Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/ff174cd6-c78a-3a30-9e52-2b423e908691.roa
File:                     ff174cd6-c78a-3a30-9e52-2b423e908691.roa (raw, json)
Hash identifier:          iM8hMrtnUTKn5lzPV4Q53/7r+YItlrNWDBfyd8Kl2kQ=
Subject key identifier:   1F:89:36:D4:76:B0:06:5B:BC:84:02:53:DE:4E:F7:47:F9:F3:C5:A6
Certificate issuer:       /CN=f8ffd4ba-11b7-4c10-9a14-2850086d1269
Certificate serial:       010D0C9F4328584558C8344CF3FFC2ACD24C2C80
Authority key identifier: E9:4F:AA:B0:4A:25:49:EF:B7:29:CB:C7:75:2F:28:44:8D:4C:EC:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/ff174cd6-c78a-3a30-9e52-2b423e908691.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     10546
IP address blocks:        2620:0:1a30::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:34:4c:f3:ff:c2:ac:d2:4c:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ffd4ba-11b7-4c10-9a14-2850086d1269
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=fd49f965-d3ed-484b-8f50-c3bb9a4ce6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:75:ec:02:4e:40:c5:29:03:a9:74:6b:71:fd:
                    1e:39:6e:88:3d:09:2a:56:cd:8d:8b:c6:f1:b2:d5:
                    1d:18:0c:db:a3:c5:b3:67:66:ba:1d:c1:6d:d0:1c:
                    a3:9e:ed:8f:f6:1c:3a:e0:e2:dd:12:81:f9:15:e1:
                    2d:f3:13:a3:3f:84:6c:07:51:de:90:f8:87:57:f9:
                    cf:67:3d:dc:7f:2a:2d:23:cc:35:66:71:1f:d0:66:
                    41:fd:96:d5:5e:dd:88:b6:00:da:84:d7:53:07:b6:
                    43:5b:0e:fa:00:f8:f4:29:ed:e2:c0:e6:cd:31:0d:
                    f0:ee:a0:c4:f3:d6:d1:b3:bc:36:17:c4:68:41:bc:
                    6c:fd:b5:0e:8e:c1:c6:00:36:54:3a:28:ea:7a:83:
                    d4:71:00:cc:5c:34:82:cc:b3:38:d8:f8:3a:72:e5:
                    40:63:d4:b0:d1:9b:dc:99:d8:bd:21:84:0d:58:fb:
                    6c:e2:a1:dc:4d:fd:8e:36:ec:48:b6:37:18:9f:d7:
                    9d:d2:96:b6:9d:51:89:1d:2c:2c:e9:fc:18:8d:22:
                    f6:ec:a8:d0:37:6e:00:3e:9a:82:fa:ec:94:cf:4f:
                    85:79:b1:50:fa:b9:c5:59:bc:d4:78:d7:7b:09:19:
                    96:54:5c:24:6e:b9:63:13:c4:5b:cf:d5:d1:4d:bf:
                    0b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:89:36:D4:76:B0:06:5B:BC:84:02:53:DE:4E:F7:47:F9:F3:C5:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/ff174cd6-c78a-3a30-9e52-2b423e908691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.crl

            X509v3 Authority Key Identifier:
                keyid:E9:4F:AA:B0:4A:25:49:EF:B7:29:CB:C7:75:2F:28:44:8D:4C:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:1a30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:21:54:af:ec:9a:a0:eb:1a:d6:86:c8:ec:f9:18:48:e0:73:
         ba:2c:28:5c:eb:9b:da:cf:6a:83:86:d3:fa:cb:d1:86:7c:fd:
         da:e2:69:9c:7e:1d:ec:61:9c:4a:25:83:03:af:1f:81:00:ba:
         3f:82:e4:d4:db:56:a9:34:d6:e6:ca:52:e6:c3:35:1e:59:5f:
         a7:cf:4b:dd:db:5f:72:a9:56:9e:11:66:76:8d:59:aa:b4:e5:
         6a:4c:fd:8f:3f:b9:74:a8:5c:78:14:28:5a:cd:c1:c0:8f:ed:
         46:04:0b:50:a6:ed:c8:90:3f:19:48:7a:22:cf:35:72:b8:c2:
         79:23:53:bb:71:c8:e5:c9:b6:3a:3b:72:b8:38:a5:b8:e0:e4:
         29:e2:2f:69:4d:7d:0a:41:d8:93:bc:25:54:47:bd:72:12:c8:
         df:04:d7:a3:8f:c0:c5:ee:ce:7b:c0:5b:7e:76:c6:41:6f:65:
         9b:11:c6:b6:e3:4d:bf:a4:80:4b:03:a2:60:3c:fe:6b:5b:d7:
         31:24:27:79:ad:ec:c4:18:78:c7:b0:0f:2e:68:ba:b4:d0:9f:
         22:5d:93:53:39:44:99:81:25:03:af:e6:dd:08:5d:ef:52:6b:
         95:96:d4:90:3a:60:8b:59:02:54:d8:d2:b5:4a:e1:62:25:53:
         6f:cd:ab:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:41:32 2024 by rpki-client on console-fra.rpki-client.org