Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e4abcc4e-2f85-3c38-a31f-7fc2ad4bde86.roa
File:                     e4abcc4e-2f85-3c38-a31f-7fc2ad4bde86.roa (raw, json)
Hash identifier:          58dfGZAxcVuaDgfLXe0EVJFFvnb61KvKwUtjOvp6qVU=
Subject key identifier:   5B:60:79:72:D2:45:C2:19:F5:79:36:4F:34:D3:87:46:29:60:D8:3D
Certificate issuer:       /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial:       010D0C9F432858455762CB0980907B25787E2B10
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e4abcc4e-2f85-3c38-a31f-7fc2ad4bde86.roa
Signing time:             Wed 27 Mar 2024 01:00:26 +0000
ROA not before:           Wed 27 Mar 2024 01:00:26 +0000
ROA not after:            Tue 25 Jun 2024 01:00:26 +0000
asID:                     1206
IP address blocks:        2001:5e8:ffff:1::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:57:62:cb:09:80:90:7b:25:78:7e:2b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
        Validity
            Not Before: Mar 27 01:00:26 2024 GMT
            Not After : Jun 25 01:00:26 2024 GMT
        Subject: CN=3242a926-2567-4f31-b512-fd5d5ddba9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:58:ac:3a:8e:2a:78:fa:73:ce:01:cb:d1:
                    ea:2e:f2:db:86:69:e6:81:33:b4:14:6e:22:0c:d9:
                    6a:04:a2:75:1f:e1:ec:b1:f9:c0:77:74:41:cf:c9:
                    5f:2d:de:c1:6f:f0:68:e4:b3:d1:97:7e:29:3d:fc:
                    ef:16:8b:df:da:c4:ce:bb:5d:89:1b:86:6f:22:a1:
                    6c:8b:ad:5c:97:19:a9:e5:e3:cd:17:61:54:9b:0d:
                    94:2c:4c:85:69:42:b7:f7:1f:4f:b7:96:b1:97:1f:
                    2a:d5:08:be:5b:3c:38:f0:93:66:2b:cd:86:a9:6a:
                    a9:21:d7:1f:a2:3d:89:a0:8a:c6:39:0f:3f:21:b9:
                    fc:97:a9:6b:84:2b:2f:40:06:aa:7d:f9:18:d2:85:
                    01:78:a3:48:6f:b8:90:ed:93:7b:28:e6:06:8e:a1:
                    46:6d:b0:03:4c:f1:4c:ba:b9:3c:37:af:d4:0b:69:
                    14:49:05:09:b5:a2:a8:de:ef:a0:f0:67:f3:55:3c:
                    75:12:a7:9e:66:60:7a:79:50:07:07:05:63:cc:4a:
                    cf:ef:8a:7f:db:1a:96:6d:67:8b:2e:9e:c2:8a:d4:
                    19:00:a2:49:e8:88:d4:e2:89:c5:4b:36:f4:98:27:
                    a6:0f:99:8f:42:ee:de:5d:9d:b4:ca:dd:d7:5e:2e:
                    95:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:60:79:72:D2:45:C2:19:F5:79:36:4F:34:D3:87:46:29:60:D8:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e4abcc4e-2f85-3c38-a31f-7fc2ad4bde86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5e8:ffff:1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5e:b2:cd:0b:76:c2:c3:49:6a:02:cb:6e:07:7f:db:12:dc:
         3b:5d:95:65:ff:1b:d1:d8:0b:8e:6c:c1:39:d5:1c:45:98:42:
         d2:4f:ce:b6:98:41:5b:1f:ca:ef:a8:2e:b6:0b:79:f8:ce:22:
         af:a1:d6:d5:1c:bc:98:99:ac:37:0f:60:b1:de:26:5d:1d:fb:
         90:9f:74:0f:d9:ed:8b:1a:d5:26:7c:55:35:06:df:26:10:ad:
         2a:8e:b7:62:8b:ce:54:41:07:6c:b7:86:d2:7e:81:24:96:05:
         cb:a8:37:3b:f5:ce:26:80:ab:3c:1b:a5:28:92:ee:eb:3a:12:
         d1:d8:f7:72:00:57:fb:fa:d4:7f:30:57:72:44:eb:b5:68:44:
         a6:68:8b:73:c9:af:48:bd:54:fc:de:09:cf:9f:99:72:cc:81:
         b5:c6:05:75:d6:27:87:94:29:8a:81:c6:44:53:58:df:82:9e:
         d8:37:04:84:a9:08:0b:6a:08:39:4d:dd:c6:30:8b:fe:21:23:
         35:db:12:f9:e3:d4:44:92:b8:28:1c:c1:61:95:d3:ca:7c:6a:
         66:f0:e3:e0:d8:e7:7e:5f:1e:e6:49:53:60:20:80:e1:93:82:
         f6:aa:22:fd:55:9b:1e:41:45:cb:ff:7b:c4:05:6f:21:33:de:
         5a:1c:bd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 19:17:16 2024 by rpki-client on console-ams.rpki-client.org