Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/a5fc0ec4-4867-34fa-9b41-9ae6b2698253.roa
File:                     a5fc0ec4-4867-34fa-9b41-9ae6b2698253.roa (raw, json)
Hash identifier:          tBg7vugQbnoFd3l+ajfZp5kt4QWampMYEowsa+w99ug=
Subject key identifier:   20:7A:E3:75:3B:60:23:FB:8E:AC:71:00:C5:8B:E9:9B:FA:0B:B2:98
Certificate issuer:       /CN=1fb001d4-3a2b-436f-a572-51822a315945
Certificate serial:       010D0C9F432858465409C67E58192582EC6F1EC0
Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/a5fc0ec4-4867-34fa-9b41-9ae6b2698253.roa
Signing time:             Tue 25 Jun 2024 13:00:33 +0000
ROA not before:           Tue 25 Jun 2024 13:00:33 +0000
ROA not after:            Mon 23 Sep 2024 13:00:33 +0000
asID:                     395363
IP address blocks:        2620:129:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Jul 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:54:09:c6:7e:58:19:25:82:ec:6f:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945
        Validity
            Not Before: Jun 25 13:00:33 2024 GMT
            Not After : Sep 23 13:00:33 2024 GMT
        Subject: CN=5cc0d123-64dc-472d-9a63-30f8dc33f0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a1:a3:e6:b8:c4:1e:19:cb:21:d0:22:fd:e1:
                    40:45:2a:4a:a3:5b:d2:74:c5:9a:dc:5c:21:bf:cb:
                    02:15:8a:6c:0d:1c:dd:8d:1e:30:44:11:e9:60:6c:
                    3c:e8:b7:84:b0:50:28:77:9d:38:9d:4f:a6:2f:38:
                    1a:01:85:db:27:17:13:f4:bb:cf:1a:a6:af:9c:76:
                    b3:ad:15:ef:bb:13:34:06:3b:af:e8:cc:f8:3f:7c:
                    1a:38:de:d2:f8:2f:44:af:f8:b8:e2:81:02:13:c0:
                    bb:35:b0:cc:31:a0:d0:a8:4a:e0:6d:d0:be:85:a4:
                    44:f2:75:91:95:fa:8e:8a:bd:77:88:7d:e2:54:19:
                    89:f0:8a:aa:75:d2:b3:40:f6:8f:20:6b:bc:6b:f5:
                    31:9d:76:a4:15:a9:4a:27:43:99:10:ff:97:22:c7:
                    4b:6f:19:59:40:16:59:0b:2c:9e:d9:1e:a3:a0:e5:
                    c5:38:31:15:fa:b5:74:63:be:29:98:63:83:fe:11:
                    61:de:f2:14:70:a3:0f:79:90:ab:58:fe:3c:d2:49:
                    3e:a6:84:d4:a4:ab:f9:25:4d:e8:5e:bf:d8:bb:35:
                    f1:01:ef:1f:00:f3:b1:63:2b:11:56:e3:8d:bb:82:
                    cf:0f:a2:a1:3c:25:a7:81:fb:13:22:af:5b:80:4e:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7A:E3:75:3B:60:23:FB:8E:AC:71:00:C5:8B:E9:9B:FA:0B:B2:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/a5fc0ec4-4867-34fa-9b41-9ae6b2698253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl

            X509v3 Authority Key Identifier:
                keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:129:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e9:93:20:c0:f5:f4:2e:2b:77:ad:2d:ff:c7:ed:2a:27:16:
         99:bd:e7:2f:c4:a9:70:e4:8d:96:4a:46:33:40:e7:71:26:34:
         bf:6f:23:3f:4c:13:36:b8:fd:be:c6:bb:1a:6b:de:a2:c5:b8:
         8b:dc:6e:09:d8:82:41:71:0a:ba:ff:1c:87:f4:c2:d3:f0:85:
         48:40:13:3f:8d:67:1e:cf:cc:29:62:33:94:9e:5d:1b:85:05:
         1e:c1:42:38:19:06:bb:5d:34:f5:05:8b:09:91:71:fc:e3:5d:
         62:33:09:b1:35:c5:0e:42:16:02:16:63:22:41:4d:0f:ed:73:
         d3:ce:b6:44:96:bc:20:f2:2f:b0:ce:90:e0:35:55:fb:45:85:
         52:f5:db:47:6d:9e:75:73:87:35:e4:6b:83:ff:1f:30:01:fe:
         55:8a:d4:2c:0d:f6:3b:94:1c:c4:10:40:09:cf:70:3b:0b:65:
         f2:fd:e3:75:c7:ec:3f:b5:79:30:d0:14:89:ad:3a:88:07:8c:
         ca:07:b6:28:c3:e1:d6:c7:5d:7a:50:64:af:17:61:00:91:dd:
         01:24:6b:a1:b3:c1:e8:99:1a:b0:49:c3:77:0b:33:a0:bd:21:
         1c:20:fc:0f:18:f1:58:36:0c:23:5b:e0:ac:d2:2d:0d:e8:b5:
         ca:54:2f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 15:26:06 2024 by rpki-client on console-fra.rpki-client.org