Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/02e76f99-30f1-31f2-8aec-76417ad71599.roa
File:                     02e76f99-30f1-31f2-8aec-76417ad71599.roa (raw, json)
Hash identifier:          8oPQO6/bGnidxaPHZIyeWca/STFz5dNBurEthxha7Z4=
Subject key identifier:   8C:52:5F:02:E2:77:34:B5:53:1F:04:AE:91:6C:F1:83:F3:B4:D2:8A
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F43285845C2DE389BA76EAD3E6E16BE00
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/02e76f99-30f1-31f2-8aec-76417ad71599.roa
Signing time:             Sat 04 May 2024 13:00:35 +0000
ROA not before:           Sat 04 May 2024 13:00:35 +0000
ROA not after:            Fri 02 Aug 2024 13:00:35 +0000
asID:                     22611
IP address blocks:        2605:f400:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c2:de:38:9b:a7:6e:ad:3e:6e:16:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: May  4 13:00:35 2024 GMT
            Not After : Aug  2 13:00:35 2024 GMT
        Subject: CN=00432c9d-8b41-40ff-8dbb-691e03ee4e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:47:dd:04:74:4a:84:63:9b:b1:5f:fe:b0:7b:
                    27:2e:90:56:ee:71:f0:3b:80:de:12:c5:fd:83:b5:
                    74:00:a8:55:b0:dd:ce:23:ee:8c:0a:2f:2d:1d:29:
                    6e:68:c6:10:a7:9a:03:f4:7a:75:31:18:b7:53:9d:
                    9c:d3:5e:f0:6f:93:d9:ca:54:15:85:98:46:f1:4e:
                    01:d3:1b:14:82:b4:aa:08:04:dc:8f:6a:78:9c:16:
                    70:4e:4c:2c:f3:9d:4d:bb:3a:71:b9:75:b2:56:be:
                    33:15:21:4f:59:94:c8:57:9e:5f:11:c1:17:2e:f7:
                    b2:78:13:79:5e:b6:4d:f0:28:33:5d:d4:3e:1c:63:
                    35:d1:6e:58:fd:9b:1d:96:2d:02:99:ae:7b:f9:f3:
                    fa:bb:df:8f:e9:56:34:03:5c:8a:a2:57:0f:a0:1c:
                    ba:81:4c:6a:bb:0a:2c:df:75:86:ee:50:0d:44:37:
                    36:1e:e3:88:02:5f:62:fe:46:9e:3f:1c:7d:21:94:
                    2d:ec:c8:5f:e1:f1:2c:2d:2d:52:25:aa:f8:e5:80:
                    de:16:51:75:e1:bd:2e:af:0b:f8:4b:11:f6:17:93:
                    b5:0c:46:22:44:94:57:89:e5:7c:6e:11:14:14:4b:
                    b1:aa:2f:da:8f:15:15:29:16:f2:11:bb:95:22:49:
                    76:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:52:5F:02:E2:77:34:B5:53:1F:04:AE:91:6C:F1:83:F3:B4:D2:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/02e76f99-30f1-31f2-8aec-76417ad71599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f400:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:1a:0f:53:2e:7d:ba:46:41:4c:3d:0d:b4:7e:fe:05:f6:22:
         52:75:b6:48:f2:92:8c:42:96:1b:6d:5f:21:23:61:f7:e8:ee:
         65:a4:03:91:a7:f9:1d:55:9b:d9:9a:63:13:57:bb:09:73:39:
         fe:fe:0d:1c:58:af:1b:20:8c:17:13:fe:c0:63:77:0d:74:bd:
         ab:2d:54:39:c0:fb:29:fe:be:e8:19:d7:2b:57:d0:52:e9:2b:
         33:78:9b:eb:fb:d3:0f:4d:53:80:f3:f8:b4:ce:77:59:f9:26:
         a5:a9:a6:d3:cd:2f:61:3d:2c:87:1a:41:2d:6b:ac:f0:b1:b8:
         fd:a4:30:16:39:8c:92:85:8e:c6:44:17:4e:97:a3:f3:e9:35:
         0c:fa:8b:b7:0d:ff:8e:26:6e:df:af:b8:09:cd:c2:3e:82:8d:
         d8:de:cd:27:9e:42:9f:78:25:17:68:dc:9c:5b:bb:dd:c1:2e:
         e4:df:95:ba:12:4a:3d:25:0d:e9:0e:99:e0:59:10:c6:75:8d:
         72:70:09:0c:5a:f3:d3:ac:a5:17:3b:f9:65:a8:0b:fe:39:94:
         fd:ad:e2:f9:c7:3e:82:4d:b6:e1:16:72:5f:dc:2a:c7:e0:17:
         ea:14:25:de:09:df:d3:58:85:a6:e4:d2:9d:b5:19:1c:70:68:
         f0:d0:40:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:06:31 2024 by rpki-client on console-fra.rpki-client.org