Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/ebee0977-640d-3d99-96dd-ce85b00ed859.roa
File:                     ebee0977-640d-3d99-96dd-ce85b00ed859.roa (raw, json)
Hash identifier:          /Sw5c3z9KxXRKuOJ1IIWptJSV12JRfPjdEUVsIxwfiw=
Subject key identifier:   EC:A8:90:1A:B6:EE:0C:7A:73:56:45:54:15:6E:DB:C9:F7:50:D1:F3
Certificate issuer:       /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial:       010D0C9F432858450C202034A328C6988F1B22C0
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/ebee0977-640d-3d99-96dd-ce85b00ed859.roa
Signing time:             Thu 29 Feb 2024 02:00:27 +0000
ROA not before:           Thu 29 Feb 2024 02:00:27 +0000
ROA not after:            Wed 29 May 2024 01:00:27 +0000
asID:                     29169
IP address blocks:        2604:3400:ca01::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0c:20:20:34:a3:28:c6:98:8f:1b:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
        Validity
            Not Before: Feb 29 02:00:27 2024 GMT
            Not After : May 29 01:00:27 2024 GMT
        Subject: CN=f5c0b6da-4631-4001-b1f6-594f613c9a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:32:c1:47:ef:cc:bc:08:70:35:18:95:50:29:
                    ab:f0:67:95:b4:af:10:e1:1a:0c:e6:ce:82:69:0a:
                    2c:72:87:7e:ef:57:b5:b8:e6:55:b2:bf:42:86:27:
                    f2:8c:b3:94:01:81:96:e1:eb:9a:dd:9b:c3:5a:1f:
                    a2:32:26:9f:89:d4:96:6f:f5:ab:aa:a3:e3:14:cc:
                    1e:f2:74:53:90:1c:54:49:a3:e1:04:47:03:29:25:
                    40:82:2f:52:4a:19:85:c4:81:4b:a9:82:07:a8:f2:
                    9f:73:fa:71:d0:65:e9:1b:49:7f:5d:71:ab:29:c5:
                    c4:e0:0a:73:ad:2a:92:66:4a:2e:ba:ca:be:92:c3:
                    ce:40:0d:0e:56:74:b8:b8:f5:11:05:30:a1:9a:33:
                    cc:67:43:be:dc:42:6c:86:87:b7:29:44:ac:65:79:
                    25:00:f8:3e:a2:69:10:5e:fd:a4:d9:c3:41:db:61:
                    bd:76:97:a5:49:d9:fd:39:b7:27:91:9a:fd:b6:00:
                    de:55:d1:0c:fc:89:e1:de:c0:a1:54:ee:37:b8:13:
                    03:3d:27:5e:e7:65:0c:a1:88:c3:2f:bb:80:c9:25:
                    2a:0e:59:3f:7b:ce:bb:65:88:1e:50:d3:4e:2d:77:
                    a6:90:27:fb:c8:40:a3:c6:e8:2b:fa:33:cd:9c:8d:
                    3b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A8:90:1A:B6:EE:0C:7A:73:56:45:54:15:6E:DB:C9:F7:50:D1:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/ebee0977-640d-3d99-96dd-ce85b00ed859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3400:ca01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:14:31:75:9a:80:68:ed:98:c4:0f:f5:5f:18:3c:31:34:87:
         92:bc:d5:5d:25:66:f4:c3:a1:76:d6:b6:71:ed:ee:90:5c:80:
         93:40:72:13:3a:95:ea:a4:be:b9:76:32:90:77:1c:1b:2b:ef:
         ba:41:0e:1b:c8:9b:4b:e0:a3:23:4b:06:f8:c4:52:14:fe:9a:
         7f:a4:df:cf:f0:40:5e:19:29:c9:0c:55:d4:77:00:62:78:63:
         99:20:b8:46:b4:35:86:95:2c:25:89:d2:d5:48:10:dc:d5:02:
         09:31:1b:47:29:fa:e9:25:da:14:a2:ab:a1:f5:b3:56:c8:7a:
         a4:3f:e1:51:1d:ba:8c:72:4c:30:03:ee:72:a9:a7:f1:51:78:
         87:aa:f3:96:a6:d2:1e:1f:88:82:a5:23:94:be:3c:91:48:97:
         de:24:fc:93:7e:3d:aa:68:82:d1:af:43:e0:94:b6:c1:23:23:
         09:bb:7e:88:f0:06:4e:76:e0:3d:bb:47:f5:69:68:0d:bc:b8:
         fb:59:0e:c7:5a:61:36:c0:2a:5e:84:39:d8:b3:93:10:46:b7:
         64:9b:64:15:3b:e7:2c:fb:ab:7f:51:49:65:45:99:d0:23:c7:
         d9:9b:1a:80:da:2f:1f:1a:58:68:b0:ec:08:da:4b:42:3e:78:
         0f:66:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:28 2024 by rpki-client on console-ams.rpki-client.org