Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa
File:                     0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa (raw, json)
Hash identifier:          Z+MUQNHo2q9OUnCnoSHDy3v35ZfnSXYaVk6Q2dAJPSM=
Subject key identifier:   DC:0E:EA:E8:1C:49:98:5D:87:E0:4E:FA:22:A9:FD:2A:FE:AD:8A:04
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F43285844EECFF59CD8B6ED921AE82A00
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     396982
IP address blocks:        2620:121:5050::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:f5:9c:d8:b6:ed:92:1a:e8:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=40f0544a-26d5-49e6-9205-14a049b11d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7f:65:bc:25:70:b8:b8:19:e8:35:97:05:84:
                    75:57:5c:72:f7:cc:98:bf:b1:a0:2d:df:74:aa:4b:
                    8a:84:0a:ca:28:7c:e6:77:16:f5:30:60:5e:70:f5:
                    d2:87:e5:91:44:4b:12:e3:ff:81:ae:5e:35:f6:3b:
                    be:47:79:d3:b0:89:9d:8d:a9:9e:01:9e:21:03:f1:
                    35:64:77:ac:b5:b7:15:ec:ee:6e:bc:80:5c:c3:b8:
                    aa:01:89:be:99:94:c4:a9:5c:47:a8:ae:47:d0:4d:
                    26:34:f1:c3:c5:f2:85:42:f6:f4:ce:ab:6a:4d:9b:
                    ae:dc:dc:c7:e6:82:82:47:52:94:fc:ab:4b:aa:12:
                    bd:ce:3e:9a:56:06:2e:d5:76:f0:5e:2b:c4:37:6b:
                    95:70:81:25:f4:73:a8:19:01:84:d2:f8:8d:fc:e3:
                    29:81:a4:ac:0b:90:72:94:09:95:82:bc:0f:06:2a:
                    5c:86:fd:9f:36:d3:67:08:ca:a4:d4:fe:61:70:02:
                    0c:c2:7d:96:c9:34:10:97:14:f9:c4:0d:10:9f:bf:
                    75:22:d2:29:29:2b:ca:a9:a0:a8:50:17:13:2a:53:
                    bc:9c:61:ba:b8:25:ff:1e:5b:e2:de:4d:77:79:f5:
                    e8:4d:d7:d0:14:19:63:f7:2b:76:31:02:77:3a:eb:
                    d4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0E:EA:E8:1C:49:98:5D:87:E0:4E:FA:22:A9:FD:2A:FE:AD:8A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:5050::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b7:71:4e:5f:4a:39:f3:77:c8:95:ae:e4:d5:b3:e2:6a:40:
         80:8a:68:bb:1a:93:f0:2d:0d:08:ec:bc:88:d7:90:1b:2c:31:
         25:da:30:21:3c:05:43:53:3c:70:0f:80:a6:64:f2:6f:41:39:
         bf:00:f4:d0:f4:9f:4f:ad:4d:b2:41:11:62:f6:97:13:23:98:
         5c:28:b3:4d:28:82:7c:97:2b:d8:72:5c:6c:e9:35:fa:11:6d:
         3d:dd:e8:9c:44:4d:64:97:80:b6:06:75:56:25:46:2f:45:f4:
         91:a9:72:1c:e2:7f:ed:98:a9:db:00:d1:8d:02:a2:38:82:dd:
         09:26:94:9e:8b:ad:1d:ba:40:9b:8d:bb:2e:e2:78:ed:11:16:
         23:f9:84:4a:0b:3e:72:11:71:26:b7:6f:de:33:fb:02:d9:74:
         27:55:9a:be:c6:4a:b6:72:15:d2:29:7f:64:35:2e:38:a8:2b:
         d0:7e:14:e1:c5:30:c7:17:ac:ae:d0:56:0f:2f:17:f2:15:f0:
         84:fb:02:6d:6b:33:2e:c9:af:0f:1d:ed:71:e2:21:a6:df:b3:
         9a:cc:ac:f8:74:95:e3:76:2e:62:e7:64:01:52:1c:7d:bc:c7:
         2e:f2:f9:da:69:b5:a2:49:b6:ef:b5:0a:7d:0d:7b:6a:76:6c:
         25:21:15:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 05:24:46 2024 by rpki-client on console-fra.rpki-client.org