Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa
File:                     b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa (raw, json)
Hash identifier:          E0b+/cpe+e5rbe4jGUc8zZhKPBuXzz/C/FVe8wNK4aE=
Subject key identifier:   17:D4:E5:8B:C0:5F:1B:49:10:D3:FA:A3:AD:33:BD:9D:99:F7:D6:03
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F43285845698860A5628494BB184E6A00
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     2906
IP address blocks:        2620:10c:7000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:60:a5:62:84:94:bb:18:4e:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=7c97a7d0-e8f2-4d68-9bce-18daa0946c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:b8:30:66:96:2e:92:5a:53:02:14:ef:dc:
                    ed:5e:39:ed:fc:d8:83:e1:12:17:07:7c:ab:56:18:
                    b0:cd:aa:b9:fb:0a:d6:f6:ea:26:21:33:03:f6:d3:
                    e5:95:f4:21:64:eb:81:23:04:05:f8:9b:e3:c2:de:
                    76:d9:b1:06:c4:48:7f:5a:48:0d:ef:b6:51:4f:d5:
                    9b:20:55:07:06:30:85:5d:28:64:c9:02:5e:0b:29:
                    fd:09:e1:45:f6:0f:85:ae:3e:90:7d:6c:87:f3:0c:
                    f3:38:7b:c7:09:ac:af:44:ce:4c:68:6e:c3:05:98:
                    b0:ca:e8:6b:3a:3a:4e:f5:d9:ff:7c:fb:7c:b0:e3:
                    72:41:15:4f:fa:0d:d8:92:47:c1:4f:3d:3a:df:90:
                    9f:55:77:02:ab:d5:24:86:90:d6:7a:31:34:7b:b3:
                    08:2c:17:68:05:d1:04:09:21:15:7d:fc:9d:8e:95:
                    96:83:c1:c0:8d:2d:e4:7c:1a:a6:fa:eb:aa:3f:65:
                    c9:7e:99:3c:b7:83:2a:73:5f:4b:a3:0e:a4:7a:2c:
                    7e:26:46:75:37:3c:63:a1:32:fd:f6:89:58:e9:f9:
                    8e:fe:e2:39:71:82:f3:dd:3b:ad:43:ef:9d:4a:37:
                    c2:f5:e4:5c:84:e3:4d:5d:5f:86:1b:73:73:0c:55:
                    f4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D4:E5:8B:C0:5F:1B:49:10:D3:FA:A3:AD:33:BD:9D:99:F7:D6:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10c:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:8a:ed:be:b9:f5:b7:d6:be:3f:30:d9:8c:ea:9f:a4:08:a5:
         8a:b4:4b:2d:be:ae:e4:ab:5f:c3:0e:5f:de:3c:6e:4f:1a:5f:
         34:b5:ee:4f:5f:50:ed:7f:88:67:b7:78:17:94:9a:67:a5:03:
         85:1e:0b:4c:1f:a2:65:df:c0:ae:c6:b1:e6:9c:de:50:86:1d:
         83:1e:3f:15:c4:8c:ad:8a:1d:44:40:9d:f7:45:d0:20:1e:bd:
         da:1c:c5:37:9c:34:03:16:38:c8:3d:dd:d8:4c:49:bb:16:7e:
         6b:6e:c9:1a:e5:25:dc:60:c2:48:4c:08:34:99:94:ca:c0:2b:
         27:91:b6:62:78:9f:00:d9:bc:9f:df:0a:aa:84:b4:d3:9a:5b:
         2b:be:40:90:26:37:57:ec:02:09:29:39:62:1a:8f:5d:5e:76:
         8d:9c:70:44:a5:f8:42:14:37:a7:61:1b:bd:64:e8:2b:e3:fc:
         43:69:69:18:8c:ab:b7:50:e2:d1:36:c5:45:98:b1:f7:92:bb:
         0c:7f:19:1e:8f:20:87:c0:ba:cb:13:4b:fe:ce:fd:de:a0:c8:
         f5:7f:15:fb:23:8d:f9:79:38:52:c9:40:ec:7c:7b:28:34:e1:
         5d:fa:50:6b:5b:1e:7b:45:7e:8d:63:0c:6f:af:97:fa:2b:5b:
         74:b1:32:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:27:48 2024 by rpki-client on console-ams.rpki-client.org