Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/66a861cd-a944-3742-a8bd-e5f91ba0a0d1.roa
File:                     66a861cd-a944-3742-a8bd-e5f91ba0a0d1.roa (raw, json)
Hash identifier:          FW8enkn14nMiuBG06SKTLMC4T7jQaL5mtR9+hZLv+1Y=
Subject key identifier:   BF:88:3F:45:74:D5:22:BE:48:24:E8:BB:33:0B:0F:A0:CC:1E:00:EB
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F432858457FDDD08A7F0E90A45C612DC0
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/66a861cd-a944-3742-a8bd-e5f91ba0a0d1.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     6128
IP address blocks:        2600:4800::/28 maxlen: 64
                          2001:48a0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d0:8a:7f:0e:90:a4:5c:61:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=855f4213-5f1b-48d3-8599-264f94523552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4f:8c:2a:de:e9:0f:bd:37:01:c2:d4:5d:e2:
                    a1:4b:3f:2e:3d:57:db:7e:9b:a5:ac:f8:7d:ef:68:
                    12:b3:8d:9a:67:ab:5e:73:c2:c3:3d:ec:c3:f8:41:
                    1c:c4:ec:af:4d:0d:86:a8:af:aa:c8:21:50:79:2f:
                    34:1c:6e:20:85:70:bb:c7:dc:a8:1d:73:ca:b3:86:
                    cb:91:16:fc:25:06:7d:ac:47:9f:9a:61:6a:b3:9e:
                    47:89:cc:4e:05:f1:7b:9e:38:8a:d3:d4:de:2b:e3:
                    c7:60:f0:c7:56:7b:64:51:f5:77:05:5e:5d:2b:06:
                    39:b9:a6:93:f9:79:b8:a4:16:9d:90:f7:87:06:47:
                    7f:5e:5e:01:ec:b9:b9:de:c3:c9:dd:ba:95:3b:15:
                    ca:48:4f:32:17:c7:08:f0:71:d9:fa:53:ac:01:1a:
                    78:56:04:fa:68:15:d8:cd:cd:0d:f4:3f:ae:54:a7:
                    22:dd:35:a8:ae:20:2b:35:21:62:1a:11:ef:62:fb:
                    55:ea:3d:f4:95:98:5a:62:9c:24:76:4c:e9:ea:eb:
                    09:eb:b0:98:9f:46:19:3b:6f:c1:67:69:53:7c:78:
                    76:29:d8:20:84:62:cd:1b:6b:ca:1e:47:9e:1f:ad:
                    ef:b5:43:5e:fc:49:18:c4:bc:5d:06:de:3c:f0:34:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:88:3F:45:74:D5:22:BE:48:24:E8:BB:33:0B:0F:A0:CC:1E:00:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/66a861cd-a944-3742-a8bd-e5f91ba0a0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48a0::/32
                  2600:4800::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:2b:2c:34:5a:f8:4b:f3:fc:43:15:7e:fa:80:fc:69:42:3d:
         55:e2:f5:22:23:01:d0:90:1b:4e:8f:ac:de:6e:cd:be:76:cb:
         22:f2:82:30:fd:bc:16:b0:b3:42:5f:84:4c:8a:fc:41:78:2e:
         0f:6b:0b:3c:36:a5:54:eb:6d:46:65:b5:97:3a:83:45:d6:4d:
         b2:c6:16:05:8f:e5:84:67:4e:f2:02:f5:35:53:d0:ee:58:2d:
         45:5d:c6:a6:64:ae:e4:a7:8a:53:db:19:10:6a:bc:66:e0:fe:
         07:48:a3:c6:b7:f4:f9:2a:b6:f3:a0:a3:be:07:eb:ef:55:02:
         e0:da:47:fd:5f:b5:30:63:3a:5a:fb:c1:e5:d6:42:8a:61:0d:
         53:2f:96:40:02:29:cf:de:ed:cc:47:b5:e3:ad:d3:39:77:63:
         18:b8:b6:3b:74:86:b6:83:fb:12:3f:07:6a:45:b6:d4:43:87:
         e6:fb:57:25:2f:c7:78:c8:cc:c3:9b:6a:81:d3:2d:f4:3e:a2:
         ad:11:be:b5:5b:1b:3b:e4:d3:df:96:c4:cd:e4:c9:81:0b:07:
         bf:ab:a5:21:ba:1e:6c:ed:ad:37:88:70:e3:d9:7e:fc:a5:83:
         70:49:3b:ee:70:fd:a9:17:70:8e:ca:c5:93:1c:57:c5:dd:5d:
         b3:83:49:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:46:01 2024 by rpki-client on console-fra.rpki-client.org