Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/5d880a95-6ca5-3b0f-baeb-46602f238d82.roa
File:                     5d880a95-6ca5-3b0f-baeb-46602f238d82.roa (raw, json)
Hash identifier:          fP4A1+l24Nut5NOdhFw9eY0gtw2F+rh+a/5IpIEEhmI=
Subject key identifier:   BE:51:B0:EC:B3:9D:D2:ED:D2:B2:43:B6:27:91:25:47:04:80:2B:51
Certificate issuer:       /CN=6534ebb8-2490-4f36-a6d0-f7741019122a
Certificate serial:       010D0C9F4328584563F310557482BD7533AF2E00
Authority key identifier: 16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/5d880a95-6ca5-3b0f-baeb-46602f238d82.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     27553
IP address blocks:        2604:e000::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:10:55:74:82:bd:75:33:af:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6534ebb8-2490-4f36-a6d0-f7741019122a
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=c60b6a0c-faaf-42ec-bb25-a14310f107ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:19:23:f4:7e:da:1d:f8:32:0b:59:02:a6:6d:
                    de:6e:06:39:d3:66:d0:9e:f6:58:3a:40:7d:e6:67:
                    b2:02:d8:61:f9:ed:2e:19:55:b9:7b:00:2a:a1:ca:
                    05:cd:97:27:3b:79:80:ee:c4:bc:9b:49:08:f4:1f:
                    ce:5f:37:f8:6e:b5:54:3a:c5:d8:75:51:9d:f3:10:
                    b6:4a:8e:c4:24:4a:ff:28:45:06:bc:9b:fc:f4:16:
                    a5:98:3a:6c:dc:a9:85:7c:ab:af:0b:70:63:2d:e9:
                    b6:e2:5a:54:3d:46:0e:21:68:e2:a1:13:3d:60:4d:
                    d4:52:6a:ee:91:4d:e2:62:31:57:b0:bb:43:a0:49:
                    77:49:fa:e1:d5:1f:7d:17:61:1f:04:32:5a:c6:4e:
                    cf:81:b8:bc:e0:ef:5e:5c:fe:d7:b2:8f:aa:9c:27:
                    78:f5:ab:45:ca:71:dd:e3:16:49:9a:4b:a4:0d:2d:
                    34:5f:af:34:91:a8:d2:6a:66:13:99:d0:2b:53:18:
                    9c:ff:64:08:9c:8c:8b:6d:26:ad:33:40:a6:68:44:
                    8c:fc:60:07:b1:ae:64:dd:cb:bb:b5:b7:00:19:4d:
                    f4:42:77:43:c7:3e:e7:5b:a8:9d:89:9c:73:f7:d8:
                    7b:3b:b8:06:49:7f:90:0a:79:55:41:8f:b2:20:71:
                    a8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:51:B0:EC:B3:9D:D2:ED:D2:B2:43:B6:27:91:25:47:04:80:2B:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/5d880a95-6ca5-3b0f-baeb-46602f238d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl

            X509v3 Authority Key Identifier:
                keyid:16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:ab:00:83:99:ac:82:bc:2a:3d:98:bf:ea:af:3c:41:08:5f:
         9e:58:e1:d6:be:18:27:05:f9:23:cc:9f:3c:22:b8:ab:30:44:
         28:1e:87:0a:fe:f2:38:54:1a:9c:74:64:6e:4f:0e:4b:22:e6:
         46:2c:9a:17:46:a4:91:e3:64:d0:72:cf:2f:cc:37:90:de:06:
         bf:c2:8f:fa:5c:18:51:df:78:aa:42:06:70:23:9f:0e:bb:8e:
         d6:99:63:c6:14:58:38:57:24:49:eb:15:a5:94:5f:63:20:78:
         c0:a9:49:50:d2:cf:d2:5f:ac:7c:e0:6a:a9:55:16:f4:5e:6f:
         42:89:68:bd:8b:35:3b:aa:3d:e1:ec:eb:44:f5:ba:bd:29:a6:
         83:68:74:0e:72:8c:28:1d:62:a1:04:5b:68:aa:a7:f7:17:94:
         64:ea:be:47:83:f0:5b:f6:c4:57:ce:bb:30:32:52:63:65:be:
         33:22:10:af:a0:83:da:42:b5:b7:1a:b4:a8:1e:e0:ca:f8:02:
         1b:9b:48:99:78:0e:c7:01:6c:b6:6c:ba:94:f2:fa:8e:e9:2e:
         38:53:3c:8c:95:bd:f3:d1:98:1f:7f:76:80:f9:9c:59:63:9e:
         fb:6c:c1:5f:a3:19:1a:70:b9:3d:7d:a5:95:5f:fb:30:23:3a:
         10:0d:50:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:32:24 2024 by rpki-client on console-fra.rpki-client.org