Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5916936e-3b67-3060-a56c-ec30a03263a6.roa
File:                     5916936e-3b67-3060-a56c-ec30a03263a6.roa (raw, json)
Hash identifier:          uYPaaENQ8Og63AeHnbA9sg5rwnEuDn1y2sIrqlkTiqo=
Subject key identifier:   0A:30:96:B6:53:65:C7:6A:25:5F:E7:26:78:2C:7D:9C:54:2E:EA:95
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F432858455068263DD36A920AE17DAA00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5916936e-3b67-3060-a56c-ec30a03263a6.roa
Signing time:             Sun 24 Mar 2024 13:00:33 +0000
ROA not before:           Sun 24 Mar 2024 13:00:33 +0000
ROA not after:            Sat 22 Jun 2024 13:00:33 +0000
asID:                     55286
IP address blocks:        2606:b300:b300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:50:68:26:3d:d3:6a:92:0a:e1:7d:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Mar 24 13:00:33 2024 GMT
            Not After : Jun 22 13:00:33 2024 GMT
        Subject: CN=c4d51491-efcb-4432-bb72-241abdc7dc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:70:08:a8:75:6f:4f:00:e9:61:e0:d7:b8:
                    99:81:52:fa:d8:b5:2c:ba:0f:8f:4d:c7:c3:60:8c:
                    de:ef:17:af:69:c7:dc:f2:c7:f4:2d:6c:60:98:b8:
                    d7:34:ce:18:e2:ee:ee:14:5d:12:07:dd:73:7b:74:
                    60:16:9a:bb:48:6a:cd:1f:ac:78:4a:9f:b7:db:87:
                    22:a7:a9:4f:14:33:5f:5f:c7:24:2d:a8:b5:de:f6:
                    8a:61:a6:a2:ac:49:51:a1:12:f2:b5:12:2b:60:dc:
                    d8:a2:24:9b:27:3f:08:1e:69:97:1d:01:4e:cd:da:
                    34:4d:66:dd:e8:63:b3:51:ae:c5:06:13:af:c2:3e:
                    ee:d9:c8:81:55:5c:d2:f7:4c:0d:08:2a:bd:c6:6e:
                    3e:73:d5:9a:5e:55:5d:65:44:45:b8:dc:d9:3b:a4:
                    7a:81:8b:a4:06:11:96:91:27:48:b8:2e:d9:32:d9:
                    00:6a:f7:16:82:3f:7a:b6:ce:be:ae:2c:30:24:0e:
                    a5:c0:4c:10:09:e9:e2:e6:74:41:65:c3:02:a9:9f:
                    58:93:a1:01:b2:07:c4:24:b1:4a:c1:71:d1:1d:33:
                    55:9c:03:b8:b3:61:d7:de:34:31:fd:f1:dc:fe:b2:
                    7e:ff:e2:b1:d4:b2:28:03:ef:69:f0:dd:66:1d:83:
                    7d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:30:96:B6:53:65:C7:6A:25:5F:E7:26:78:2C:7D:9C:54:2E:EA:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5916936e-3b67-3060-a56c-ec30a03263a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b300:b300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e8:7c:c1:f6:21:4f:83:49:fa:f7:50:10:60:ae:3e:c2:81:
         ab:2c:5a:08:75:e1:01:e3:5a:56:e1:a9:43:01:7e:12:16:36:
         f9:84:22:42:15:f1:b0:42:50:df:91:89:9c:08:c9:97:83:41:
         fe:80:8e:eb:3d:a3:8c:11:03:3d:76:03:2d:ac:23:3a:11:4d:
         19:42:0d:47:81:62:83:a3:32:93:27:53:97:a6:0a:0b:25:f6:
         77:d5:1b:be:89:99:94:22:db:c4:b3:df:b9:30:71:05:33:d6:
         9b:6a:07:b1:a2:62:5a:5f:73:b8:79:f9:13:ae:5c:2f:50:c4:
         7c:e6:ac:bd:ad:55:f7:c3:fd:f8:65:eb:3e:e2:c3:be:b3:3d:
         15:25:f7:f2:f0:58:c9:7a:9b:0b:85:97:c2:77:17:fe:eb:c4:
         77:b8:bd:2e:a3:4d:db:d5:bd:e2:c0:d9:93:00:2e:9f:66:fe:
         99:90:77:ea:97:e2:34:26:20:c1:66:af:f2:e0:49:76:5d:b3:
         f5:bf:03:d1:ff:73:16:85:f0:f5:e0:66:ef:40:b5:49:bd:24:
         1d:0b:5b:a2:8a:fa:aa:9d:e6:3e:78:a4:f8:d7:d2:21:8f:ac:
         28:16:82:92:35:e1:b4:77:f3:52:48:87:2b:f5:a4:93:c9:c2:
         2c:b9:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:11:39 2024 by rpki-client on console-ams.rpki-client.org