Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5996d402-87c2-3d37-b4b5-c3278134bd5c.roa
File:                     5996d402-87c2-3d37-b4b5-c3278134bd5c.roa (raw, json)
Hash identifier:          FAtpkk8zq530CAQGrqpIxlF8qsWcAjh28wA6sydf7AY=
Subject key identifier:   85:7C:A8:33:26:88:3E:84:8F:20:EE:BE:4D:92:C9:AB:BC:17:34:73
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452393BD0B1A583C5426BE2A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5996d402-87c2-3d37-b4b5-c3278134bd5c.roa
Signing time:             Fri 08 Mar 2024 11:37:02 +0000
ROA not before:           Fri 08 Mar 2024 11:37:02 +0000
ROA not after:            Thu 06 Jun 2024 10:37:02 +0000
asID:                     20940
IP address blocks:        2600:1403:ac00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:93:bd:0b:1a:58:3c:54:26:be:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 11:37:02 2024 GMT
            Not After : Jun  6 10:37:02 2024 GMT
        Subject: CN=df807e8e-739a-4b19-b8f2-87b0a03ef92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:92:b6:45:52:11:f3:80:bb:f0:8b:0e:01:b1:
                    c0:5e:60:c3:3f:9d:d2:50:35:ad:0e:07:13:69:5c:
                    51:9f:6b:fe:d6:ff:2a:df:2a:cd:12:0c:b1:f5:0e:
                    5c:ca:f9:2d:75:1c:91:9c:2a:a5:0d:07:f8:d8:eb:
                    ff:c8:b1:83:ec:6a:c0:8b:54:5c:65:a0:b0:89:c1:
                    cb:94:96:b9:41:b8:4b:19:75:2a:1d:69:43:7d:27:
                    cd:5a:d5:53:bd:95:0f:35:5f:8f:c2:36:29:b0:f3:
                    6f:9b:ab:b9:85:a3:e1:3f:4d:e0:b7:c4:71:29:b5:
                    12:ee:87:08:fa:a8:9c:8f:e1:38:0a:1b:b6:81:91:
                    fe:1f:72:5a:88:83:a6:5e:5e:d9:10:a7:2f:15:43:
                    ee:9e:0b:76:36:24:77:d7:4c:79:1e:d6:3a:be:3b:
                    91:82:12:91:d4:82:0f:c9:77:93:e3:11:0a:bd:b4:
                    87:62:49:89:c4:4c:2c:f1:dd:d3:fe:bd:db:c7:31:
                    fb:0c:3b:da:8d:a8:c8:0c:06:93:d4:f6:d7:eb:61:
                    6b:8c:ff:6f:f9:da:72:98:3b:29:9b:36:e0:04:03:
                    6f:d4:64:54:09:a6:17:ce:29:4e:ab:fb:35:a6:9b:
                    9d:d7:33:15:10:b9:4c:7d:ce:76:16:dd:c7:84:45:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7C:A8:33:26:88:3E:84:8F:20:EE:BE:4D:92:C9:AB:BC:17:34:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5996d402-87c2-3d37-b4b5-c3278134bd5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1403:ac00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f5:6b:d0:34:0b:73:b4:e8:07:73:f7:89:11:e3:db:aa:11:
         03:6d:a3:55:c0:f4:3d:88:ef:ad:64:36:40:17:e8:b2:a1:de:
         15:3b:48:5e:65:41:83:de:a5:46:12:b6:c3:08:4e:bb:46:1c:
         1e:0f:42:f0:b0:6c:0f:fd:3c:19:de:ac:c9:ee:5a:18:fc:bc:
         dd:18:b7:5a:de:6c:e0:41:47:e7:d9:e0:05:36:f4:d7:b5:a6:
         39:ba:e5:87:8b:e7:41:0a:55:64:21:72:90:9e:1b:5e:c6:31:
         a0:62:a4:e9:3b:ba:4f:32:7a:a1:8e:8d:9d:9e:46:b8:39:b8:
         87:76:ff:67:7f:16:f9:f5:0d:8b:f1:2f:25:c4:0c:ab:f9:cd:
         c0:96:a3:d5:c2:bd:45:c6:33:ac:0c:ae:00:0a:23:e5:d7:2e:
         5e:5d:6b:cd:7e:3b:12:85:34:d1:6a:54:0a:68:14:46:95:c4:
         b7:6d:7c:f9:29:f6:b7:47:7f:56:27:b6:87:26:96:9f:1d:84:
         b8:77:94:5a:32:5f:a6:7e:d1:7b:2e:da:51:c5:ba:15:ca:54:
         c8:fa:7f:1f:d2:95:45:85:df:3d:7e:21:55:76:59:74:c1:c4:
         de:3b:d3:38:fa:9b:f2:eb:87:8f:4e:a4:d7:51:cf:c4:d2:a1:
         0d:fc:bb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:05:25 2024 by rpki-client on console-ams.rpki-client.org