Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/c27b79ae-62b0-3f53-9608-18a1438b18ea.roa
File:                     c27b79ae-62b0-3f53-9608-18a1438b18ea.roa (raw, json)
Hash identifier:          eRtMdJWXjN60Oor+LOZobDfAutHPXeI2zOt20haoo2w=
Subject key identifier:   91:1E:49:8E:E9:41:A4:5C:C8:F8:CC:6C:34:95:14:6D:9B:2E:38:22
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F432858453B77F461AE54C45B40205680
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/c27b79ae-62b0-3f53-9608-18a1438b18ea.roa
Signing time:             Sun 17 Mar 2024 01:00:26 +0000
ROA not before:           Sun 17 Mar 2024 01:00:26 +0000
ROA not after:            Sat 15 Jun 2024 01:00:26 +0000
asID:                     400097
IP address blocks:        2606:3d40:1c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:77:f4:61:ae:54:c4:5b:40:20:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Mar 17 01:00:26 2024 GMT
            Not After : Jun 15 01:00:26 2024 GMT
        Subject: CN=712c2e21-cc47-4224-b581-c0b4c45fe60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:45:ea:f7:4e:a6:c8:04:8d:d0:76:81:8e:
                    1f:35:e2:02:9c:70:c3:f9:2d:c3:13:00:5c:f8:58:
                    bd:c6:c4:d3:3a:37:26:24:9a:f5:66:c7:a0:f3:dd:
                    67:80:b3:a8:f7:09:b7:a8:a4:6d:44:17:db:a7:23:
                    df:a8:fe:f4:05:e8:0c:c9:2d:7a:b5:09:c2:a0:c9:
                    9b:88:5d:5c:d1:07:64:39:07:c7:bb:54:20:2a:1c:
                    95:19:67:ef:2f:c4:4b:05:d9:db:a9:4c:b4:5a:97:
                    c0:bf:c7:2f:59:f3:36:0b:22:9f:eb:45:54:50:89:
                    9f:64:a8:98:64:5e:bb:28:c1:92:0f:9f:25:f6:02:
                    13:cc:4f:2b:33:16:06:75:8d:fc:45:82:78:48:6b:
                    0a:8c:ca:4f:78:58:74:a6:20:66:cb:a1:6c:cd:58:
                    c2:31:0f:62:63:cc:14:af:19:52:a9:21:d5:15:0f:
                    4a:29:1d:2a:fc:41:82:35:34:d4:a5:c2:d8:fc:f1:
                    47:77:c5:0e:15:87:c8:ac:d6:93:a4:fa:f4:e4:ac:
                    58:5d:c7:20:d4:4d:96:b0:6a:e2:de:1c:de:3e:7a:
                    64:ab:cf:e7:06:04:ed:4c:d2:b9:53:95:ec:b4:a3:
                    6b:8f:6c:3f:4f:05:56:01:ae:09:3a:d2:22:2c:c1:
                    49:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1E:49:8E:E9:41:A4:5C:C8:F8:CC:6C:34:95:14:6D:9B:2E:38:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/c27b79ae-62b0-3f53-9608-18a1438b18ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:22:7e:db:14:b7:57:aa:3e:79:05:c1:14:04:6b:6d:3f:5b:
         f9:46:26:5a:fb:fd:10:fa:eb:bc:dc:c4:5c:fc:ef:5c:46:b1:
         95:6b:68:e6:d5:23:78:c9:b7:38:5e:86:f1:59:dd:6f:f6:56:
         47:40:d8:da:c0:a6:19:49:4a:41:b5:14:8d:85:36:ed:48:c6:
         42:a8:af:c5:53:73:73:c5:7c:9e:14:e1:9f:f5:b3:f6:42:df:
         45:2f:49:4d:08:90:6d:cf:eb:9b:62:f1:12:2f:7e:cc:7f:db:
         69:55:69:d3:a4:06:77:86:2b:03:0b:cd:d8:fe:d7:48:68:f9:
         a8:a0:32:d5:0f:92:97:15:29:08:35:da:13:36:5d:86:f0:0d:
         6e:26:43:dd:c0:2b:2b:94:62:1d:29:2c:07:0d:ab:6d:a6:af:
         03:19:43:14:58:a0:39:2b:28:fa:4a:d1:0b:4d:b9:6f:b9:b2:
         5d:c5:00:ab:3d:46:1b:4c:c5:3d:81:d5:c1:7a:49:d5:71:cf:
         84:1d:14:96:ad:0b:18:07:36:d1:d8:c3:88:55:e0:67:aa:65:
         a7:44:4d:76:4e:63:64:5d:dc:42:04:97:33:7b:22:af:ec:5f:
         e8:17:32:a6:28:d1:9a:f8:e1:55:e7:95:bf:52:73:c7:f0:88:
         58:fb:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:50 2024 by rpki-client on console-fra.rpki-client.org