Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9473f164-1fbd-31b5-b967-faf52a6b40d2.roa
File:                     9473f164-1fbd-31b5-b967-faf52a6b40d2.roa (raw, json)
Hash identifier:          4myk3ShaaEU500Wi5erZ6q4GDXi4xcJ1ouyyTzhyNw8=
Subject key identifier:   44:68:0D:CD:EC:FE:35:1A:2A:E9:7D:97:6B:3D:21:C5:12:73:96:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858451AFC1C1177A11E6119624B61
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9473f164-1fbd-31b5-b967-faf52a6b40d2.roa
Signing time:             Tue 05 Mar 2024 09:45:04 +0000
ROA not before:           Tue 05 Mar 2024 09:45:04 +0000
ROA not after:            Mon 03 Jun 2024 08:45:04 +0000
asID:                     20940
IP address blocks:        2600:1417:75::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:fc:1c:11:77:a1:1e:61:19:62:4b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  5 09:45:04 2024 GMT
            Not After : Jun  3 08:45:04 2024 GMT
        Subject: CN=f3ca1203-2b85-4d5b-be45-6955ea8025eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:33:1f:9a:26:91:48:e2:d9:3b:7f:ff:11:2e:
                    f5:12:78:70:14:2e:65:70:ad:33:5a:4c:47:ab:0a:
                    62:4c:8c:f9:a5:07:7a:93:d8:7d:38:26:9e:7d:ac:
                    31:ee:99:34:a5:4c:6e:69:6a:db:5d:cb:18:ec:70:
                    06:81:31:c4:ed:85:a3:3f:8c:d9:72:9d:8a:84:3e:
                    76:d0:ef:21:c5:10:ec:c3:3e:38:3c:74:6d:97:70:
                    3e:04:01:44:3a:f7:b9:48:03:66:2c:00:92:2a:99:
                    3c:ac:8e:27:86:85:52:40:9d:d0:70:bf:01:89:0e:
                    24:46:27:7c:ee:e6:65:71:4b:66:66:39:2a:8f:a1:
                    74:cf:e1:4c:4b:10:60:76:07:f2:c3:8f:71:ef:9f:
                    01:8f:68:01:cb:04:9f:76:90:05:ed:e4:80:a6:31:
                    4c:da:a0:2a:59:e2:04:4c:df:9a:3b:9d:a4:31:1d:
                    a2:19:77:36:60:ad:d6:e1:02:5c:29:0f:86:96:4a:
                    71:9c:b9:8d:db:7b:ca:82:21:77:ab:88:79:ab:a5:
                    de:77:ff:e5:3c:d9:5b:9f:fa:0d:ce:8a:a2:22:69:
                    52:cd:7b:6c:fd:2e:2d:1e:dc:67:1c:ae:67:2e:82:
                    45:41:68:d7:51:82:cc:fa:96:07:9b:3c:d1:b6:42:
                    84:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:68:0D:CD:EC:FE:35:1A:2A:E9:7D:97:6B:3D:21:C5:12:73:96:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9473f164-1fbd-31b5-b967-faf52a6b40d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:75::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:76:fa:1b:09:dc:c9:f8:8b:f7:63:de:6d:4a:a3:d2:b2:42:
         16:1f:6a:5e:9f:ef:03:38:b5:17:ff:2b:a6:b3:0c:3c:b3:8f:
         e8:1f:33:01:d8:5e:a9:c0:44:8a:ce:91:57:ff:8b:c1:21:01:
         2b:03:b7:65:aa:ce:1a:d4:fe:eb:fb:97:2d:d1:83:7a:5d:0f:
         b6:66:df:f2:1d:d2:18:23:f1:dd:11:ca:bb:81:9e:a7:19:e0:
         8d:01:77:34:85:af:14:37:5b:e3:26:49:e1:91:64:cf:79:e1:
         ad:6a:27:4c:32:28:f7:27:66:6d:54:13:0a:5a:3b:04:29:67:
         c7:9a:d2:fd:10:fb:16:d3:d4:ea:56:b9:23:03:0c:ab:32:31:
         06:c1:fa:22:a1:55:07:8e:4f:e4:86:7f:cb:7e:fd:b1:d0:6e:
         ad:ca:41:be:67:b8:3c:6a:34:1b:da:a1:21:dc:f0:f9:a8:b5:
         55:de:30:61:c1:22:e6:f5:43:7a:05:1e:c6:e9:16:00:18:59:
         cd:99:9a:21:b9:7f:0a:8b:31:01:2c:7c:10:df:8a:af:85:e1:
         ed:ce:ec:78:78:04:6c:78:72:36:e0:e0:25:22:4c:28:12:c2:
         04:63:a5:42:7a:e2:92:77:b0:d3:78:98:95:e2:9f:18:f3:73:
         df:46:34:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:12 2024 by rpki-client on console-ams.rpki-client.org