Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/98f07a54-fd37-366b-985a-6ff2929fd984.roa
File:                     98f07a54-fd37-366b-985a-6ff2929fd984.roa (raw, json)
Hash identifier:          JyJ1msR644EpXN7vCs8B3Tuk0mv9K4d2icWD/hs/Cfg=
Subject key identifier:   34:34:C7:D3:0F:BC:8C:97:6C:23:44:85:31:5F:62:1D:2F:88:6F:A7
Certificate issuer:       /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial:       010D0C9F43285844E66FE4619EDB07C68EB9BC80
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/98f07a54-fd37-366b-985a-6ff2929fd984.roa
Signing time:             Thu 15 Feb 2024 14:00:30 +0000
ROA not before:           Thu 15 Feb 2024 14:00:30 +0000
ROA not after:            Wed 15 May 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        2602:80f:900c::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e6:6f:e4:61:9e:db:07:c6:8e:b9:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
        Validity
            Not Before: Feb 15 14:00:30 2024 GMT
            Not After : May 15 13:00:30 2024 GMT
        Subject: CN=59acedfb-a082-4059-830d-dd7bb82544eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f4:14:31:56:da:07:6c:91:9c:7a:38:12:4e:
                    57:58:cd:6b:d2:e8:75:ad:5d:59:83:e6:23:b3:a5:
                    ec:ff:e0:95:01:e3:2b:39:da:c6:40:3a:80:1f:25:
                    d1:2d:c8:d8:7c:e3:3d:a8:69:ae:f9:37:70:60:83:
                    01:89:c2:2a:ea:a8:98:ca:10:70:3b:05:1d:49:29:
                    09:55:15:72:5d:13:c4:96:0f:ac:8f:b1:9e:ed:0c:
                    91:56:b0:29:72:54:e0:f0:6a:fd:14:72:71:14:3e:
                    bd:86:01:df:e1:55:0a:87:43:63:e6:18:d9:2c:11:
                    e5:fd:9b:c2:60:69:c3:68:26:d5:76:13:a9:d2:44:
                    e8:44:60:c2:70:4c:9d:7c:72:ce:2a:47:ed:40:45:
                    2e:bc:4d:e4:02:5c:48:49:b1:a7:5d:88:82:9e:c0:
                    0e:28:ac:12:82:95:de:19:1c:f3:d5:74:7b:ea:75:
                    11:37:f8:c9:36:81:8c:be:5e:74:7f:a9:62:9a:a7:
                    ac:60:fd:24:ab:5e:cc:4b:d7:77:06:81:c8:fc:e5:
                    11:a9:30:fd:23:0f:e9:8b:1b:03:c0:de:5f:64:64:
                    9f:b3:8d:da:b1:a6:61:de:56:1a:e9:1c:7f:96:2e:
                    45:c2:1e:71:ed:88:bc:9e:b6:04:f1:6c:b7:98:aa:
                    e6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:34:C7:D3:0F:BC:8C:97:6C:23:44:85:31:5F:62:1D:2F:88:6F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/98f07a54-fd37-366b-985a-6ff2929fd984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl

            X509v3 Authority Key Identifier:
                keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80f:900c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:1c:99:21:3d:0b:2f:51:c7:f9:f1:7f:d6:2d:10:0a:6c:84:
         f5:9b:50:85:44:24:09:25:da:39:bc:46:14:4c:e7:4a:a5:73:
         01:21:59:b2:04:c2:3a:63:72:5d:bf:8e:25:a4:00:4a:62:91:
         12:dc:25:3b:e0:66:94:e1:25:2b:a3:52:40:3c:22:7e:71:32:
         ed:7d:28:98:bc:27:00:1e:56:97:d5:11:e6:1b:93:3a:ff:24:
         90:eb:0b:a1:5f:3d:8c:01:35:ea:24:77:9b:f8:0b:45:78:5c:
         93:a5:83:97:2e:2a:e6:c1:bf:c3:e1:91:7f:e6:9c:11:53:35:
         30:0c:74:e2:59:b4:22:06:b6:fa:69:0f:0d:0e:83:9e:7f:f4:
         22:ff:38:d0:c0:6b:1f:e1:8e:73:7f:27:ad:43:90:65:b3:82:
         97:1d:05:49:16:76:af:a3:d3:23:d6:5c:cc:59:92:84:fa:69:
         14:d7:44:ca:e4:55:5a:f3:60:96:ab:29:c9:97:9f:70:3f:e9:
         66:da:80:db:e2:80:0b:24:3c:eb:8d:f0:62:e6:f1:66:12:7a:
         99:ec:30:bf:0e:72:10:77:af:ff:69:45:3e:c4:7b:a2:c5:76:
         54:00:21:56:4b:d5:9e:46:99:d5:e0:3d:ce:3e:90:17:41:4e:
         7d:8a:d3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:37:55 2024 by rpki-client on console-ams.rpki-client.org