Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa
File:                     a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa (raw, json)
Hash identifier:          BJiqaFG4wt/Jb/IA11HWxJBHF/9ALnesGCKABbRZyVE=
Subject key identifier:   5C:8D:D5:93:2A:EC:C3:63:77:F5:8A:1C:C8:16:DE:2C:52:A6:01:8D
Certificate issuer:       /CN=cea06c90-4ccd-4474-b4fa-882eed4f4cd5
Certificate serial:       010D0C9F4328584561286188649A0FF795752E00
Authority key identifier: C0:94:76:1B:6F:0E:00:D6:3B:58:1C:57:5C:40:D3:98:37:9E:FD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     19750
IP address blocks:        2620:100:a000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:61:88:64:9a:0f:f7:95:75:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea06c90-4ccd-4474-b4fa-882eed4f4cd5
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=59331cdf-dc4c-4d0b-a871-cb745d237424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c6:f7:f1:9f:76:26:75:d6:e8:04:dd:e9:54:
                    5d:09:8c:6d:2a:d5:d6:ba:b6:36:12:25:a1:36:55:
                    e1:96:ce:57:36:4c:8f:6f:0e:a3:5f:2a:5d:e7:2c:
                    6e:5b:f9:46:21:b9:a2:17:f5:8d:d3:c4:35:72:88:
                    64:0f:54:ad:86:6a:20:d1:9f:4d:b5:bb:75:a8:05:
                    6b:e6:89:85:7c:e1:df:ac:19:65:60:4e:3e:b7:a0:
                    7d:b7:f8:d3:95:07:fc:ad:39:bd:1b:f7:af:28:b2:
                    f8:c7:79:bd:99:7e:fc:3f:a5:45:29:ee:3c:26:3b:
                    eb:65:55:5c:25:79:61:b7:51:87:6e:3e:32:f5:0a:
                    07:d5:52:c9:45:97:bd:e5:1a:6b:0c:24:00:9d:3a:
                    85:83:2f:9a:dc:33:f8:50:14:fb:be:1b:46:fb:31:
                    91:d8:77:31:87:76:92:de:3a:28:2c:a5:cb:cd:e2:
                    78:21:cd:2b:72:5d:c4:2f:26:7f:ce:67:0d:a3:04:
                    62:9a:fb:9f:8c:4e:35:51:83:c6:12:6f:1a:2b:8b:
                    1a:02:67:19:f0:19:9a:c4:c3:4d:70:20:57:33:34:
                    c2:c0:dc:48:4b:b7:d4:d8:69:17:79:7f:67:b2:7c:
                    2a:4f:53:c7:0f:53:51:cb:79:26:42:45:d2:81:73:
                    65:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8D:D5:93:2A:EC:C3:63:77:F5:8A:1C:C8:16:DE:2C:52:A6:01:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.crl

            X509v3 Authority Key Identifier:
                keyid:C0:94:76:1B:6F:0E:00:D6:3B:58:1C:57:5C:40:D3:98:37:9E:FD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:100:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:96:bc:2a:a6:5f:e0:8c:76:7f:bd:6e:99:b4:79:c3:8d:1a:
         ba:1c:7b:59:38:d1:91:db:64:da:8e:1f:2d:62:8d:23:98:09:
         63:f3:f2:52:02:ec:09:07:18:aa:5f:9a:0d:f8:0a:6b:3e:64:
         ad:5a:85:bf:3d:c0:34:e7:89:f3:59:8c:92:cc:7c:74:12:58:
         0c:60:46:8b:74:a9:6e:7d:d1:5b:e2:ce:f9:89:71:14:2e:bd:
         af:3e:c4:28:56:f9:dc:dc:e4:99:12:8f:11:9f:40:45:9a:62:
         d2:f3:35:7d:af:a7:7d:28:01:87:fc:eb:db:e3:87:19:3c:b3:
         33:a3:a7:48:67:8b:7b:d3:18:36:f8:ba:7e:e0:a3:c3:3e:42:
         f3:5f:5e:8d:75:70:fd:c4:ee:97:3f:cd:d3:07:f8:01:a2:0f:
         ec:34:11:2b:1a:4f:b0:3a:28:3e:2e:25:80:79:c0:f6:c7:72:
         e0:98:8b:55:ad:77:d1:74:1a:b5:81:78:0e:8a:37:11:df:70:
         a5:ff:1a:0a:5e:0b:cb:3b:13:f4:7e:49:07:6f:36:8d:29:f0:
         81:0b:76:d1:61:c6:03:84:32:ee:15:3b:d7:67:4e:2d:c8:e2:
         cf:30:22:72:24:a6:ca:d7:d8:a3:72:8e:57:6b:21:f8:c7:d6:
         6f:bd:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:33:27 2024 by rpki-client on console-fra.rpki-client.org