Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d14446fc-6b53-39a9-b4f1-935b4f7038af.roa
File:                     d14446fc-6b53-39a9-b4f1-935b4f7038af.roa (raw, json)
Hash identifier:          pIa2/L646+6nVGbAr1c7soZbF3I3g0Cl9JJ/+9M3Ing=
Subject key identifier:   36:22:D9:5F:8E:C7:C7:65:F3:D3:1C:32:8F:02:16:A5:B1:6A:4C:97
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F43285844F2FFF38D71EEEA6BBC9EAC40
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d14446fc-6b53-39a9-b4f1-935b4f7038af.roa
Signing time:             Tue 20 Feb 2024 02:00:26 +0000
ROA not before:           Tue 20 Feb 2024 02:00:26 +0000
ROA not after:            Mon 20 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        2602:fdeb:37::/48 maxlen: 48
                          2602:fdeb:38::/48 maxlen: 48
                          2602:fdeb:39::/48 maxlen: 48
                          2602:fdeb:24::/48 maxlen: 48
                          2602:fdeb:22::/48 maxlen: 48
                          2602:fdeb:36::/48 maxlen: 48
                          2602:fdeb:40::/48 maxlen: 48
                          2602:fdeb:32::/48 maxlen: 48
                          2602:fdeb:33::/48 maxlen: 48
                          2602:fdeb:21::/48 maxlen: 48
                          2602:fdeb:34::/48 maxlen: 48
                          2602:fdeb:35::/48 maxlen: 48
                          2602:fdeb:23::/48 maxlen: 48
                          2602:fdeb:26::/48 maxlen: 48
                          2602:fdeb:20::/48 maxlen: 48
                          2602:fdeb:28::/48 maxlen: 48
                          2602:fdeb:25::/48 maxlen: 48
                          2602:fdeb:30::/48 maxlen: 48
                          2602:fdeb:27::/48 maxlen: 48
                          2602:fdeb:31::/48 maxlen: 48
                          2602:fdeb:29::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f2:ff:f3:8d:71:ee:ea:6b:bc:9e:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Feb 20 02:00:26 2024 GMT
            Not After : May 20 01:00:26 2024 GMT
        Subject: CN=786c97cd-f800-42c4-9101-8a423f2588b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:02:ee:90:35:9b:d6:cd:7b:44:2e:45:24:d2:
                    c4:35:fc:45:4f:c1:3e:23:0a:7e:1f:a3:ba:8f:14:
                    5b:49:9f:74:fa:e9:f7:18:90:1e:f9:53:fc:db:8a:
                    f5:f8:88:2b:53:59:a5:eb:8e:f1:3f:38:13:86:4b:
                    7f:6b:91:68:3c:0e:0f:b9:9c:c3:55:43:97:c6:a9:
                    0d:d0:ed:0d:ea:89:ad:48:28:ff:a4:64:e6:0c:f4:
                    0c:e8:15:7f:26:60:59:57:e1:92:3d:14:39:4f:0c:
                    00:64:e3:93:67:37:dd:f6:cd:8b:ac:48:84:44:7c:
                    66:d5:16:4a:62:55:39:9e:16:9d:bc:b5:b5:0b:5d:
                    eb:79:f5:3a:56:ab:c4:b0:ae:6b:85:7d:86:74:46:
                    9a:9b:09:56:a0:06:48:ad:d5:52:b9:94:83:1a:63:
                    dc:ed:8f:9b:04:74:98:05:87:5c:df:e2:25:46:b6:
                    cd:3e:a4:09:94:59:16:33:18:e2:d2:51:10:90:4d:
                    91:05:94:73:ec:4c:64:bf:52:59:e8:1d:fa:ea:83:
                    b0:c6:63:0b:b4:0f:c3:74:94:aa:56:cb:e1:4c:be:
                    93:93:7e:d1:88:71:f6:74:13:84:69:e5:37:98:90:
                    f4:2b:88:20:a2:c5:b3:9b:f8:78:5e:aa:26:4f:e7:
                    87:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:22:D9:5F:8E:C7:C7:65:F3:D3:1C:32:8F:02:16:A5:B1:6A:4C:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d14446fc-6b53-39a9-b4f1-935b4f7038af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:20::-2602:fdeb:29:ffff:ffff:ffff:ffff:ffff
                  2602:fdeb:30::-2602:fdeb:39:ffff:ffff:ffff:ffff:ffff
                  2602:fdeb:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:5d:11:58:4b:b0:42:15:6d:ea:32:55:63:a8:04:dd:b5:2c:
         87:14:5d:3d:46:fa:f5:05:18:bd:ab:96:05:ec:98:fa:fd:00:
         de:ec:67:df:f0:72:24:c1:83:06:30:e6:2b:c7:e8:b9:f2:2f:
         52:6a:17:41:fc:c9:25:74:a6:59:57:72:12:db:18:6e:3e:9b:
         5a:68:76:28:be:e6:9c:51:5c:e7:27:38:8b:54:75:6e:aa:96:
         01:9a:db:96:a3:07:ab:4e:20:12:68:54:1f:62:f1:1f:da:ac:
         f3:ee:9f:23:a6:3d:5c:1b:d9:00:41:d2:6d:64:9e:7c:3e:67:
         53:97:9c:7c:fe:84:65:c7:a9:74:f7:29:31:2c:fd:fe:7d:3c:
         f2:6b:85:2f:18:53:7d:e1:4b:de:cc:88:bc:b7:11:6f:a5:20:
         07:18:08:dd:87:a0:32:48:f8:a9:53:c6:fd:19:9a:7b:50:99:
         e9:76:3e:9f:87:17:12:4b:cd:1a:d8:7f:9f:f6:99:20:ba:2f:
         fe:4e:f1:10:d9:73:0e:c0:3c:a2:c3:20:74:d8:35:92:bb:1c:
         33:29:08:01:aa:49:ff:db:54:3c:2a:b9:e3:b2:34:6e:9f:ac:
         95:fc:3e:8f:a8:0e:c1:3b:2c:0f:92:48:e9:58:88:cd:ca:7b:
         81:b3:d7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:10:36 2024 by rpki-client on console-ams.rpki-client.org