Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/f1ad5565-820f-308d-8e90-cf28ee1ac1a8.roa
File:                     f1ad5565-820f-308d-8e90-cf28ee1ac1a8.roa (raw, json)
Hash identifier:          28JELt2x7+h2gAd0Mc38IlQHGBSCKgElrfykD59vSEo=
Subject key identifier:   0B:E8:C6:B1:34:38:B2:5A:DD:A5:13:0D:AC:D0:CA:2B:FF:28:97:3A
Certificate issuer:       /CN=a275555b-70b6-4540-972c-12b8d180ff56
Certificate serial:       010D0C9F43285845A49F4A77CF4482196BA5C400
Authority key identifier: A3:25:61:55:71:39:8F:2C:DA:77:0C:82:3C:0C:B0:6D:C2:04:A2:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/f1ad5565-820f-308d-8e90-cf28ee1ac1a8.roa
Signing time:             Tue 23 Apr 2024 16:59:36 +0000
ROA not before:           Tue 23 Apr 2024 16:59:36 +0000
ROA not after:            Mon 22 Jul 2024 16:59:36 +0000
asID:                     21854
IP address blocks:        2605:3d80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/a275555b-70b6-4540-972c-12b8d180ff56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/a275555b-70b6-4540-972c-12b8d180ff56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:9f:4a:77:cf:44:82:19:6b:a5:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a275555b-70b6-4540-972c-12b8d180ff56
        Validity
            Not Before: Apr 23 16:59:36 2024 GMT
            Not After : Jul 22 16:59:36 2024 GMT
        Subject: CN=d5de01b0-0a3b-45ae-b847-2339fa7e7d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7f:06:56:bd:8a:fa:09:e4:3d:71:a5:39:d7:
                    00:05:a9:19:cc:a9:dd:9e:53:58:73:d6:12:fe:36:
                    af:13:0e:b9:80:bc:37:b4:41:de:ce:b1:1a:33:15:
                    c0:40:9e:0f:65:84:37:af:17:83:60:e0:3f:59:36:
                    ac:02:b3:23:8c:e7:a0:1b:05:94:bd:89:2a:d1:f7:
                    97:10:45:09:40:2d:f5:3d:b0:99:24:bf:d9:c2:03:
                    a4:bb:f4:fa:39:ef:6b:79:b2:ee:9d:41:b1:8b:ba:
                    45:45:c4:b8:1f:9f:f1:fc:67:53:b1:88:d2:6f:19:
                    f6:0f:8c:f6:dd:ad:06:bd:42:7d:ad:e1:c5:86:42:
                    09:ba:41:37:00:06:91:c1:13:94:21:2c:25:33:f3:
                    1f:69:cc:58:da:02:10:a2:cc:a7:fa:57:de:82:4c:
                    03:6e:c9:91:b2:f6:12:84:5f:b1:53:4c:85:7c:7b:
                    49:73:12:dd:c1:27:fb:c8:cb:e4:d5:52:33:fe:74:
                    c8:8d:b8:3b:af:9e:f6:e9:dd:12:5c:d5:be:e4:bb:
                    d9:14:49:0e:bd:7a:52:bf:32:f6:bd:11:44:79:cb:
                    7c:1d:e4:2e:12:21:16:64:d1:75:0e:0c:14:21:92:
                    d1:55:cd:d6:08:41:36:06:fa:60:22:eb:c2:36:45:
                    81:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E8:C6:B1:34:38:B2:5A:DD:A5:13:0D:AC:D0:CA:2B:FF:28:97:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/f1ad5565-820f-308d-8e90-cf28ee1ac1a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/a275555b-70b6-4540-972c-12b8d180ff56.crl

            X509v3 Authority Key Identifier:
                keyid:A3:25:61:55:71:39:8F:2C:DA:77:0C:82:3C:0C:B0:6D:C2:04:A2:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:00:94:80:32:ee:25:a1:48:39:e3:28:7a:04:05:f0:53:5e:
         01:b1:84:7d:0b:67:12:84:f1:a8:c0:d1:60:61:83:23:2d:95:
         1b:a4:16:d5:09:c6:e3:51:c2:48:9f:98:de:48:0f:25:9c:fe:
         8b:2b:8a:84:6e:0b:5d:e2:ff:43:d0:75:a8:a4:30:01:f9:0a:
         85:f7:6a:6d:35:42:8f:af:14:ce:5c:fe:3a:97:85:18:55:75:
         1b:98:75:51:6f:b2:f6:6a:82:d4:6c:3c:00:09:25:d6:45:29:
         7e:71:bf:d3:96:8c:30:e0:4a:03:de:5d:3c:7f:d7:03:2e:c4:
         00:0a:47:a0:a5:3a:84:77:8a:02:d8:15:cc:27:1e:4e:a6:f8:
         90:a8:96:c3:c9:a0:b6:7d:2f:6f:51:44:a5:24:a4:29:ec:d2:
         c1:f0:5e:0c:d4:46:a3:6d:8b:6a:66:e8:5b:e0:9f:76:56:fe:
         21:ad:2c:79:7e:d3:b7:7b:40:d0:b7:65:06:f7:2d:bb:ca:f7:
         11:2f:ed:23:58:b5:fb:df:47:de:bc:57:f7:fc:63:2e:c5:f1:
         06:31:2d:61:8f:8a:88:87:48:15:9f:f2:c4:f5:e3:7a:a1:f7:
         79:a5:e7:d1:c4:28:0a:24:ec:f9:7b:00:4d:ef:83:f1:b2:2d:
         0d:b5:36:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 09:11:56 2024 by rpki-client on console-fra.rpki-client.org