Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa
File:                     35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa (raw, json)
Hash identifier:          1kj/+eAdi+ZICpO2Gk5VVCI4quITlDzAkhJMKNVys2Y=
Subject key identifier:   F2:98:2E:DC:8D:70:8B:B1:21:91:69:77:FF:BD:30:3C:70:21:4E:BB
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F43285844F895581676BAD7721CD42380
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     12212
IP address blocks:        2605:8900:f000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:58:16:76:ba:d7:72:1c:d4:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=21735c34-9839-4adb-b8b3-6bb24f7d5b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:f3:3e:10:d1:1a:b4:3a:ea:99:2f:18:f4:
                    8f:86:43:79:d1:2a:95:fd:68:61:9d:f8:c1:52:58:
                    7b:1c:e9:ac:5d:bb:f7:01:c3:2c:a6:f1:7f:68:a3:
                    b5:07:12:73:dd:3b:b8:26:50:fd:22:d9:5b:09:64:
                    d9:63:da:4d:e6:36:75:f2:da:c4:ff:0e:c3:d2:07:
                    56:b2:1b:2d:ef:6e:c0:2c:0e:fc:ec:98:e7:eb:94:
                    e7:0e:35:96:ed:43:c6:82:5d:1a:c0:d2:37:54:88:
                    61:7c:e1:e4:9c:4b:a4:41:83:76:7c:f4:d2:3e:b0:
                    3e:51:a1:ad:eb:70:a5:0c:76:87:37:b3:12:80:aa:
                    64:01:7b:06:ab:ca:4a:ed:b8:88:8d:2e:f5:70:de:
                    d5:1c:64:22:4b:a9:1d:1a:13:fa:c5:18:54:37:5f:
                    cc:39:0d:3f:07:6d:42:f0:8d:79:13:f4:3a:5c:7b:
                    96:df:30:1e:8b:3f:bd:4a:98:3a:14:d8:0b:ab:8f:
                    a9:8a:49:7f:d1:97:a8:bf:2c:39:a2:5b:6f:bc:fb:
                    aa:8e:81:37:4f:42:77:62:10:ae:2d:e6:7c:2c:33:
                    c1:bf:79:46:db:cf:b7:e9:c3:88:a3:06:a4:26:61:
                    57:25:25:58:d4:c5:d6:0e:47:d3:36:95:c6:82:d2:
                    7c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:98:2E:DC:8D:70:8B:B1:21:91:69:77:FF:BD:30:3C:70:21:4E:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d3:ad:d7:2b:dc:f1:05:dd:aa:7f:8b:8c:8e:11:cc:78:6d:
         e9:1e:b3:af:92:6f:c4:81:27:2a:42:20:a9:2f:af:4f:e8:61:
         20:c2:d2:f4:e2:a2:4f:32:91:5d:2a:8c:d5:01:bb:43:07:4d:
         21:12:dc:3a:76:10:a4:7b:e9:78:25:5c:03:b7:17:7b:fd:b0:
         ed:34:dc:1d:bf:db:af:cb:95:e7:5e:79:59:5e:8e:05:56:d5:
         3d:d8:66:8b:ae:88:23:d7:2e:19:b6:3e:be:54:e7:a2:c7:ed:
         37:e6:38:49:8b:03:56:88:59:e3:23:85:2b:78:9e:44:5c:ce:
         47:f2:4a:3d:a0:75:07:d9:e8:b9:1a:02:a0:99:94:e2:9c:69:
         86:fd:47:94:85:a1:66:42:f9:11:0b:8b:db:9c:c9:d5:8e:78:
         a2:ec:74:78:54:ba:5f:90:2b:f7:7e:d5:42:06:9c:b9:51:40:
         92:da:07:f6:40:e8:ba:c6:34:0e:07:05:c4:f0:13:26:4e:bd:
         4e:fb:f8:6f:b3:1f:e6:43:24:70:4a:bb:1f:8f:11:fa:00:1b:
         cb:3a:bd:b8:ae:b3:6c:af:96:5c:f8:d9:68:00:6e:a1:7e:f9:
         0e:0f:5e:6a:23:97:c7:ae:23:18:b1:35:b6:dd:6e:b1:0d:9c:
         c1:a1:1d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:13:35 2024 by rpki-client on console-ams.rpki-client.org