Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/d79aa93d-34ed-337c-ada3-85f0b3fcb340.roa
File:                     d79aa93d-34ed-337c-ada3-85f0b3fcb340.roa (raw, json)
Hash identifier:          TIfc/e/Pv3NQ6ImMBphjkPbOjGSfL5T8h5vfK2shQzw=
Subject key identifier:   14:90:2A:1F:1F:8A:C2:3E:53:30:81:3D:2E:51:B8:0F:62:80:9E:39
Certificate issuer:       /CN=e8b1c892-1844-46b1-8572-70740f2673f5
Certificate serial:       010D0C9F4328584574B317F77778E4D2292A036F
Authority key identifier: 68:2B:51:72:49:55:98:F9:87:14:C6:9C:BF:90:3A:DB:D5:40:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/d79aa93d-34ed-337c-ada3-85f0b3fcb340.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     55243
IP address blocks:        2620:26:c004::/48 maxlen: 48
                          2620:26:c003::/48 maxlen: 48
                          2620:26:c005::/48 maxlen: 48
                          2620:26:c000::/48 maxlen: 48
                          2620:26:c001::/48 maxlen: 48
                          2620:26:c002::/48 maxlen: 48
                          2620:26:c00e::/48 maxlen: 48
                          2620:26:c00f::/48 maxlen: 48
                          2620:26:c00a::/48 maxlen: 48
                          2620:26:c00b::/48 maxlen: 48
                          2620:26:c00c::/48 maxlen: 48
                          2620:26:c00d::/48 maxlen: 48
                          2620:26:c006::/48 maxlen: 48
                          2620:26:c007::/48 maxlen: 48
                          2620:26:c008::/48 maxlen: 48
                          2620:26:c009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/e8b1c892-1844-46b1-8572-70740f2673f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/e8b1c892-1844-46b1-8572-70740f2673f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:17:f7:77:78:e4:d2:29:2a:03:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b1c892-1844-46b1-8572-70740f2673f5
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=92411353-23cc-4013-a56a-183053397793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:66:f0:9a:e6:ea:f0:6f:77:1b:1b:63:5e:11:
                    7e:05:6f:3f:2d:5e:32:cd:75:27:e9:e6:64:12:f1:
                    61:6a:d8:e0:7d:79:6e:c3:b2:a6:3c:cb:18:7f:dd:
                    ab:1a:bb:f1:23:e1:31:5d:32:23:56:f2:0a:2e:f4:
                    a7:25:fc:9e:cd:e2:cb:1e:72:50:8f:1d:55:37:4b:
                    b7:3a:9b:ec:01:13:3c:e2:ae:72:9e:ca:ce:df:88:
                    b4:93:4d:e1:dc:87:5a:6a:f7:8a:4c:2f:ca:5b:7f:
                    26:19:b0:fa:80:cc:e8:b3:e8:fa:40:2a:b8:77:fb:
                    24:c1:b9:01:d5:a8:22:1e:bf:04:9f:53:81:d7:7b:
                    6d:79:69:03:12:cb:57:a8:dd:ec:20:0e:36:5e:4b:
                    3e:3e:0a:a9:05:57:b8:1d:99:34:9d:e2:b7:fe:8b:
                    9b:8b:90:8a:29:7d:d9:c3:be:e6:03:52:ab:78:cf:
                    53:10:1c:56:30:0b:1b:09:4c:18:e6:74:2e:8d:12:
                    6e:91:5b:54:ac:37:f4:e1:47:86:a9:05:84:db:72:
                    a3:27:dc:72:f6:78:0e:37:9b:f4:e7:5d:78:e3:38:
                    0d:0f:da:21:d6:6c:db:df:c3:e0:81:08:06:73:72:
                    5c:59:1c:7c:34:d7:d7:e0:31:41:ed:80:8e:5e:28:
                    f6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:90:2A:1F:1F:8A:C2:3E:53:30:81:3D:2E:51:B8:0F:62:80:9E:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/d79aa93d-34ed-337c-ada3-85f0b3fcb340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/e8b1c892-1844-46b1-8572-70740f2673f5.crl

            X509v3 Authority Key Identifier:
                keyid:68:2B:51:72:49:55:98:F9:87:14:C6:9C:BF:90:3A:DB:D5:40:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:26:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:fe:c6:0e:f4:fe:84:c0:47:96:a3:be:8c:d2:eb:f5:44:71:
         ca:a8:4c:a7:ce:cc:08:14:1d:ee:0d:fd:a5:d2:6e:2e:c5:4f:
         08:24:11:8c:36:13:e6:38:7b:f5:3a:a9:aa:42:f7:24:3a:d9:
         8f:a6:90:0f:0e:d1:5f:2f:26:d3:8b:1b:71:db:f4:e2:bd:1d:
         f3:70:7c:2d:05:27:85:11:87:39:b4:fe:b0:9f:05:96:2b:1c:
         21:4d:69:be:78:61:cb:b2:6b:9b:70:46:1d:2e:45:a0:d2:80:
         c6:b1:2a:27:7b:8b:48:43:76:03:56:02:59:52:a7:ac:ec:d8:
         d3:d4:50:c8:fd:82:74:f7:e7:b4:43:61:81:d1:99:66:96:c7:
         4c:f0:c2:80:d0:da:50:4d:b3:c7:6c:c9:48:11:4b:dd:cc:ee:
         25:41:f4:39:61:ac:79:13:2d:30:ee:67:49:fb:3d:c3:6e:7e:
         8a:60:34:f8:74:74:4d:4a:89:5e:a7:43:f2:44:cf:c3:b4:4c:
         42:06:df:18:8a:b2:17:0d:13:9e:f2:94:63:d0:9f:af:0f:8b:
         09:ad:d6:54:d9:7b:24:c7:ff:f1:93:98:61:c6:f7:62:dd:22:
         85:21:35:86:10:fc:8e:fe:ea:19:18:8e:8d:ad:e4:70:f0:7a:
         c2:e4:00:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:32:33 2024 by rpki-client on console-fra.rpki-client.org