fe:58:46:4a:29:c0:d2:
                    83:21:db:96:82:6f:24:e0:6a:2f:af:b1:47:1b:6b:
                    86:e0:1b:d3:2b:66:71:08:68:22:23:bf:ea:d8:a9:
                    be:34:ac:e0:b1:4f:da:70:00:38:46:16:a4:18:65:
                    ce:16:0d:91:9f:32:e8:4c:56:2b:59:1d:55:77:ae:
                    ab:73:de:29:9e:06:a6:bc:24:8b:05:fc:1b:df:a9:
                    78:be:77:bb:55:5b:cc:83:59:ad:8a:15:f4:f0:07:
                    45:9a:e8:37:f1:a0:81:0e:c0:e0:e8:5e:8c:81:55:
                    b6:1c:da:43:8e:66:be:31:b1:4b:bb:30:3e:aa:b1:
                    d5:b5:ef:ae:70:12:a0:6f:f3:6f:d2:75:c3:43:b6:
                    da:06:d5:d0:bf:b6:61:d2:8a:db:bd:a8:9f:b1:2c:
                    bb:0a:7f:96:14:f4:ce:75:c5:d0:c0:d3:ed:78:c7:
                    ba:3b:ef:37:12:ac:f9:5c:67:eb:a9:d2:30:ed:ef:
                    fe:28:f7:71:ca:94:e0:79:de:ac:a0:bd:7f:50:49:
                    98:ec:67:76:57:b8:70:49:d2:09:2d:97:80:c8:ee:
                    ea:56:5c:8d:bf:6d:1b:88:9b:eb:e8:71:1b:ec:a6:
                    72:67:3f:44:cd:fe:b9:f2:eb:cb:32:61:0b:ca:26:
                    a1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:96:74:2E:FE:B7:E4:ED:B7:C2:68:EF:84:E2:A8:4B:1E:23:43:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/5a43cba6-014f-340f-bcdd-067f86dc02be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e002::/48
                  2620:98:e006::/48
                  2620:98:e009::/48
                  2620:98:e00b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b8:c0:a7:ee:a5:53:f1:8a:24:d9:83:a0:ac:aa:eb:3b:8a:
         a0:44:36:2d:eb:fa:b4:b9:90:7e:73:bc:f0:a7:55:b4:c2:5d:
         f5:c2:13:03:13:a3:57:16:80:cc:6b:1c:e7:95:cc:d1:27:1d:
         43:dc:9f:ff:7f:a1:32:f9:27:84:07:a2:7f:72:05:05:44:01:
         3a:d2:2b:07:0c:bc:6c:13:b8:ca:4c:c3:ed:85:42:42:c3:d9:
         e1:31:73:25:e4:05:65:20:bf:92:40:51:d2:e3:bc:36:3a:99:
         fc:99:87:04:c9:47:c2:e6:aa:24:73:bd:33:f7:b2:27:cf:cb:
         97:ea:3d:8c:f0:e6:47:76:93:54:8f:8c:ea:c1:4b:7c:40:8e:
         69:76:98:11:5d:90:c1:16:31:07:01:d5:91:20:3e:69:5b:bf:
         9c:ce:f5:aa:32:aa:c0:bf:4f:d1:26:7d:3b:41:21:8a:43:ce:
         50:97:c4:34:74:c7:8c:bd:75:8f:ce:77:fc:06:dc:ec:28:70:
         48:74:76:27:30:41:c7:f3:3f:e5:17:3c:f9:cb:eb:cc:a0:bb:
         81:52:3d:d1:dc:98:de:64:76:ec:fc:c3:41:f4:df:5f:1d:a1:
         fe:19:4f:dc:6f:af:14:c7:bc:41:8f:9a:67:dc:c0:56:9a:b6:
         64:04:bf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:53:29 2024 by rpki-client on console-ams.rpki-client.org