Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/c843aaab-85c5-30c7-9477-d534aad80663.roa
File:                     c843aaab-85c5-30c7-9477-d534aad80663.roa (raw, json)
Hash identifier:          gE5yu5bbI3sN423sUwBY822EQP83sX1+51SbODqtO04=
Subject key identifier:   10:5E:E8:E6:EC:EE:BD:88:7B:EF:F6:56:78:E3:82:D7:E0:CB:D7:91
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F43285844EECFFB40749166E83904BF40
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/c843aaab-85c5-30c7-9477-d534aad80663.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     23470
IP address blocks:        2605:9880:300::/42 maxlen: 42
                          2605:9880:200::/42 maxlen: 42
                          2605:9880:400::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:fb:40:74:91:66:e8:39:04:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=8f2244d0-0e48-43d8-be85-e1a29e63827c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a3:02:54:ed:e3:e9:e1:96:7a:56:b3:2a:5a:
                    69:0a:98:7b:6a:ce:f5:c1:af:36:05:f2:fa:ac:aa:
                    43:03:21:06:d5:a1:65:f9:af:e8:2c:8c:51:03:6c:
                    ab:82:ab:79:0e:e3:60:4e:34:94:9a:2c:00:dd:98:
                    e2:f2:dd:74:47:f8:86:d8:b4:b1:9d:a9:1b:fb:97:
                    6c:78:a2:72:4b:d2:1a:bd:d9:00:11:a1:bb:40:a8:
                    75:65:da:51:02:78:2f:6f:31:8f:25:83:54:35:b4:
                    58:12:a4:18:c9:d6:04:85:49:6d:d7:f4:c7:bb:59:
                    32:e8:41:5d:96:fd:56:f5:9e:b2:4e:69:16:47:56:
                    93:3a:03:3a:32:3d:66:b9:86:57:c3:95:33:09:c1:
                    18:e9:f4:ae:aa:a1:aa:87:12:97:d9:52:be:65:db:
                    99:5d:05:ad:91:29:b2:01:a9:89:0a:f5:92:c5:72:
                    2b:69:10:58:f6:4f:51:64:eb:39:09:6c:e7:b1:1a:
                    e7:13:cb:ac:35:fa:5b:83:e9:ec:6e:71:21:46:d9:
                    7c:f6:13:8d:74:03:5d:ff:c1:42:78:67:cc:0d:c4:
                    bc:e3:e1:fc:ff:34:7a:c8:82:ea:26:7b:f7:f4:74:
                    1c:33:a3:77:b5:92:ea:cc:c0:70:19:6c:93:a5:a0:
                    c9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5E:E8:E6:EC:EE:BD:88:7B:EF:F6:56:78:E3:82:D7:E0:CB:D7:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/c843aaab-85c5-30c7-9477-d534aad80663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9880:200::/42
                  2605:9880:300::/42
                  2605:9880:400::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d5:6b:86:fb:9d:e3:ea:9a:b2:74:40:e4:40:ec:dd:6c:94:
         2b:d1:22:b3:8d:b3:0f:6f:35:a9:10:16:13:59:ac:71:92:25:
         a7:d1:13:96:02:f1:9d:73:21:79:33:63:a7:d7:13:90:d7:5f:
         9c:8c:48:2d:12:3c:d3:88:9c:87:ba:e2:3b:49:07:74:e2:67:
         74:b9:b5:47:ae:9e:7c:49:91:12:99:4d:39:c5:7a:3d:37:2d:
         98:75:5c:8f:ae:c3:b8:c8:5b:2a:27:be:b5:42:45:ea:8f:f5:
         3b:12:a3:11:e2:25:eb:cd:de:6b:46:82:b4:c6:11:f3:cd:3b:
         45:ed:96:e2:31:34:15:37:19:08:98:32:d9:55:c6:6e:33:b4:
         43:bb:f8:88:3f:7b:6b:b6:c4:56:dd:e5:59:d6:19:9e:27:5c:
         e2:86:97:ce:42:dc:da:bc:29:69:6b:4b:9d:69:a2:7f:53:78:
         12:04:89:9c:f7:47:ac:3f:e3:8d:e6:69:f1:dc:b9:f0:c3:7f:
         5a:07:71:1e:59:04:0b:19:71:d7:5c:67:37:f8:2f:b3:01:90:
         d0:79:cf:6b:14:66:4c:48:0d:3a:5b:04:d7:5d:f5:b3:7e:02:
         94:3a:47:8f:5c:9a:ec:c2:ad:ea:58:70:b7:41:f3:de:0e:e5:
         31:42:f2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:03:15 2024 by rpki-client on console-fra.rpki-client.org