Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa
File:                     54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa (raw, json)
Hash identifier:          23auY9OAnSf7QCIZByncHCEqQVZ+g+y9Xm44LCD05v0=
Subject key identifier:   58:68:E6:AA:17:5F:89:F3:63:3B:08:1D:9B:AD:51:2F:BB:93:BC:10
Certificate issuer:       /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Certificate serial:       010D0C9F432858452AB7E23B93AB7549367ACF00
Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     14939
IP address blocks:        2604:5000:1000::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:e2:3b:93:ab:75:49:36:7a:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=a52a6cd6-96ed-474e-af2f-faf63aaa655d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:bc:65:01:66:fc:2d:b4:39:af:7b:bd:a2:
                    85:c1:af:fd:56:8a:b6:0a:e4:8d:09:0c:56:e7:84:
                    09:c2:47:5b:16:39:0f:9a:35:06:39:c3:24:c1:a4:
                    6b:7b:dc:39:b5:0c:af:14:a6:d8:59:0f:43:57:4c:
                    94:d9:7a:ad:3e:3c:e4:ca:e8:8e:1d:43:a6:be:2e:
                    c4:48:5d:12:15:e9:30:de:10:5a:f9:93:40:4f:dd:
                    af:81:be:a4:f4:ef:ea:54:ec:4f:15:f8:f5:41:89:
                    51:8f:15:47:0a:d6:10:15:de:46:50:ab:b5:91:5f:
                    fc:b2:18:eb:03:d1:28:78:3d:34:71:19:13:10:07:
                    c4:43:29:d8:85:62:df:02:04:60:46:76:b9:c8:3b:
                    98:88:91:5e:87:04:4b:5d:c7:09:ef:f4:cf:6e:75:
                    87:be:c6:42:0e:07:bd:8c:03:38:00:da:10:41:04:
                    e3:bd:75:99:7f:7c:d3:e1:93:21:77:95:05:f8:2f:
                    1d:ae:aa:b9:2f:61:d1:81:da:29:ce:b0:2b:8a:3e:
                    48:25:44:04:2a:96:00:6d:e9:4f:65:22:32:de:83:
                    e6:22:4a:0f:bc:7a:dc:c5:0f:88:6c:3b:a5:48:89:
                    46:ba:96:5f:19:69:8e:07:75:a6:b9:f1:ef:ca:6e:
                    69:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:68:E6:AA:17:5F:89:F3:63:3B:08:1D:9B:AD:51:2F:BB:93:BC:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl

            X509v3 Authority Key Identifier:
                keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5000:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:28:08:c4:f0:81:75:ae:66:54:d5:ba:dd:f5:1d:13:5c:55:
         f1:97:7d:33:67:55:c4:22:6a:2d:49:72:6e:da:b9:d9:8a:ff:
         15:d4:04:d2:79:9e:8b:57:3e:5f:28:99:0b:c9:51:7f:be:c5:
         a6:69:af:82:0a:47:ea:5a:1d:0e:78:4d:76:db:cf:ff:49:c0:
         e3:08:af:34:75:8d:cc:b6:8b:aa:6c:9a:1d:e1:fd:14:f0:b8:
         35:b5:3d:31:96:ce:e0:5d:c8:67:0c:a8:41:68:a1:f1:30:18:
         9d:2a:3d:85:4a:b8:95:c2:03:d3:0c:21:35:e4:96:8b:62:b2:
         6d:53:19:63:af:97:80:27:01:d2:1a:fa:ff:c8:9e:dc:5b:71:
         6a:93:2e:6c:85:5e:3d:76:51:cf:db:69:81:b8:ce:47:e0:db:
         02:3b:53:51:15:58:ac:e6:21:2d:c7:7b:b1:cd:a5:9c:79:1a:
         5a:26:9e:50:4f:d2:b3:db:e6:56:52:7a:b1:99:77:26:8f:b7:
         08:c5:13:b7:e3:94:ae:f6:21:0a:a3:5e:82:32:25:ee:b3:2f:
         c7:0d:30:d3:66:b2:13:af:61:69:40:26:a8:b1:70:6e:c9:77:
         b1:6d:9c:86:1f:a5:80:3c:b4:35:4c:d7:ed:3b:3a:42:dd:08:
         6c:26:66:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:22 2024 by rpki-client on console-fra.rpki-client.org