Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1da56e3f-8147-3bef-ba1c-76e88b88b0f0.roa
File:                     1da56e3f-8147-3bef-ba1c-76e88b88b0f0.roa (raw, json)
Hash identifier:          7XNSGesl7kQ+69cC/NKcsgqrVXC56ABDMWWQcH3qBUc=
Subject key identifier:   C1:5B:1E:38:B7:A4:74:DE:A0:B3:DB:46:C2:81:EE:B2:A0:40:03:77
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452EA62594DAF277BFA6E3DF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1da56e3f-8147-3bef-ba1c-76e88b88b0f0.roa
Signing time:             Tue 12 Mar 2024 10:48:01 +0000
ROA not before:           Tue 12 Mar 2024 10:48:01 +0000
ROA not after:            Mon 10 Jun 2024 10:48:01 +0000
asID:                     9498
IP address blocks:        2600:140f:4200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:a6:25:94:da:f2:77:bf:a6:e3:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 10:48:01 2024 GMT
            Not After : Jun 10 10:48:01 2024 GMT
        Subject: CN=182b42d6-1a73-4380-9a8a-784483dc8f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:91:dc:c2:1e:db:ea:4f:c8:b0:2d:48:0d:92:
                    32:88:6e:e8:28:05:73:86:cf:8f:3c:71:e9:8a:ff:
                    63:b2:f2:16:f5:a3:97:e2:fe:1a:75:53:56:82:d7:
                    c1:98:c6:a3:b9:d9:b3:b3:69:7d:f0:9f:34:80:ea:
                    fe:6a:1b:c4:79:4d:a3:f6:03:fb:e5:36:c5:fc:c4:
                    9d:f1:30:0e:69:50:4c:72:24:58:8a:91:d8:39:be:
                    44:c8:69:74:5e:96:f9:3e:6f:89:ec:ff:54:f1:f3:
                    91:ff:8f:1e:b4:9c:0e:2a:bd:bd:97:21:78:47:6c:
                    66:3b:f3:d8:e2:d6:c4:1e:c5:cb:df:d5:64:2d:fb:
                    99:87:fd:95:84:29:90:0d:14:54:4e:11:5b:c7:19:
                    d2:1e:21:db:6e:6e:94:6a:59:36:57:84:44:6e:dd:
                    5d:b2:79:f5:60:36:c0:cf:35:6a:34:46:1f:c5:8f:
                    6c:93:c0:d8:f2:83:5d:d6:b5:13:a8:33:4a:6b:81:
                    d3:bc:d2:7d:2e:35:38:10:3c:8e:09:f2:05:3e:40:
                    5b:f2:88:99:7d:cd:fe:82:85:6e:81:85:f3:43:3a:
                    be:36:72:64:34:8d:40:bd:7c:6e:e0:dd:b1:37:a5:
                    7d:78:62:f4:6c:ab:7d:c8:76:27:b8:03:a0:f4:84:
                    e1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5B:1E:38:B7:A4:74:DE:A0:B3:DB:46:C2:81:EE:B2:A0:40:03:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1da56e3f-8147-3bef-ba1c-76e88b88b0f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:4200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:31:d4:da:3a:d0:b9:d0:53:31:17:57:99:98:f9:d4:af:25:
         3e:75:10:f5:b2:b2:fe:70:4d:03:ed:4d:e4:e5:91:a6:e1:27:
         f6:23:ee:94:47:a4:b6:2a:2c:68:61:74:64:6b:84:a6:64:3f:
         53:5f:d9:3c:88:e4:6b:5f:55:7c:9a:23:43:64:50:08:3d:4c:
         cf:94:a4:f9:e4:71:65:f5:50:46:c7:7e:55:f5:9d:b8:f4:0e:
         bd:f0:48:f2:4a:0d:4c:c3:36:9e:34:2a:8e:ee:ba:3b:ff:13:
         11:92:a2:14:de:88:a4:ac:4a:c0:7b:55:e6:0f:43:71:b3:93:
         6e:2e:fb:4e:49:a8:b3:94:78:22:a4:f9:5e:51:e7:8e:33:0d:
         7c:a3:68:2e:2b:aa:1a:4b:41:63:ec:e0:cb:72:bf:18:c6:a1:
         e8:52:00:33:9d:3a:6e:fc:af:af:b0:d9:c7:3d:76:33:ab:09:
         79:0a:d9:75:e8:d9:3c:b2:d9:4a:d8:16:07:5a:6f:27:33:08:
         66:a2:9e:8c:34:ff:18:aa:ff:51:1a:56:0e:0a:9e:bc:0e:1c:
         09:4f:bc:10:2e:1b:b6:6a:8d:57:2c:c6:ec:cf:12:34:a9:1b:
         3c:5f:ab:c4:91:a7:e5:95:60:d3:19:b9:fb:bf:7d:69:16:ea:
         72:61:e5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:06 2024 by rpki-client on console-fra.rpki-client.org