Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/93f780c0-9c8e-3aa6-80f1-c7d227eeb84a.roa
File:                     93f780c0-9c8e-3aa6-80f1-c7d227eeb84a.roa (raw, json)
Hash identifier:          x3UxEtMOjQdtw5hZXB/9HtzXdcgMIvxICmIiVi391Xo=
Subject key identifier:   55:57:2E:44:9A:E8:D1:14:7A:78:84:4D:22:CC:0E:BF:FD:EC:A3:3B
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F43285844FB60084D21D7DEFB00DD8300
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/93f780c0-9c8e-3aa6-80f1-c7d227eeb84a.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     8075
IP address blocks:        2620:147::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:08:4d:21:d7:de:fb:00:dd:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=0d673399-0af4-48e3-af06-deded934bf8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e2:a0:f7:81:5b:75:56:23:c3:e2:6c:3b:3e:
                    1f:72:ef:ce:e4:bf:e7:b5:31:bc:7c:3e:3d:ab:3b:
                    ea:3c:29:08:3d:0d:72:22:2f:32:91:c6:5f:f2:51:
                    43:92:a5:fd:17:e8:96:30:15:2e:7e:f1:51:9e:b9:
                    80:e2:de:55:9a:87:10:55:fa:f1:52:4f:b6:fc:46:
                    59:36:ba:fa:58:4b:98:6a:a1:93:ed:e7:c7:1d:ce:
                    fd:8d:91:79:c0:b8:5e:ad:7f:1b:20:87:0d:74:79:
                    7b:0b:89:34:39:3b:1e:e7:9e:a4:f2:e4:8f:ff:e8:
                    2e:5d:8d:bc:c4:54:96:9c:10:97:23:92:58:45:a1:
                    11:29:f4:d9:46:3e:20:92:b2:92:1d:43:0f:08:34:
                    cd:d5:2f:3d:77:da:b6:b6:ea:03:eb:d3:4b:73:52:
                    30:bd:0f:cd:31:04:06:fb:b9:e3:d4:9f:cf:da:8d:
                    b0:55:47:72:62:ec:b7:b3:13:ca:ba:55:25:db:09:
                    15:6f:e2:51:eb:d0:ae:dd:d2:5a:34:4b:5d:c6:cc:
                    fa:34:46:8c:82:ad:e0:73:7f:be:1c:96:27:df:80:
                    b8:12:ba:37:24:60:1e:11:f7:6d:40:b1:8d:01:d1:
                    09:6c:db:6d:f6:92:32:74:89:19:31:b9:62:00:6a:
                    0b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:57:2E:44:9A:E8:D1:14:7A:78:84:4D:22:CC:0E:BF:FD:EC:A3:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/93f780c0-9c8e-3aa6-80f1-c7d227eeb84a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:08:ce:55:a0:9b:de:a6:3d:2e:5e:19:eb:a5:92:9a:36:eb:
         4d:90:43:d0:e7:b8:f1:bd:15:01:34:11:8e:2f:d7:e6:46:d0:
         39:b5:22:c7:dd:a1:19:cf:05:98:56:11:09:42:81:ed:e2:a6:
         b6:16:5b:ca:33:4f:d4:d6:fa:06:16:25:7c:28:b8:1f:9c:08:
         33:73:42:6d:48:3e:8d:f2:d6:dc:2a:6b:ee:51:52:7f:cf:fb:
         56:12:eb:cd:67:1d:f9:e9:09:b3:a5:7b:70:8f:63:9d:ef:23:
         ca:70:1c:7d:94:03:95:3d:64:d5:f7:05:42:b4:91:ce:92:94:
         ec:ef:db:40:9a:c0:f1:c2:82:4e:50:12:fd:8c:72:fc:ae:55:
         5e:34:b0:1a:b5:e1:54:79:76:81:1f:b1:f8:79:35:b0:72:88:
         d6:f4:a7:7c:09:4b:d8:85:e2:92:8d:61:58:03:f2:1e:6c:a2:
         44:3d:8e:be:fb:f6:ce:f4:f6:4e:dc:24:2e:84:eb:33:e2:6f:
         4a:a6:93:4b:d5:46:83:68:d7:d7:35:6f:68:5a:54:55:a3:b6:
         e9:8c:8a:1b:f6:81:1c:99:60:52:89:45:49:a4:05:b7:4a:fa:
         12:1b:c2:57:ba:ea:34:4c:ac:d3:d4:85:be:47:a2:02:c2:77:
         ed:de:38:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:02:23 2024 by rpki-client on console-ams.rpki-client.org