Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/631c81c6-c7bf-3934-ba2b-00ca646be1b2.roa
File:                     631c81c6-c7bf-3934-ba2b-00ca646be1b2.roa (raw, json)
Hash identifier:          A3V2qRzEszCNqiuCUVGEvyp7599RdTfA/7GR8dsGyBI=
Subject key identifier:   21:0D:81:13:B4:40:A6:87:8F:AA:A2:BA:15:81:DC:10:E4:6E:FE:FD
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F432858452D8286F91934C99546FEDCC0
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/631c81c6-c7bf-3934-ba2b-00ca646be1b2.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     215807
IP address blocks:        2602:2b7:215::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:86:f9:19:34:c9:95:46:fe:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=dca51b07-64d0-492a-9569-266e480581bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:0c:e5:c7:29:5f:66:69:e5:34:b0:54:c9:
                    1e:ef:dd:4f:0b:d8:7a:3a:1e:61:07:88:bb:58:a3:
                    fa:18:91:1a:fc:ab:4a:30:0d:e9:5e:a0:5c:0b:69:
                    a0:9a:11:a0:4e:1c:ee:b0:80:f3:67:31:ef:ca:49:
                    ed:4b:9f:2b:12:28:a4:b3:4d:55:fd:dc:27:be:b1:
                    59:96:d8:7c:83:82:8a:e3:ab:72:4e:eb:7e:c5:aa:
                    dc:fa:44:ca:9d:41:5f:db:cc:34:f2:0b:e3:37:39:
                    88:ad:55:40:1f:f4:3f:cd:e7:60:16:40:dc:e2:fd:
                    ba:44:0d:3c:ed:bb:b5:6f:6d:e4:9e:c7:f0:a1:ca:
                    0b:8d:8c:86:02:dc:21:f9:03:21:1e:f1:9c:62:5e:
                    05:a7:96:51:0b:00:16:d1:62:ab:11:ba:e0:98:e3:
                    1c:bf:f8:c0:b8:e7:1e:ce:9c:5d:5c:ac:12:d4:6c:
                    92:a2:87:1f:9c:1e:45:72:05:ef:e3:78:54:16:88:
                    7e:0e:3f:3f:6e:96:b4:f6:60:c2:21:b1:ea:50:2b:
                    ca:17:11:f4:00:e8:e9:14:92:9a:e3:f1:02:95:41:
                    c6:7a:c0:df:cc:e7:1b:e9:fc:2f:8b:fe:f8:84:57:
                    06:53:31:a3:b2:72:35:61:80:cc:09:ef:b3:90:e3:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0D:81:13:B4:40:A6:87:8F:AA:A2:BA:15:81:DC:10:E4:6E:FE:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/631c81c6-c7bf-3934-ba2b-00ca646be1b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:215::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a7:21:3e:85:d5:5d:f0:63:aa:3b:2e:25:e5:ec:bb:69:54:
         19:0f:13:b1:8b:38:60:44:77:ad:54:91:4f:3d:9e:b9:b8:54:
         f9:61:1e:54:c8:2a:fe:d6:b4:b7:39:8e:5e:83:7c:20:38:91:
         09:47:e6:94:d8:08:ce:ad:1d:d5:af:4d:6c:fb:4c:1c:05:a6:
         91:0f:92:e0:16:91:14:50:f7:04:92:cc:86:26:0a:cd:82:0d:
         14:f0:31:3c:af:0d:e0:4c:34:b1:63:b6:3d:3d:66:46:a5:b4:
         1e:36:a1:d5:0e:e9:d2:9b:ae:a0:87:82:67:55:12:83:d9:9c:
         c2:c8:33:ed:32:74:a8:6b:5f:66:01:ca:cf:25:f0:6f:1a:4b:
         4b:86:fb:79:ae:e9:59:c5:95:ca:5e:b0:e5:45:0f:1a:3b:97:
         92:6d:c1:37:54:13:8e:64:3a:a9:7c:76:d8:fd:bb:ea:55:90:
         a5:02:a3:38:b3:f6:25:7e:5e:cb:eb:49:7e:4e:1f:a8:79:90:
         f5:2a:d5:a3:50:9b:fd:2d:6a:e4:19:b4:e2:50:d1:4f:f1:4a:
         f1:08:ea:31:5b:f0:20:dc:7f:3a:16:c6:f1:e1:d1:e7:58:24:
         fd:ee:a6:57:fe:49:ac:7c:78:46:eb:f4:68:ab:b2:7b:9a:48:
         03:c9:d8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:08 2024 by rpki-client on console-ams.rpki-client.org