Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e0b67eb-b5e4-3fca-a532-e436cccd05fc.roa
File:                     3e0b67eb-b5e4-3fca-a532-e436cccd05fc.roa (raw, json)
Hash identifier:          PJ54JOir+fUa7D6s4RPGo6BmrjgeCzlgFCO2f4p5kpI=
Subject key identifier:   E0:6D:55:34:00:78:19:16:D0:E2:71:3F:23:E8:C5:3A:A8:DB:64:2D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858450FF6769D5CF6CBC88E305E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e0b67eb-b5e4-3fca-a532-e436cccd05fc.roa
Signing time:             Fri 01 Mar 2024 10:59:48 +0000
ROA not before:           Fri 01 Mar 2024 10:59:48 +0000
ROA not after:            Thu 30 May 2024 09:59:48 +0000
asID:                     20940
IP address blocks:        2600:140b:10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0f:f6:76:9d:5c:f6:cb:c8:8e:30:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  1 10:59:48 2024 GMT
            Not After : May 30 09:59:48 2024 GMT
        Subject: CN=2af1297b-c1fd-4111-89dd-ee8ebde80d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:25:d1:36:05:ac:ae:c2:48:d4:78:6f:2c:
                    d4:84:f1:10:e4:e7:fb:72:cb:96:07:dc:af:fd:56:
                    08:e6:d7:41:48:67:90:86:bd:20:fb:b7:8b:57:6d:
                    2b:c0:77:42:31:85:38:3d:a3:c8:7d:ef:4a:ee:ed:
                    dc:55:18:ae:de:a8:59:21:3f:c0:df:1b:fd:1c:1d:
                    4a:bb:24:ff:88:35:79:d9:dd:a1:88:97:ba:6b:8d:
                    be:85:51:46:47:1b:f3:81:ba:24:e0:dc:46:b1:6e:
                    23:e6:71:0b:62:b8:76:1d:c4:45:99:51:ad:9e:cf:
                    ca:99:ce:27:55:19:fb:f1:84:a4:83:ed:bd:b7:dc:
                    2f:81:35:6e:d2:d3:7e:83:6a:ab:46:80:28:52:12:
                    23:70:0b:62:a4:d8:02:43:9d:3a:d9:89:38:fc:d4:
                    3d:55:f7:d7:23:75:27:ba:cb:73:cf:33:b5:25:58:
                    ca:1e:01:5b:fd:5f:79:2d:c8:19:34:23:17:7d:6a:
                    4a:04:94:a0:5b:b4:27:92:3f:e3:ae:62:91:d7:4d:
                    fb:80:25:bb:53:a3:6d:7e:ad:74:e2:20:f0:c8:a7:
                    d6:fd:59:e9:24:7f:0f:c3:b9:ad:56:2c:72:1b:da:
                    30:ed:00:e5:e2:75:f5:b4:83:27:27:0d:e1:dc:df:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6D:55:34:00:78:19:16:D0:E2:71:3F:23:E8:C5:3A:A8:DB:64:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e0b67eb-b5e4-3fca-a532-e436cccd05fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:9f:1f:bb:bb:7c:dc:14:d0:6b:2d:2d:05:85:01:b2:11:a3:
         ad:41:e9:5b:a4:73:ce:9a:8b:ec:50:b9:9c:4e:65:d1:e6:2c:
         0c:35:ea:72:8f:43:4f:2a:52:c9:e1:7b:f5:44:19:7c:b8:32:
         02:6b:0e:eb:12:4b:d4:4b:f8:f9:2d:f1:56:7c:6b:8f:bd:45:
         2f:c9:46:16:22:15:bd:f0:a8:61:a8:90:36:17:a6:7c:52:41:
         a4:2e:60:e3:ee:26:ba:c9:52:6b:a8:b1:d7:1c:1e:2c:84:7c:
         7b:81:7b:76:34:c4:9f:8a:e9:59:b1:ab:a9:8b:3c:5b:29:d6:
         c2:a7:ac:6e:c4:2e:9e:a9:8e:01:2d:16:96:3e:5d:85:1b:21:
         d4:21:4c:8c:44:b2:44:66:81:63:5d:fb:2c:6e:53:fc:0f:54:
         28:3a:bb:14:5c:ed:b5:e2:32:c8:44:ff:ef:b6:33:a8:67:6f:
         35:8c:cb:96:d5:cc:78:41:44:6b:c0:89:64:f5:43:74:e9:97:
         01:b4:22:59:d7:d9:1c:80:84:1e:4c:9e:5e:86:b5:a1:1d:82:
         aa:6b:15:82:51:9a:82:c9:12:02:1e:e3:0b:31:e4:17:c5:02:
         5c:e3:88:bb:17:f3:6e:28:90:ce:dd:4b:18:2d:e6:11:dd:a6:
         4d:fe:0c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:04 2024 by rpki-client on console-ams.rpki-client.org