Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52952f2b-df43-3965-a169-268a2f137712.roa
File:                     52952f2b-df43-3965-a169-268a2f137712.roa (raw, json)
Hash identifier:          I9vHiz8U0kWX4FYjora+hWDoie+HAuuDx+Qk28MB30Y=
Subject key identifier:   2C:26:7F:56:8F:03:60:5C:52:07:94:76:08:AE:C1:02:CA:30:6C:09
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB2F09C2C5BFBDEDB6FD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52952f2b-df43-3965-a169-268a2f137712.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        2601:845:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:2f:09:c2:c5:bf:bd:ed:b6:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=5de0e517-f9be-459e-a3e2-b2870a618c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:bd:ef:86:bc:82:77:39:4f:4c:89:bf:92:
                    0d:a7:c8:cc:b1:3c:09:e1:eb:89:3d:06:22:3c:2f:
                    3b:93:37:86:0f:a4:5e:6e:ae:b2:98:33:8e:65:ae:
                    f2:03:24:52:66:10:6d:1f:21:e4:4a:7a:d5:a4:c6:
                    e7:c0:2c:64:54:96:cf:31:b6:1b:1d:d3:86:d2:c1:
                    3a:12:16:51:85:04:34:64:eb:f4:df:d5:39:1b:35:
                    e2:e2:3a:85:89:5e:6b:42:31:6d:31:80:c1:ff:33:
                    80:c1:66:0c:1b:33:48:48:05:83:6a:18:9e:95:e3:
                    74:ab:b4:50:8c:fd:af:fc:27:35:1c:ee:61:67:32:
                    65:fb:40:0a:84:6c:20:5f:42:40:4b:c9:c0:67:df:
                    93:01:89:59:e1:6a:38:c2:bc:d2:39:84:7d:ec:9d:
                    ff:03:d3:b6:8e:59:3e:2d:3b:f3:79:eb:27:60:be:
                    ea:29:65:6f:1d:90:39:7a:c8:79:a2:83:d6:5f:da:
                    c5:19:0c:16:7f:75:ed:d9:0b:87:ee:85:22:13:55:
                    44:95:5c:a9:58:2a:80:af:ad:62:de:7b:e4:18:b3:
                    9b:a4:67:42:bf:0a:fb:0a:e6:3f:9c:8b:0a:15:58:
                    0d:c1:62:f9:b9:f7:35:1a:b1:02:9b:00:01:10:f3:
                    8a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:26:7F:56:8F:03:60:5C:52:07:94:76:08:AE:C1:02:CA:30:6C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52952f2b-df43-3965-a169-268a2f137712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:845:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c9:c7:c3:78:4e:59:2e:51:d2:5f:9d:d3:4b:d5:63:db:da:
         6a:c7:b1:c5:5e:51:fa:20:5c:52:99:9c:08:9a:c8:62:84:e0:
         05:dd:f9:2b:2d:e9:97:e9:ac:b6:df:53:c3:fd:dc:85:19:fd:
         b2:8e:10:6f:46:7e:78:80:6d:b8:7b:aa:4c:06:d4:8b:b5:3a:
         18:66:93:cd:b1:1b:52:13:b6:ef:a4:c5:89:43:83:ba:f8:5c:
         ab:bf:35:7f:7b:5e:1c:e1:ac:25:45:98:a2:be:da:74:eb:44:
         d1:65:b5:a4:a1:48:cc:5b:06:03:0b:f6:52:98:dd:b8:73:35:
         e4:41:f4:0e:0f:f8:e5:ca:46:1e:8c:fb:8e:3a:e9:4b:0e:da:
         f7:6e:7b:62:87:6d:4d:03:a7:99:09:7e:f0:a9:36:c0:ab:e5:
         fe:c1:cc:d8:e7:86:c5:3e:e5:74:fd:7b:38:55:aa:da:fd:a6:
         69:e0:d8:de:22:de:b0:a1:c2:88:de:d5:53:89:47:6c:dd:ac:
         40:da:0a:81:40:38:e5:be:87:fb:64:2e:75:6d:bd:6c:e7:c5:
         92:37:ee:bf:df:33:79:7c:90:37:fd:46:69:4d:26:3d:a6:5b:
         ff:a7:10:d4:9b:8d:84:34:c0:a5:77:b6:47:06:29:ba:d9:fb:
         af:5b:e6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:38:53 2024 by rpki-client on console-fra.rpki-client.org