Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa
File:                     b0c012f4-baa2-3789-9ae9-0736d044aafe.roa (raw, json)
Hash identifier:          v5BVwdxFrb5iVqBSgHSIH979xGFeFwzyxLU/MEuXqhQ=
Subject key identifier:   79:22:A4:5B:31:57:36:84:C7:E9:89:A1:E2:79:3A:3F:3F:BF:12:FF
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F43285845D39E5316EEAA02281BE78E00
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     27281
IP address blocks:        2620:116:800a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:53:16:ee:aa:02:28:1b:e7:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=d9f46ccd-43e6-4772-8516-731f190a19b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:eb:59:24:fc:ec:27:dd:0a:d0:bc:dc:3b:
                    03:24:5d:84:36:59:d5:0d:49:ae:7a:09:93:19:fb:
                    ee:39:a3:bb:af:43:6e:7f:a6:35:9b:40:90:8b:5a:
                    2b:79:14:02:cc:2f:26:3f:a7:94:3c:9a:85:b7:b9:
                    ca:69:7e:f9:4e:f1:6e:2e:4f:d4:62:5d:58:e0:d6:
                    29:a4:9b:30:c8:bf:aa:0c:24:2f:42:84:4a:65:e5:
                    e1:b6:f6:40:f5:02:ea:a8:78:24:04:7b:61:bc:6a:
                    0c:ed:fb:4f:55:bf:e5:0b:22:6c:41:08:ed:25:d3:
                    0e:05:f5:ef:7a:52:8b:27:15:a4:08:22:af:51:73:
                    9e:e5:e6:cb:46:d9:44:5b:64:c8:8b:9c:62:3a:aa:
                    c3:0b:cb:8e:8f:b1:cd:43:3e:f7:e8:26:d6:ac:31:
                    87:18:0b:5c:84:12:69:5f:f6:ab:a6:47:27:29:e7:
                    cd:aa:df:f1:f7:4b:37:0e:78:9a:a6:33:83:a0:03:
                    ff:18:ce:84:76:b8:a1:14:84:93:73:c8:35:b4:46:
                    16:56:2a:c3:73:b6:b1:f6:ca:e4:a1:3f:0b:f8:ed:
                    2a:82:37:aa:bc:07:0b:ff:c6:2f:c0:8b:56:8d:e9:
                    28:2b:77:ca:8c:0d:5f:6a:52:55:a0:5f:07:7e:4f:
                    a6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:22:A4:5B:31:57:36:84:C7:E9:89:A1:E2:79:3A:3F:3F:BF:12:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:2d:7a:38:00:39:f6:74:12:1f:47:d7:30:3f:8b:98:da:dd:
         a7:f6:ae:48:b9:a4:85:2b:ed:a8:0a:aa:98:34:d3:2f:01:23:
         e9:50:05:61:18:c9:21:aa:3e:e5:e5:2a:16:0b:0d:74:b1:a3:
         43:67:fa:aa:cf:62:91:f8:5f:43:5d:55:29:57:cf:36:6e:26:
         25:0d:11:ce:2d:31:6a:a6:63:de:83:bb:b2:40:30:be:88:bd:
         ca:af:39:6c:8d:c3:f5:4e:77:91:ef:be:f4:8a:90:eb:0e:66:
         63:f2:93:45:46:35:a9:a2:ac:4b:e1:93:fe:de:99:43:2c:58:
         03:aa:1f:27:a6:48:ef:a8:46:d8:24:c1:87:06:48:04:48:6f:
         06:47:86:df:a1:d7:ab:6c:54:65:0a:cd:26:0a:bd:0c:18:45:
         4a:c2:01:72:b9:d9:39:15:41:56:85:a8:fd:65:34:ce:e3:2b:
         ac:6a:93:41:7d:b8:59:88:cf:c7:49:d0:20:76:1a:69:5e:a4:
         32:93:cd:62:9f:a6:28:a6:4e:14:b9:6e:2a:d2:9a:aa:29:a7:
         3d:d7:e9:d5:8a:92:be:75:e3:7e:c7:4e:dc:51:03:64:e0:65:
         45:ae:71:71:0e:82:d1:3b:94:53:ca:b1:93:cf:21:71:8b:73:
         6f:b7:94:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:26:09 2024 by rpki-client on console-ams.rpki-client.org