Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/3ae689a3-4010-35e4-bd30-a86ab7601db2.roa
File:                     3ae689a3-4010-35e4-bd30-a86ab7601db2.roa (raw, json)
Hash identifier:          aiZ07kJsKZztmZ3aoVIs6kI1rmhxrWqhkQsDRLzxymU=
Subject key identifier:   72:37:C8:8B:9B:3C:88:D1:0B:B8:5C:23:04:58:43:08:4C:4C:77:9E
Certificate issuer:       /CN=6fd900fb-7b81-4099-bb11-824fdecd0a86
Certificate serial:       010D0C9F43285845496D5E2CDD5A554C7413D500
Authority key identifier: 3B:29:4A:9B:4E:89:0C:58:09:38:E8:26:5A:18:EE:48:9E:18:0B:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/3ae689a3-4010-35e4-bd30-a86ab7601db2.roa
Signing time:             Fri 22 Mar 2024 01:00:24 +0000
ROA not before:           Fri 22 Mar 2024 01:00:24 +0000
ROA not after:            Thu 20 Jun 2024 01:00:24 +0000
asID:                     16950
IP address blocks:        2620:c0:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/6fd900fb-7b81-4099-bb11-824fdecd0a86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/6fd900fb-7b81-4099-bb11-824fdecd0a86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:6d:5e:2c:dd:5a:55:4c:74:13:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd900fb-7b81-4099-bb11-824fdecd0a86
        Validity
            Not Before: Mar 22 01:00:24 2024 GMT
            Not After : Jun 20 01:00:24 2024 GMT
        Subject: CN=700a5b16-f74a-4c43-836b-4432835d44b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:73:be:81:49:26:43:37:d7:96:0f:b4:6e:f9:
                    30:62:fd:13:ae:a3:92:20:9e:c2:f5:2a:3a:2a:f7:
                    d4:38:7b:85:95:0f:c5:0a:ed:9e:ca:b9:8b:3a:85:
                    03:03:4c:ad:a0:12:ba:d9:76:b6:8a:a4:07:d6:d0:
                    4e:e8:fe:33:e9:e0:17:0f:b9:a5:c6:d1:97:a8:de:
                    f0:7f:2e:6f:15:47:8d:bc:52:9e:09:f1:0b:b1:ce:
                    a2:34:fc:af:92:24:c2:bd:8f:3e:2b:65:f8:80:2a:
                    0e:ad:48:d0:a1:2b:12:d8:f6:2a:bf:07:24:c6:2a:
                    fb:40:bb:36:1a:55:4a:a6:3f:9d:03:00:5d:e4:69:
                    c3:02:1f:53:9d:cf:62:27:51:34:d4:06:c2:ca:aa:
                    b6:c9:da:b1:9d:6e:af:54:e1:2f:14:3d:06:7a:81:
                    a9:51:1f:94:e4:ff:8f:24:ef:86:28:30:3a:be:79:
                    b9:43:1f:f0:b2:10:59:6b:25:12:91:03:32:16:89:
                    92:5c:0c:0f:33:10:e3:00:f4:54:36:a0:8c:38:55:
                    5e:8c:00:67:e4:ad:2c:5e:f3:61:3e:40:5f:f4:61:
                    14:0c:53:1a:cf:fe:c1:e3:47:d0:35:78:34:f4:80:
                    93:33:95:a9:69:96:58:3e:6f:2a:2d:2b:73:04:d2:
                    70:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:37:C8:8B:9B:3C:88:D1:0B:B8:5C:23:04:58:43:08:4C:4C:77:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/3ae689a3-4010-35e4-bd30-a86ab7601db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/6fd900fb-7b81-4099-bb11-824fdecd0a86.crl

            X509v3 Authority Key Identifier:
                keyid:3B:29:4A:9B:4E:89:0C:58:09:38:E8:26:5A:18:EE:48:9E:18:0B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c0:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:70:9a:21:34:a0:9d:09:95:bc:f2:7d:91:51:05:cb:59:ea:
         23:e7:64:a3:18:9a:c9:ae:0e:b7:14:f0:44:7d:a8:52:03:f9:
         3b:0e:fd:a8:30:f7:b4:6e:06:c0:12:69:c1:62:48:08:b9:23:
         0e:11:dd:da:af:13:f6:c1:c5:16:d9:bd:a7:16:fb:97:92:66:
         84:0c:a3:1b:b4:37:98:7d:53:a2:b1:2f:4a:27:b4:d4:b5:56:
         d2:4a:08:57:1f:46:fc:21:cb:16:91:50:bb:44:41:8b:de:97:
         13:72:ef:b9:9e:74:e1:3d:c9:c1:87:03:06:51:3a:46:a6:82:
         57:9b:00:d0:ab:ad:e4:e3:6e:0b:d9:b3:d2:ee:59:83:65:e2:
         02:98:5e:02:2e:ce:a0:cc:23:19:1e:b5:3d:00:c4:d7:a7:81:
         b9:96:0d:06:be:86:b9:a6:bd:c3:44:9f:00:fb:e2:de:7b:9b:
         4f:73:c4:be:77:84:79:f6:36:26:0e:a9:e4:85:33:7a:e6:c1:
         0e:ca:e7:cc:21:7d:97:e5:5f:a9:c2:0a:3c:e3:ed:6e:13:1e:
         5e:b5:0d:65:8b:f8:fa:9e:67:e6:c9:4a:eb:71:f1:b3:40:54:
         3b:51:4c:a0:f2:d4:a9:66:b6:fe:7e:54:13:31:b6:b6:df:da:
         c6:6b:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:33:01 2024 by rpki-client on console-fra.rpki-client.org