Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a302ed89-60b4-3809-bb36-fd155d11fb9f.roa
File:                     a302ed89-60b4-3809-bb36-fd155d11fb9f.roa (raw, json)
Hash identifier:          fD34dCY4oBakphNK39v0enaHZYhY9eLH0nAyKdsiPZo=
Subject key identifier:   D8:D1:2C:70:A2:D7:6E:A6:66:40:12:F5:92:67:B1:43:1B:6F:05:2D
Certificate issuer:       /CN=b32217e1-2473-49a5-919e-08e1896c5019
Certificate serial:       010D0C9F432858453B77F48C784C871840DD5DA0
Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a302ed89-60b4-3809-bb36-fd155d11fb9f.roa
Signing time:             Sun 17 Mar 2024 01:00:26 +0000
ROA not before:           Sun 17 Mar 2024 01:00:26 +0000
ROA not after:            Sat 15 Jun 2024 01:00:26 +0000
asID:                     22191
IP address blocks:        2604:1dc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:77:f4:8c:78:4c:87:18:40:dd:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019
        Validity
            Not Before: Mar 17 01:00:26 2024 GMT
            Not After : Jun 15 01:00:26 2024 GMT
        Subject: CN=0881f4f8-9a94-44ad-9f55-0221e991b48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:42:71:ac:7e:30:53:cd:2d:4f:20:c6:dc:
                    9a:ec:19:89:4d:ef:76:f1:6b:44:59:f1:8c:27:18:
                    bb:33:4b:52:ed:ca:af:8d:bc:8e:df:42:31:a0:ed:
                    99:2d:f1:f8:db:bf:15:6b:c4:27:fa:60:45:b1:48:
                    ce:20:bc:cd:01:0b:10:c0:30:9b:38:8e:1d:ed:26:
                    69:17:b4:0a:c3:0c:68:14:d2:b2:2e:6a:ff:48:55:
                    6c:81:cd:71:74:62:d5:6a:31:81:be:24:fc:9d:2e:
                    16:49:17:6a:a8:c0:85:b4:ac:d5:74:c2:0b:dd:5f:
                    2b:01:2f:22:8c:cd:01:87:98:37:1f:05:bb:da:64:
                    63:91:7a:50:bf:c9:5c:66:db:11:51:10:73:14:64:
                    72:90:a5:d4:7f:69:a9:7d:01:d0:16:59:b4:12:b3:
                    b2:df:a3:2f:d0:10:2f:4a:9e:97:ca:9e:09:6a:60:
                    f0:c4:78:6e:a3:e1:ea:67:fa:de:41:0b:fa:b3:1f:
                    53:b6:31:34:82:aa:58:6d:72:8b:ee:e7:a2:94:15:
                    fa:3e:88:fd:31:d0:ff:a9:f0:53:76:b0:67:85:85:
                    11:fc:6f:33:70:cd:44:c6:a9:cd:80:bc:52:ba:4e:
                    4e:d6:c0:09:e7:67:ab:32:37:c9:53:14:53:f0:99:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D1:2C:70:A2:D7:6E:A6:66:40:12:F5:92:67:B1:43:1B:6F:05:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a302ed89-60b4-3809-bb36-fd155d11fb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl

            X509v3 Authority Key Identifier:
                keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:5a:f4:40:86:35:db:61:32:a7:6b:04:3f:4f:f7:33:1e:7e:
         5b:dc:ce:e2:cb:8d:8d:ba:a5:40:67:64:59:ad:6e:c2:60:78:
         c4:e6:d0:3f:ec:ce:76:3a:e8:41:61:d2:ff:09:ff:7d:d5:64:
         26:dc:f6:e9:16:86:dd:8d:3c:68:bf:5d:b4:15:09:14:40:a5:
         2b:c3:4f:54:1d:c5:6b:b0:9e:b9:a2:8a:fd:6d:d6:0b:b9:11:
         10:41:86:e8:0a:de:a3:6c:4d:bd:71:ef:12:f1:b6:d8:83:91:
         ff:cb:97:07:ee:de:9f:a4:ee:ed:f8:66:23:ab:e5:16:b8:03:
         99:85:7b:cd:d8:aa:d8:ee:c5:18:a6:36:72:83:c4:35:b0:30:
         be:7f:0e:c1:2b:ad:70:8b:89:95:2c:d7:d9:52:7c:2e:bf:31:
         b0:05:4f:6d:9e:a6:d3:01:39:b3:f3:c7:f2:20:da:28:07:12:
         88:38:e5:69:3a:20:c1:dd:62:a7:13:02:3a:23:52:5f:55:2a:
         10:bc:ac:27:f2:d3:02:2f:d4:b3:bd:e0:1d:d6:94:e0:96:f8:
         a8:53:1d:9f:41:e9:1c:a4:15:a0:4c:a7:dd:c2:10:17:64:d2:
         38:0d:1f:d0:00:4d:4a:63:6f:d1:bc:58:2a:00:b5:f5:38:8c:
         43:28:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 01:56:49 2024 by rpki-client on console-fra.rpki-client.org