Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34ba7908-9e78-37aa-a90f-4c10a62d0252.roa
File:                     34ba7908-9e78-37aa-a90f-4c10a62d0252.roa (raw, json)
Hash identifier:          juNt6W3rkuOL67LeoRxLkF60Fgzop3siR1dpzAW9Md4=
Subject key identifier:   0C:44:AD:E9:99:A2:FE:C7:8F:4D:ED:47:33:5B:36:35:BE:60:87:4D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858457FDDDE5CCCF75876F63485C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34ba7908-9e78-37aa-a90f-4c10a62d0252.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     12222
IP address blocks:        2001:4878:a102::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:de:5c:cc:f7:58:76:f6:34:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=7f0c7761-7ca1-4032-b1f7-09a4bc8adbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:9a:22:56:f9:62:6a:95:d6:8a:a5:5c:f7:
                    bd:94:e8:48:6e:82:67:0c:0d:d1:3f:42:d7:6e:99:
                    f9:7c:8d:83:2f:92:41:17:d9:45:bc:35:2d:bf:84:
                    f3:bf:13:f3:c9:06:c3:37:2b:e7:1a:14:c5:ec:49:
                    ac:15:16:cb:e4:ea:6b:64:95:95:c5:aa:49:e7:9f:
                    02:f7:d1:40:20:3e:4c:38:20:30:3b:4a:4f:17:67:
                    b5:3b:c8:70:e1:ed:29:21:11:64:0b:fa:b6:66:d8:
                    40:d8:73:6e:f5:5e:f9:bd:96:5d:c3:14:83:ca:8c:
                    81:b0:28:e4:a4:d0:04:5a:d5:6f:ca:07:4f:55:93:
                    eb:48:53:b6:10:17:40:66:d7:21:91:21:04:f8:54:
                    5c:b5:ea:c1:1f:ac:db:b0:69:02:0e:50:c3:1e:eb:
                    60:1c:ac:b0:f2:fd:d3:91:1e:af:7c:7d:ce:e6:9b:
                    0e:69:20:5e:54:26:73:e1:20:cc:fd:57:4a:61:2f:
                    e0:9c:9b:40:af:6b:99:9c:0b:42:6d:42:ad:fa:7c:
                    83:ef:65:74:10:51:0c:26:87:d7:04:bf:8d:8c:93:
                    06:d8:db:a8:82:ac:89:73:2c:92:bc:2c:6b:41:81:
                    5d:f2:a2:56:55:5a:83:da:42:3f:84:39:30:56:81:
                    e5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:44:AD:E9:99:A2:FE:C7:8F:4D:ED:47:33:5B:36:35:BE:60:87:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34ba7908-9e78-37aa-a90f-4c10a62d0252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:a102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:28:3e:12:53:3f:91:32:3c:3e:bb:da:3d:a6:ad:f1:a9:b9:
         5e:1e:ce:31:72:07:fb:b7:df:0b:9f:96:c1:70:bb:9a:4c:9a:
         b0:61:76:43:24:0c:8c:aa:9b:ad:0d:09:d8:54:f3:58:01:6e:
         d9:cd:3e:b2:bc:6c:0d:d1:12:1c:ba:0c:24:55:50:11:00:ad:
         f8:c9:5c:29:c8:38:3e:a5:c8:79:75:2b:4d:f3:70:53:86:45:
         c0:2f:87:aa:cc:5b:e5:db:88:da:e9:c7:03:bd:a6:b5:6a:45:
         c1:79:bd:26:db:f8:b2:17:ef:1d:43:32:be:cb:94:c7:ab:a8:
         ed:ad:ff:ad:66:cb:98:f4:74:a2:a8:07:18:2c:b0:6d:7c:7e:
         3e:96:15:0a:ff:b3:08:c6:1e:88:2b:07:d7:33:e4:88:81:69:
         72:84:e5:5c:26:5e:dc:e4:55:c7:77:51:cc:60:fc:94:e0:77:
         e1:c6:c0:9c:cc:08:38:94:e1:91:93:cb:f2:d4:5d:3d:ca:05:
         f2:4b:8d:df:70:f7:fb:ec:68:7a:f2:09:d5:a7:72:42:90:bc:
         30:2d:f8:06:96:f4:32:47:27:12:ff:39:5b:77:1e:48:be:1a:
         ec:b8:db:5f:0f:14:78:61:e9:a7:ae:a5:aa:dd:eb:e3:35:d3:
         36:8a:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:57:41 2024 by rpki-client on console-fra.rpki-client.org