Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa
File:                     f3eb19d5-af1e-3d62-921a-950796610e1c.roa (raw, json)
Hash identifier:          RjkOi/o8RLojAWqzq4bj1j7j+dihznFdPeQPmWJxCfw=
Subject key identifier:   61:43:4F:4F:CE:46:A6:1A:C0:53:DD:A7:01:17:15:BB:F0:B1:96:76
Certificate issuer:       /CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6
Certificate serial:       010D0C9F432858452C1D49F7970B64FA6A411780
Authority key identifier: CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     393581
IP address blocks:        2620:1fe::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:49:f7:97:0b:64:fa:6a:41:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=2f720d41-d2f9-4fe6-9334-72d056fca88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d1:6f:7c:17:37:28:c9:b3:d2:2a:41:67:f6:
                    8c:58:4d:37:5a:d0:78:1f:3f:35:08:d2:94:38:de:
                    48:08:6e:24:af:0b:ad:5a:6a:8c:33:67:d9:16:eb:
                    25:4f:d9:b4:3e:2d:ec:52:f9:b0:ec:93:5b:76:a0:
                    32:36:75:a8:bc:40:dd:18:4b:52:10:78:6c:38:b9:
                    e9:35:a0:b0:45:49:42:31:a2:04:f9:4a:6d:19:82:
                    99:4d:7b:33:51:c8:65:12:10:16:f1:83:2a:fe:43:
                    b6:88:c8:41:1d:34:82:dd:41:39:58:0d:c2:fa:63:
                    17:32:ac:35:d5:88:fb:9c:78:99:f8:8f:f5:e3:07:
                    b1:9f:dc:b3:b8:7e:b7:09:c3:cc:de:6a:cd:36:47:
                    b4:1b:08:24:fa:b3:d6:6d:48:a3:f6:32:4f:9c:28:
                    9f:d5:06:29:5a:37:a5:2d:40:5a:2a:57:76:cc:39:
                    39:20:31:bf:93:0b:a1:84:4b:09:c4:b2:21:e8:f8:
                    9e:b9:9c:3c:12:85:a9:6b:16:25:79:91:1d:9a:4c:
                    c5:3e:70:38:a0:f5:bb:d3:bd:2f:1a:30:c6:b6:f8:
                    ee:e5:09:0c:74:ba:a2:76:c5:fd:b1:90:12:5c:6c:
                    04:de:ba:21:b9:84:02:92:1d:e5:3a:6f:eb:e8:10:
                    d3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:43:4F:4F:CE:46:A6:1A:C0:53:DD:A7:01:17:15:BB:F0:B1:96:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.crl

            X509v3 Authority Key Identifier:
                keyid:CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1fe::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:4b:bf:07:bf:40:ef:ab:91:da:2b:ef:17:2e:26:74:73:47:
         47:66:3e:84:7f:19:d0:cf:ab:50:36:0a:1d:cd:58:0b:2b:ef:
         e6:6c:d1:58:82:dc:ba:55:1b:6b:dc:77:fa:25:2c:2a:bb:5c:
         89:a9:31:7e:f3:4d:77:2e:b6:c1:36:89:fd:aa:bb:07:f0:4a:
         9f:18:ea:a5:08:39:3a:77:67:69:34:82:2b:e7:b5:53:89:89:
         21:e0:bb:1b:95:b4:b5:d4:ee:c1:5f:14:a4:77:31:13:7a:e6:
         db:b3:ab:65:dd:06:5d:b3:28:d6:db:74:f0:ac:44:3a:59:e5:
         28:d4:45:80:e1:6f:e6:73:fd:0f:02:66:65:08:84:f3:cd:db:
         71:d3:96:8e:8f:b8:cd:73:6a:ee:af:b7:fc:34:fe:14:0b:05:
         38:2f:25:7d:45:dc:85:da:5c:c0:74:35:25:49:8a:49:81:d7:
         11:fc:61:5a:b1:94:aa:b6:73:f6:0e:5d:7e:f9:b8:f7:7e:ad:
         71:5e:22:dc:7e:ae:c4:fe:2b:a4:08:bb:5e:a6:17:bf:7d:d9:
         18:44:83:06:5f:dc:a0:b7:63:49:7f:00:5f:72:af:99:e8:c5:
         f1:ba:69:76:9e:f7:da:50:2b:c4:3f:bf:bb:d6:12:75:2e:94:
         52:ba:45:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:34 2024 by rpki-client on console-fra.rpki-client.org