Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/eb013a9a-d801-3e69-8a6f-33ac66afb2f7.roa
File:                     eb013a9a-d801-3e69-8a6f-33ac66afb2f7.roa (raw, json)
Hash identifier:          C5hb4pmPEWzkeDNTjroccVMDBT1G5qDwurwLlx6VQt4=
Subject key identifier:   45:86:5F:C1:90:A0:4E:EA:FF:4E:2A:29:7F:E3:35:F3:D8:4E:AC:FC
Certificate issuer:       /CN=603ec9c3-6a7f-4455-baee-5999e253e735
Certificate serial:       010D0C9F43285845612867553634559C56CD2180
Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/eb013a9a-d801-3e69-8a6f-33ac66afb2f7.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     3676
IP address blocks:        2620:0:e50::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:67:55:36:34:55:9c:56:cd:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=ad129d4e-863a-4ed1-9fbb-7fc10c362302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fd:64:85:e9:51:14:63:90:1b:3e:3e:6a:ab:
                    6a:3e:19:d4:c5:20:ec:f0:88:e0:ac:45:1d:e9:59:
                    a7:98:f5:c9:f8:f3:4c:68:c6:a0:9c:bf:23:48:4e:
                    59:67:ea:4f:6a:68:0f:4e:28:e1:14:aa:b0:cf:8b:
                    2f:df:49:01:bb:88:22:0d:24:3a:da:25:d3:5a:e7:
                    87:f9:2e:0b:aa:80:05:93:f1:58:12:b2:28:16:f5:
                    ab:0a:1e:1b:23:d6:56:f6:ab:34:eb:ac:b4:bd:0d:
                    01:0f:11:4e:ac:ce:c2:82:3e:d9:54:02:4a:ca:e3:
                    8b:79:22:9b:67:3e:19:8f:75:2e:ec:35:85:f9:2b:
                    55:e5:ec:91:40:5b:38:03:bb:b8:6a:df:66:82:1d:
                    32:29:35:53:27:6f:95:05:d1:ec:3a:d6:45:cb:64:
                    cb:27:8a:a0:ed:ba:fe:0e:1c:cc:b3:1a:3a:ee:aa:
                    e8:d0:49:b9:ea:05:7e:bb:d7:f5:a2:1a:15:b5:b8:
                    c7:85:5f:fb:6f:1e:d9:eb:1e:06:9b:6f:84:1a:af:
                    f0:08:ab:54:11:d6:83:ef:bb:1c:0a:e9:ef:9c:52:
                    7c:9e:4a:fa:19:b1:a3:8a:73:04:35:09:1e:37:0b:
                    b8:bb:53:1e:d4:5c:39:1c:89:25:96:97:23:44:1f:
                    8c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:86:5F:C1:90:A0:4E:EA:FF:4E:2A:29:7F:E3:35:F3:D8:4E:AC:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/eb013a9a-d801-3e69-8a6f-33ac66afb2f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl

            X509v3 Authority Key Identifier:
                keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:e50::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:d9:c7:5b:e6:6c:e0:03:81:80:9d:15:f1:a6:85:6c:8b:b0:
         86:a0:57:f6:9e:7d:f3:d7:4c:3f:21:80:b9:ac:74:32:7e:ff:
         59:6b:8d:d0:ab:ed:fd:02:3c:81:b0:d7:cd:f8:f8:69:f6:53:
         5b:d5:6d:87:df:83:e2:a9:7c:bf:bf:bc:7f:f3:0b:ed:9d:59:
         cd:71:1e:d2:f2:3f:d9:ff:07:11:36:7f:2a:d2:28:08:8c:e6:
         a9:84:fd:fb:2a:d6:2d:39:3c:d1:51:39:75:f1:00:f8:3a:3c:
         00:c9:67:51:8d:35:1e:9c:3e:a5:64:62:8b:6c:10:47:67:ec:
         9d:91:fe:40:b0:81:aa:46:4b:23:f9:99:3b:5b:3e:7f:bb:23:
         24:d7:dc:b3:32:99:0a:09:1e:8e:40:a8:6e:71:8f:44:d3:21:
         38:05:41:34:8f:49:e4:b6:c4:89:0f:8c:69:61:74:46:55:60:
         d9:55:24:a6:42:00:33:34:ad:c3:f0:29:f2:d1:27:94:15:c3:
         55:21:e2:f4:e0:61:33:fd:25:0e:41:9b:ac:31:74:4c:60:87:
         f9:3e:c9:ef:d4:74:c8:9c:03:45:e2:30:2c:d8:f0:4a:a7:75:
         21:c2:11:b7:d6:bd:f8:29:99:94:2d:76:66:51:71:91:55:e7:
         35:73:75:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:38:41 2024 by rpki-client on console-ams.rpki-client.org