Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/18958e14-27fd-3a98-aa4b-fdebb1f21993.roa
File:                     18958e14-27fd-3a98-aa4b-fdebb1f21993.roa (raw, json)
Hash identifier:          nRpZ0AsRkrAxVBmmnY/z4nhI+9qgtGfvOcOzKYPPP7g=
Subject key identifier:   48:08:A5:01:2D:4A:46:91:E2:77:4F:E9:48:E7:F5:7A:B4:61:AC:76
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F43285845189D77EA33CA0B5637CF1980
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/18958e14-27fd-3a98-aa4b-fdebb1f21993.roa
Signing time:             Mon 04 Mar 2024 13:22:45 +0000
ROA not before:           Mon 04 Mar 2024 13:22:45 +0000
ROA not after:            Sun 02 Jun 2024 12:22:45 +0000
asID:                     51089
IP address blocks:        2602:2db::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:9d:77:ea:33:ca:0b:56:37:cf:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Mar  4 13:22:45 2024 GMT
            Not After : Jun  2 12:22:45 2024 GMT
        Subject: CN=7d411d4b-ab09-4535-9f29-5c60a8c8b9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:53:52:f2:eb:db:44:0d:a5:17:77:bc:59:d6:
                    ac:3b:ad:e0:71:c3:38:23:74:77:ec:1c:f5:c0:0f:
                    00:91:17:12:d0:df:91:3f:3f:71:8d:bd:c5:2f:01:
                    40:23:af:9c:07:ea:f3:2f:56:83:4d:fc:00:d4:10:
                    09:be:64:4a:b1:c6:c2:5f:0e:65:fd:4c:75:e8:1e:
                    39:9b:1e:77:37:47:fd:b3:3f:73:04:56:85:7b:d2:
                    e8:6f:85:7f:19:89:20:a1:b3:55:60:de:d5:18:3b:
                    07:64:72:b4:84:a2:2b:3a:41:ad:2b:2e:aa:bf:ad:
                    9f:27:99:f7:ee:36:04:fc:96:46:f7:7c:11:b1:dd:
                    34:ff:f8:f0:45:01:1e:ca:25:3a:b0:96:c4:c5:8a:
                    ba:8b:55:c7:54:cf:7e:7d:b1:6c:a4:05:6f:8d:6f:
                    85:e2:8e:5e:97:8f:58:8d:78:57:26:f7:40:98:b4:
                    8a:86:4b:fb:55:c2:86:b7:67:14:8c:cf:ef:93:05:
                    6f:3a:43:3f:42:1b:6f:09:66:37:15:14:a9:ac:c4:
                    b2:2e:68:10:66:53:44:0d:14:fb:7c:8a:88:8c:ad:
                    85:a9:82:e5:d2:7e:0d:05:4a:65:53:7f:65:ab:98:
                    78:a3:e3:db:8d:fa:73:5a:ff:86:7f:f1:57:15:1a:
                    c6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:08:A5:01:2D:4A:46:91:E2:77:4F:E9:48:E7:F5:7A:B4:61:AC:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/18958e14-27fd-3a98-aa4b-fdebb1f21993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2a:18:8c:5f:5b:5f:30:c5:b0:0e:2d:6d:b7:31:ce:19:a0:
         27:c1:16:08:6e:a2:ea:47:50:7a:41:a3:d7:cd:c1:6e:33:50:
         c3:ef:e7:0d:99:89:b9:35:b3:79:fb:ff:8d:3c:9d:61:8a:0b:
         15:e1:4e:c9:16:fc:20:cf:43:d3:9a:20:4e:53:28:47:59:a8:
         9c:9f:11:b3:a9:f5:52:5b:14:99:5d:e6:51:e0:08:f5:59:04:
         ac:51:59:80:9a:4b:c0:31:85:1a:e7:04:83:e0:de:df:a1:78:
         7a:4d:fa:4c:01:bd:57:02:83:ac:31:a3:65:5c:b4:70:e7:7c:
         98:01:7e:73:c8:4a:47:d5:8f:1d:ed:93:dd:41:29:ef:e1:d8:
         47:bc:51:d2:9b:74:2c:1b:95:60:6b:ec:bb:88:ab:db:5c:53:
         91:7a:38:37:df:7b:3c:27:a6:91:3d:49:bc:ef:2b:e2:3c:6c:
         b9:c7:2c:68:e2:8b:2b:a0:c7:dc:23:32:a3:96:67:ec:97:0a:
         ea:91:d5:36:22:1a:39:2b:c4:85:90:0d:ab:05:15:ba:5f:23:
         81:d1:da:08:26:19:58:d7:a5:95:e5:ef:b3:f7:41:b3:5a:58:
         ad:2d:a7:f9:3f:49:22:93:e3:69:3b:10:75:d0:2d:20:36:cd:
         9e:ff:30:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:14 2024 by rpki-client on console-ams.rpki-client.org