Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4438849-8a4b-37d2-ba38-66153c655695.roa
File:                     f4438849-8a4b-37d2-ba38-66153c655695.roa (raw, json)
Hash identifier:          wl8qIS2bB9Mit3ddg2qDTdEFpOaNWMYQ9TQgIdtuzbw=
Subject key identifier:   6E:F6:72:C7:48:64:9A:BB:89:D0:1D:99:BC:76:EE:12:C8:33:3D:23
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462F652ADCB4FBF4955ECF40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4438849-8a4b-37d2-ba38-66153c655695.roa
Signing time:             Wed 20 Mar 2024 21:08:09 +0000
ROA not before:           Wed 20 Mar 2024 21:08:09 +0000
ROA not after:            Tue 18 Jun 2024 21:08:09 +0000
asID:                     15169
IP address blocks:        2607:f8b0:4015::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2f:65:2a:dc:b4:fb:f4:95:5e:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 21:08:09 2024 GMT
            Not After : Jun 18 21:08:09 2024 GMT
        Subject: CN=52c057f6-ec62-4b2a-abd0-13b5e7cd7658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cf:9e:00:e4:80:a1:57:4f:0e:74:e0:c3:bd:
                    b5:c0:37:d9:0b:32:d4:13:4c:53:4c:d2:7f:0d:ca:
                    ab:6a:ec:5f:68:75:91:35:43:e0:c9:20:6b:b5:2b:
                    a3:3d:80:39:d5:25:a6:27:b5:c0:56:1d:0c:8c:0d:
                    28:e8:9a:37:06:70:a6:ae:dd:ca:21:15:0e:c8:fb:
                    11:08:2b:c0:87:c7:fc:20:55:16:ce:bb:f3:b5:e5:
                    7e:9b:d4:48:c0:4d:04:da:2c:c5:1a:a2:c2:3e:aa:
                    53:0d:44:38:83:74:c2:ff:8c:11:c9:45:a4:e6:3e:
                    c3:94:e6:dc:1a:23:85:ec:47:f6:9c:dc:36:32:27:
                    ad:a2:96:98:44:04:27:2b:5a:19:3a:99:7e:d3:94:
                    79:11:f1:9c:cb:c3:00:e5:af:0d:48:25:12:fd:6a:
                    58:4a:e3:4b:27:d5:aa:a7:4b:95:f4:9a:5c:c2:a5:
                    da:b5:01:c7:1f:b4:8e:7d:a0:23:48:38:70:e4:e6:
                    82:ca:ac:29:2c:25:2f:77:f6:12:08:2a:73:69:76:
                    a9:b2:9c:7c:55:8c:1e:16:1a:fb:a3:c9:14:da:02:
                    f2:1e:ef:e9:55:c9:33:7d:0b:53:6d:34:ed:b7:0d:
                    07:6c:73:c6:03:e9:81:58:a8:1e:86:74:3e:50:94:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F6:72:C7:48:64:9A:BB:89:D0:1D:99:BC:76:EE:12:C8:33:3D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4438849-8a4b-37d2-ba38-66153c655695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8b0:4015::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:22:5d:41:7d:ad:76:1b:7e:78:3e:7e:af:d9:db:50:ad:dd:
         07:d1:0c:1e:bd:05:55:2e:a7:16:28:f8:d8:13:a8:18:a8:d5:
         73:21:09:98:7d:8d:92:fc:89:3f:21:57:c7:c7:24:d1:08:01:
         05:7f:3f:f7:0d:9a:24:5c:b3:47:f0:9c:b5:0d:09:bd:41:ff:
         85:30:72:e3:d3:22:d9:cb:19:1d:07:b1:9f:f0:f2:37:0b:07:
         e7:d1:77:41:d3:82:a8:c4:18:bc:c1:22:5b:3a:a9:63:3e:7b:
         b1:79:d9:42:ca:34:4d:d0:61:2c:97:c9:96:09:5a:5e:bd:55:
         ea:89:ed:3c:51:05:bb:95:b9:24:54:7c:e9:a5:e4:be:57:8e:
         6b:46:47:b0:05:32:45:9f:cc:f3:ae:42:bc:55:64:a6:2d:2d:
         c1:8e:39:84:d9:d4:07:26:29:c9:d2:11:00:55:0a:2c:5b:d5:
         84:81:76:27:dd:d6:cb:7a:93:9a:f6:44:a6:77:c3:45:d5:28:
         76:47:a6:7e:83:84:92:65:20:8c:6e:40:30:20:ed:8e:43:69:
         48:d5:1e:08:02:cb:e8:ba:cc:cf:07:7c:20:6c:0a:c3:78:3f:
         a1:b5:39:a7:ba:bb:c3:e2:8c:7e:90:78:5c:34:ea:3c:3f:93:
         70:dc:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:17:07 2024 by rpki-client on console-fra.rpki-client.org