Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d73569f9-4fcd-3106-b9df-305e7d5aa263.roa
File:                     d73569f9-4fcd-3106-b9df-305e7d5aa263.roa (raw, json)
Hash identifier:          nakM1B+ujcj0qCR2IIgEr7101xiXQKSqImA09nnUYRQ=
Subject key identifier:   16:3D:28:54:46:4C:7D:C9:59:60:9B:63:05:57:64:07:64:63:11:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC0C0F8CC251DE04337FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d73569f9-4fcd-3106-b9df-305e7d5aa263.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        2603:2449::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:0c:0f:8c:c2:51:de:04:33:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=ddd2e70b-839b-421b-a9e5-5bb23f0e4844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cd:06:7a:0c:6b:3e:a7:14:d4:58:b0:51:17:
                    c2:e8:55:98:4f:71:50:23:74:d7:17:7b:65:4c:7d:
                    a6:8d:d5:12:76:5e:5d:bc:48:ec:fb:bd:8e:0a:f8:
                    84:f3:e8:11:eb:9f:ce:bc:e7:1d:1f:05:35:e0:1e:
                    a2:3c:fa:18:41:dd:15:14:68:f7:65:0f:ee:04:87:
                    8a:bc:3d:47:89:2d:5e:b1:a5:45:50:87:1f:9c:3a:
                    a7:b6:7a:05:c3:f2:37:b7:e6:64:23:b9:a0:0f:be:
                    a5:e8:53:fa:98:fd:78:15:db:c8:16:d3:41:1d:7f:
                    99:41:6b:d3:b5:9d:81:d9:0a:2d:9b:4a:88:5e:c5:
                    fc:f1:0f:b8:23:c5:78:03:2e:6d:74:84:63:42:47:
                    27:d3:5c:0d:81:46:d2:9d:fd:80:35:9e:a6:8f:bd:
                    d7:84:b3:27:15:ee:51:52:f9:49:72:09:21:be:7d:
                    78:6b:15:1d:e0:b5:bc:cb:3d:68:5f:c3:2b:25:66:
                    08:38:ae:78:81:af:b1:70:5e:36:5e:a8:43:62:c2:
                    9d:d8:f9:7f:12:1e:03:dc:45:e9:1f:a9:ec:59:9a:
                    81:af:3a:b7:f1:4d:9b:3e:78:ac:93:66:06:74:0c:
                    ed:8f:e1:ff:99:e7:65:a4:7a:57:0f:d1:9c:b8:89:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3D:28:54:46:4C:7D:C9:59:60:9B:63:05:57:64:07:64:63:11:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d73569f9-4fcd-3106-b9df-305e7d5aa263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2449::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ca:79:21:18:59:80:a5:b2:22:f4:88:9e:0e:87:34:01:83:
         5f:00:07:66:ec:e1:45:de:98:de:4f:a9:60:89:f3:b4:fc:a9:
         66:09:03:a0:75:fd:3a:f9:16:1c:76:f9:d4:ac:3e:ad:6d:5e:
         20:5c:30:6a:dc:3e:ef:88:00:e9:7c:54:67:2a:40:a7:1b:9d:
         94:20:3e:fd:15:58:4c:9c:65:0c:d2:2b:9e:dd:3f:07:52:2c:
         ae:06:a1:a8:76:56:47:75:2b:d5:af:c9:88:d5:5c:cc:47:49:
         15:b8:e9:5a:15:e5:04:50:9b:90:46:e7:ba:19:1f:5f:f1:9b:
         26:0c:03:d7:b1:20:83:5c:cd:82:95:16:07:7b:a0:34:4a:b1:
         cd:a2:9d:ae:35:a4:99:7a:94:be:6f:ea:63:d3:33:26:e0:8f:
         c9:76:26:89:7c:d0:cd:e6:29:c1:02:f3:16:72:af:7a:ac:c3:
         56:6b:67:e3:45:37:d8:bf:e5:55:73:53:3c:ae:a2:68:36:e4:
         73:b4:10:99:46:75:18:d2:db:82:63:cc:52:07:0f:a3:0e:c3:
         7f:54:5f:91:11:93:01:a8:c7:b6:eb:ef:8e:ee:33:23:5a:00:
         10:69:82:78:58:52:8a:b7:3f:2a:71:e7:e6:a2:bd:7c:e8:87:
         31:b6:eb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:58:15 2024 by rpki-client on console-ams.rpki-client.org