Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/88abbe18-5bbe-3685-9602-70b879733f63.roa
File:                     88abbe18-5bbe-3685-9602-70b879733f63.roa (raw, json)
Hash identifier:          VbDkR8HdJpfPqZNGWkQ4mbM29w6cO5j7EIqRRbxeA6o=
Subject key identifier:   67:AB:9C:E8:1F:DA:25:8A:5D:5B:BE:82:3C:0C:83:F4:C3:32:58:52
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584518B041E15FBA7A3E45913800
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/88abbe18-5bbe-3685-9602-70b879733f63.roa
Signing time:             Mon 04 Mar 2024 14:00:33 +0000
ROA not before:           Mon 04 Mar 2024 14:00:33 +0000
ROA not after:            Sun 02 Jun 2024 13:00:33 +0000
asID:                     8987
IP address blocks:        2601:9202::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:b0:41:e1:5f:ba:7a:3e:45:91:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Mar  4 14:00:33 2024 GMT
            Not After : Jun  2 13:00:33 2024 GMT
        Subject: CN=e69c5213-be2e-478d-b4ff-493d2b1e74ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:16:9e:8e:c4:26:09:16:59:13:55:d7:22:
                    06:24:78:d6:8d:eb:16:5e:84:43:d6:34:ac:25:50:
                    33:b1:01:08:d8:28:42:25:ea:2c:5a:ba:93:e5:8a:
                    ba:19:45:d1:2a:86:18:1a:f1:ad:7f:41:35:22:42:
                    a2:a2:27:69:68:c8:8f:94:eb:61:da:1d:37:1d:f0:
                    85:12:0b:fa:7d:66:30:c0:2a:4c:50:7e:ad:80:65:
                    da:7b:dd:28:60:d1:a7:96:48:23:32:d1:7c:43:de:
                    39:87:54:7c:c3:b3:71:58:03:8c:53:42:03:31:2a:
                    7f:74:0e:4d:87:4c:21:56:19:d0:1d:06:c6:7d:fa:
                    da:e7:7f:22:77:67:73:64:9d:0d:a3:61:01:2d:32:
                    3d:3f:77:ce:27:52:7a:f5:e8:27:ce:5e:d0:92:45:
                    5a:0d:8e:49:3c:23:dd:02:da:11:d9:75:79:19:e3:
                    41:5b:30:39:b9:e0:3a:3d:54:dd:4e:89:ba:74:97:
                    f9:b8:4a:04:c9:de:df:81:b7:e1:2b:e2:e8:ba:12:
                    83:7a:db:69:7c:10:5d:4f:d1:63:8d:b6:45:70:b9:
                    57:28:38:c4:c4:e4:49:42:36:83:f1:96:21:63:0f:
                    31:59:f8:7a:79:23:6b:61:c1:b7:0a:d4:fd:b9:0f:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AB:9C:E8:1F:DA:25:8A:5D:5B:BE:82:3C:0C:83:F4:C3:32:58:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/88abbe18-5bbe-3685-9602-70b879733f63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9202::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:3b:de:5f:c7:3e:e6:7c:7f:b6:75:43:7d:02:fa:2c:06:09:
         33:0a:15:41:f2:a9:7c:09:72:a1:dd:4d:c0:a6:21:50:db:89:
         31:c1:56:23:6f:91:7d:a6:d4:2c:73:20:e3:b9:27:ad:1d:f1:
         e4:bd:58:8b:49:b4:54:fb:8c:fe:32:7e:b3:7c:e3:40:d9:83:
         a1:0f:73:30:be:1a:46:a0:89:cf:7f:7c:a3:ce:3c:2b:0d:77:
         86:e4:15:57:62:f3:9f:7a:b6:e3:d5:b0:99:7a:2b:22:76:83:
         07:a6:80:2f:60:57:54:7f:d0:6c:65:34:da:69:47:d4:c0:b1:
         5a:da:8c:18:45:7b:64:fa:c7:f6:29:e3:38:37:40:db:b0:20:
         74:8b:df:dd:f8:5d:df:59:8d:32:c8:0c:5d:63:c2:7c:a5:8a:
         c7:bf:83:8d:ec:30:33:7e:e9:61:29:eb:b4:89:a3:76:70:b2:
         64:1f:09:25:7b:4e:62:8e:99:19:13:4f:b8:b0:d4:fe:05:6b:
         05:2e:df:26:c9:19:5f:b4:e4:01:9a:c6:21:b0:88:7e:75:af:
         d4:00:eb:0f:4a:1a:10:13:b4:45:29:88:1f:6c:2b:7b:32:aa:
         4e:6c:4c:8d:bd:10:a5:21:1b:3b:93:21:43:32:81:03:a1:7b:
         a0:8d:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:21:47 2024 by rpki-client on console-fra.rpki-client.org