Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/8e278363-35a1-3105-b8ef-b4d02bb5512b.roa
File:                     8e278363-35a1-3105-b8ef-b4d02bb5512b.roa (raw, json)
Hash identifier:          n2IrMSm2r1GeYdPG+9o9pbN6sm040Oj2qazwGd8eiSY=
Subject key identifier:   DD:AA:A1:77:D5:BF:4C:F2:95:FC:C8:63:3E:54:07:2D:2D:77:9A:2B
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F432858455FC2DB3C3B2DFF50E45CD900
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/8e278363-35a1-3105-b8ef-b4d02bb5512b.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     32982
IP address blocks:        2607:f368:b004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:db:3c:3b:2d:ff:50:e4:5c:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=257055f3-722e-4f56-ba85-2c046355f477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f4:44:52:2a:c0:e0:d0:5a:ba:fb:34:1c:31:
                    f7:f8:f6:5d:1f:d9:a3:84:63:c8:1b:6e:03:87:9c:
                    de:23:5a:93:cb:0a:aa:db:4d:f2:30:c5:37:87:0b:
                    4e:50:4d:c1:51:9c:00:12:41:46:9a:1f:5e:b0:40:
                    5f:2e:7d:92:a5:93:e6:8e:b3:25:0a:ca:0e:d2:50:
                    9b:69:be:49:22:8e:f7:cb:60:ee:af:f1:e5:91:0f:
                    f8:82:69:88:c5:0d:ab:2c:fd:11:90:5f:09:d8:40:
                    f2:79:25:8a:4d:c5:c8:7a:13:bd:7c:a5:14:5c:2f:
                    8e:2f:8a:e2:ba:62:24:7b:27:44:9f:dc:95:e7:ae:
                    d0:86:63:ad:e9:dc:79:6f:36:ac:a1:dd:89:43:d5:
                    61:01:81:59:8e:cb:fd:b5:aa:6c:09:d5:1b:07:d3:
                    e0:67:42:56:82:90:28:d6:05:c8:26:03:79:f0:8f:
                    99:02:1e:ad:90:c8:28:90:4f:d9:63:32:37:f4:55:
                    d5:29:a7:05:85:29:d3:cd:1b:3c:19:b6:1e:b0:7c:
                    a4:16:75:8b:18:c1:92:72:2d:09:e4:38:da:64:7d:
                    7e:03:15:9e:60:d2:b3:d9:7d:1e:ba:7f:95:17:3b:
                    2e:d5:8c:05:60:05:74:fd:da:0d:8c:d7:6e:71:e5:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AA:A1:77:D5:BF:4C:F2:95:FC:C8:63:3E:54:07:2D:2D:77:9A:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/8e278363-35a1-3105-b8ef-b4d02bb5512b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:b004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:9c:56:c1:4f:c2:c4:fb:98:36:fc:a1:5e:4f:1a:c9:2e:29:
         87:20:f7:a1:1b:b1:d0:d9:47:1b:07:88:a4:43:21:49:c2:d2:
         47:98:b8:a4:19:6c:03:09:fd:4f:58:3e:30:98:b1:91:c2:1e:
         38:94:e1:53:76:35:17:7d:63:bf:a0:ac:ee:b4:66:64:3b:f2:
         29:fe:fc:5b:70:f3:3f:3d:dc:bb:d3:67:81:f9:2c:25:38:20:
         d5:06:2b:01:23:24:1e:92:57:99:0b:ae:8c:82:6f:2e:44:61:
         59:9b:26:36:ce:15:d0:a7:43:7e:af:26:eb:1f:f8:95:69:96:
         2c:6b:3a:69:93:29:18:a1:6d:fb:32:4f:3f:a1:df:f4:44:fc:
         79:09:f8:d2:d1:5f:70:43:35:52:93:c0:0e:71:30:02:05:e2:
         7f:72:ef:9b:91:2a:45:db:ad:d3:7d:a6:ff:7e:70:d0:5d:0a:
         ec:1f:60:43:9a:d5:c2:5b:e7:7e:1f:9a:fd:2d:4c:78:80:23:
         f4:b2:3c:f5:c8:9f:0a:9f:15:71:2d:a0:30:6c:84:80:40:f2:
         81:d6:c7:66:c8:81:0f:5c:3a:14:53:90:b8:93:d1:a8:bb:a4:
         0d:0e:19:32:21:b0:96:88:0e:95:29:a8:a6:0f:c1:24:6f:f6:
         c0:fc:8d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:11 2024 by rpki-client on console-fra.rpki-client.org