Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/403edd70-c79d-3b77-8409-53976d4c5076.roa
File:                     403edd70-c79d-3b77-8409-53976d4c5076.roa (raw, json)
Hash identifier:          We5eEzjJcp4792A6yonNELLTAWA8SKctVBENAEkfnZA=
Subject key identifier:   10:91:57:65:62:9F:38:B0:EB:84:A9:9E:AA:65:36:2D:45:B3:75:8D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462EDD2A69E7B13E461BF720
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/403edd70-c79d-3b77-8409-53976d4c5076.roa
Signing time:             Wed 20 Mar 2024 21:07:05 +0000
ROA not before:           Wed 20 Mar 2024 21:07:05 +0000
ROA not after:            Tue 18 Jun 2024 21:07:05 +0000
asID:                     396982
IP address blocks:        2600:1900:4245::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2e:dd:2a:69:e7:b1:3e:46:1b:f7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 21:07:05 2024 GMT
            Not After : Jun 18 21:07:05 2024 GMT
        Subject: CN=38e9ce5b-78ac-42ff-9a65-edc60307c1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:00:98:f2:d0:79:89:76:ed:e0:81:9d:59:
                    d5:ac:da:68:e5:a3:d9:12:44:a0:5e:a1:2a:78:d2:
                    4f:31:07:f5:03:fb:4a:93:f2:93:e7:97:e8:5a:1a:
                    63:67:95:ca:3f:6b:21:65:22:ec:c0:4c:25:4d:7b:
                    a0:c9:5b:e7:45:0b:a3:6a:b3:c2:2c:19:f3:4f:c3:
                    48:be:c7:6d:ac:d0:59:98:ad:32:1b:05:53:83:94:
                    87:a0:7c:a3:53:6f:b7:2b:c9:bf:ec:9f:28:b6:af:
                    a0:0e:4f:90:1a:5a:09:99:2d:d9:92:c7:f2:79:2d:
                    9f:3d:5d:64:fd:4c:88:ea:11:1b:4e:d8:f2:6c:30:
                    0f:ae:88:8d:a0:b1:eb:be:d9:6f:ce:3c:cd:8d:2b:
                    7a:6d:fc:8e:7c:a6:25:f9:67:7b:4d:42:6c:ce:3b:
                    3f:76:a0:7d:4d:48:41:de:22:86:8d:43:3f:1d:36:
                    2d:9c:07:40:71:04:71:c2:d4:ac:b4:34:0a:55:16:
                    30:df:5d:14:31:d4:78:3f:75:11:8c:cb:a9:bc:76:
                    fc:fe:ad:9e:ac:50:55:30:1d:4f:48:47:e5:f4:63:
                    be:88:10:cd:74:e4:aa:f2:f5:29:df:eb:d7:61:1c:
                    76:d2:f6:6a:02:2e:a6:c1:23:ea:5e:12:52:58:78:
                    98:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:91:57:65:62:9F:38:B0:EB:84:A9:9E:AA:65:36:2D:45:B3:75:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/403edd70-c79d-3b77-8409-53976d4c5076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4245::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:50:d5:ea:ed:d2:97:f9:52:e5:bb:08:34:d8:f5:a3:1b:b7:
         11:57:28:bf:db:e5:aa:81:fb:bc:1d:6e:8f:d8:d1:e8:ee:33:
         9c:38:29:5b:ce:17:56:25:d0:81:ab:66:71:a5:25:bb:ad:1b:
         fd:21:94:34:2d:a6:b6:2e:dc:9a:f0:19:88:0d:3e:dd:41:d8:
         84:c5:0b:00:a2:a8:6f:d3:69:13:a2:74:4a:59:26:96:0d:b2:
         4f:09:29:b0:33:a5:0e:85:03:68:2c:e5:3a:7b:f4:7a:18:13:
         a2:3f:00:cd:75:e7:94:60:10:ff:88:bc:03:20:fa:05:2b:e1:
         c7:75:8d:8a:91:8e:2a:ad:dd:3c:ec:a5:c9:da:5a:7f:04:81:
         1c:56:3d:e3:74:cf:09:f3:e1:ac:28:d8:38:59:0c:17:83:f3:
         4c:3a:04:70:4d:e7:02:ef:7f:d9:25:17:10:23:03:16:59:46:
         a2:14:f8:75:0a:78:85:27:ff:61:ac:b6:b0:58:b2:e2:d9:c1:
         35:0c:02:ce:92:c2:96:bd:65:ae:8a:13:42:fa:06:7c:ef:4e:
         7d:36:97:44:75:97:03:15:49:3c:7b:c9:ff:68:ee:28:d5:e4:
         a8:ee:49:b0:3e:66:d1:db:dd:0f:32:54:bf:47:d6:13:37:8f:
         3a:a8:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:07:45 2024 by rpki-client on console-ams.rpki-client.org