Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28523adb-bf3f-3b48-b0f4-cc9433a85b13.roa
File:                     28523adb-bf3f-3b48-b0f4-cc9433a85b13.roa (raw, json)
Hash identifier:          qEfT979/GXUztHn13+R7vmvUdwdn8sFXGBttiiFj7gU=
Subject key identifier:   1F:D9:06:52:19:67:0B:0C:56:69:61:C5:CB:2B:87:84:C8:8E:52:81
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285845462FCAD385F152D824A6D480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28523adb-bf3f-3b48-b0f4-cc9433a85b13.roa
Signing time:             Wed 20 Mar 2024 21:08:57 +0000
ROA not before:           Wed 20 Mar 2024 21:08:57 +0000
ROA not after:            Tue 18 Jun 2024 21:08:57 +0000
asID:                     45566
IP address blocks:        2620:15c::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2f:ca:d3:85:f1:52:d8:24:a6:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 20 21:08:57 2024 GMT
            Not After : Jun 18 21:08:57 2024 GMT
        Subject: CN=559fae33-a54f-4b6b-9f31-d6bfb2aa17a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:76:ae:d5:31:27:2d:23:83:09:5a:68:5d:
                    ce:4e:4b:75:96:84:ee:07:78:48:86:10:2e:94:fe:
                    48:f8:e3:a2:10:5a:a6:3e:44:95:9b:3d:45:22:1c:
                    21:74:df:1f:56:27:99:ea:ca:f7:53:76:cc:fe:fd:
                    d0:53:56:dd:49:bb:65:e0:46:7d:a2:0c:7e:3e:6d:
                    83:09:52:2b:4e:b0:75:23:fc:07:48:e1:26:4d:84:
                    69:4b:9b:61:62:26:e6:44:f1:72:ae:07:68:b4:d4:
                    0e:02:bd:21:9f:5d:ed:e5:a9:83:41:c8:51:f9:df:
                    a9:7c:dc:69:3e:a1:7f:f3:53:d2:7e:ce:06:4e:d7:
                    5c:30:45:5f:b0:62:aa:73:92:6e:a1:f9:0f:d5:d6:
                    40:cb:69:0e:e9:3f:89:ac:42:46:49:20:b3:25:b1:
                    62:da:bf:b6:f9:57:29:b1:9c:98:40:c5:70:4e:4b:
                    8f:e6:17:10:b1:3e:cf:eb:4a:52:05:38:11:89:1c:
                    d4:38:d1:b7:37:9f:b3:b6:38:a7:28:68:a7:ad:f5:
                    0d:53:9f:ca:a9:b7:f4:ac:df:41:99:83:b5:21:cf:
                    03:e6:b1:68:04:59:eb:7b:07:64:a4:84:e5:73:6d:
                    04:3c:50:da:8c:c9:71:26:cc:ad:f5:f6:f2:aa:46:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D9:06:52:19:67:0B:0C:56:69:61:C5:CB:2B:87:84:C8:8E:52:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28523adb-bf3f-3b48-b0f4-cc9433a85b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:15c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:9b:10:67:8f:bc:e7:6e:ac:87:89:a6:02:13:77:2a:04:ad:
         d7:59:95:de:02:b2:f1:0e:cb:e2:29:82:d5:d3:b8:78:19:67:
         3c:40:9f:7b:98:04:a5:74:a7:3a:aa:eb:87:84:94:46:04:bd:
         e6:f2:a1:3a:70:86:04:8c:98:22:ed:8b:10:9b:f6:1e:fd:30:
         04:82:c5:48:b0:fe:5c:81:80:6b:c2:44:d8:60:28:28:a3:b5:
         3d:d2:ba:fc:b4:50:98:03:f1:1a:f1:93:14:16:a5:85:5e:a5:
         47:02:da:45:a0:34:43:e8:e6:c3:aa:52:b9:88:dd:bc:a0:7e:
         03:1d:1a:c1:76:15:83:2c:85:3e:07:a2:d8:fb:c9:fe:9f:aa:
         ca:7e:57:50:cf:67:a0:b9:7e:81:12:9e:90:fc:45:70:bd:55:
         6f:6b:f0:6f:ea:e9:0b:88:66:c8:37:33:ba:56:45:59:85:40:
         fa:72:e7:98:16:32:0b:1f:fa:9d:b7:ba:c9:83:f8:3c:89:e1:
         64:ab:10:99:53:b7:6d:29:cf:ff:5b:fe:e0:5f:14:54:a8:e6:
         60:c2:c6:be:3c:32:76:23:9a:76:8a:21:11:1d:c0:2b:fc:ea:
         c4:72:57:3d:b1:0b:9e:fd:90:2c:e4:77:1a:e3:d1:85:27:19:
         fc:fc:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:39:52 2024 by rpki-client on console-ams.rpki-client.org