Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/ac875a1c-9281-3995-b271-cdb8f627c087.roa
File:                     ac875a1c-9281-3995-b271-cdb8f627c087.roa (raw, json)
Hash identifier:          /JPK+Cks2Rd0OpLXBJaKX1molaMdXMr0/zvCiUkl1dg=
Subject key identifier:   0A:30:86:45:E7:DE:11:90:CC:C4:01:64:16:ED:83:7E:B6:B7:E2:4C
Certificate issuer:       /CN=1e83a5f9-fa06-43d8-bc5f-e73b67992160
Certificate serial:       010D0C9F4328584561285B6CF932397B06E02600
Authority key identifier: 43:FA:C3:B7:1D:27:C1:94:C9:FC:76:50:A8:E1:97:99:C8:E3:3A:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/ac875a1c-9281-3995-b271-cdb8f627c087.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     2552
IP address blocks:        2604:3e00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/1e83a5f9-fa06-43d8-bc5f-e73b67992160.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/1e83a5f9-fa06-43d8-bc5f-e73b67992160.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5b:6c:f9:32:39:7b:06:e0:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e83a5f9-fa06-43d8-bc5f-e73b67992160
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=b338fa1f-5a55-4f81-a775-ddc8bf61bc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:fa:df:03:ac:5a:08:24:0c:df:3a:f1:93:
                    ed:3a:4e:84:63:6e:36:52:cb:ed:5c:04:44:d0:d2:
                    a5:53:4e:9d:28:49:2f:2b:74:64:e7:9b:87:92:bb:
                    00:f9:ea:52:c1:4a:ed:8d:61:16:2e:5b:a2:dd:17:
                    d8:96:a4:9a:f8:87:aa:61:95:a1:ad:cf:71:50:25:
                    e1:25:03:be:61:99:20:d0:ed:a6:d9:cc:9e:15:ea:
                    b0:59:4f:d7:30:ad:20:8a:a6:6c:ff:9d:f9:05:57:
                    f2:da:2b:80:8d:ba:88:e5:58:fb:f2:6f:d9:b1:43:
                    97:98:e7:70:4f:c1:08:00:65:5e:63:2f:e6:0b:84:
                    8c:11:6a:a8:8d:b3:2f:95:10:7c:8c:71:4d:b2:e4:
                    e3:72:e8:05:43:01:ff:5e:0e:75:08:09:fd:e3:38:
                    4a:51:67:f9:86:2a:ac:cf:2f:46:0a:3e:65:d0:5f:
                    73:9e:77:fd:1e:32:a3:11:a9:dc:80:32:84:0e:37:
                    1f:e0:a0:ac:b9:28:bc:00:91:e6:29:08:74:56:86:
                    29:3a:32:00:51:90:91:e5:d5:d0:09:4a:25:bd:71:
                    33:fc:c6:d9:7a:7d:90:ad:5b:4c:21:05:51:72:2c:
                    8b:a8:56:17:ec:2c:cc:8e:e1:37:b9:bd:31:a4:3c:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:30:86:45:E7:DE:11:90:CC:C4:01:64:16:ED:83:7E:B6:B7:E2:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/ac875a1c-9281-3995-b271-cdb8f627c087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/1e83a5f9-fa06-43d8-bc5f-e73b67992160.crl

            X509v3 Authority Key Identifier:
                keyid:43:FA:C3:B7:1D:27:C1:94:C9:FC:76:50:A8:E1:97:99:C8:E3:3A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:51:47:54:31:71:76:46:2d:64:83:b9:2b:71:36:03:0f:cd:
         29:0b:6d:2a:f0:57:e4:4a:8b:62:95:1a:7b:ce:ec:ff:f4:ee:
         28:3b:94:f8:70:b3:0f:93:92:0c:09:ff:55:21:ba:93:2a:06:
         ca:a7:11:09:9b:de:71:b2:be:91:a0:3a:5c:4d:f0:57:56:00:
         e7:e1:76:a5:d3:26:70:ee:9f:2a:3d:8d:cc:cb:18:05:f7:1b:
         07:cb:77:57:f6:4c:11:dd:bd:c1:a1:30:0e:40:84:30:14:bd:
         70:cb:3f:1c:2a:93:7a:11:c1:26:d2:44:19:ea:1c:d4:e7:83:
         f7:f4:ee:09:70:03:88:d2:80:56:73:8b:9b:e4:b7:d6:cc:7a:
         d9:e9:0c:2a:ab:45:87:20:a2:74:ed:55:9e:a7:06:eb:ef:8d:
         ac:f3:2b:2f:86:51:e8:71:e5:8c:11:f2:50:40:36:b7:f4:c4:
         43:d4:5e:ea:c4:6d:ba:ac:6c:64:75:92:7f:bd:0e:77:f2:57:
         e5:3a:f0:8e:f3:fa:49:1f:b5:81:fb:4b:87:53:aa:6d:1f:36:
         db:4c:6f:b2:fe:7a:27:a2:94:99:d0:63:86:36:ee:1a:fa:e2:
         7c:e2:8e:be:8b:ce:af:29:98:17:61:0c:f9:0b:0b:8f:46:71:
         78:f2:e3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:46:01 2024 by rpki-client on console-fra.rpki-client.org