Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa
File:                     2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (raw, json)
Hash identifier:          BnqfRlulCELdnMEOdm+M1gyVWJ1AQNUOEHemUS5AkMQ=
Subject key identifier:   28:37:AD:E4:43:C0:6C:58:16:16:12:62:01:15:27:43:AF:7C:E3:4A
Certificate issuer:       /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
Certificate serial:       010D0C9F432858458B088E64FC081D0C9B4E1420
Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     0
IP address blocks:        2001:504:38::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:8e:64:fc:08:1d:0c:9b:4e:14:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=96b984e0-056b-4c6d-87f0-bd747f22c927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:99:07:a4:f4:3c:46:f9:01:bf:e8:2f:ff:21:
                    e0:79:10:9b:06:c5:7d:1e:dd:2c:db:fa:20:80:81:
                    7b:fa:0c:4e:bc:5c:9c:89:bb:5c:b4:88:0f:d9:1e:
                    0d:1a:4a:74:ec:67:27:55:5d:2a:06:31:0a:65:be:
                    c0:97:fb:9c:79:2c:1c:51:8d:a9:66:2b:c8:e6:17:
                    e2:f4:6c:c2:20:3b:aa:d6:f1:f9:7f:3d:8f:1a:f9:
                    5a:0f:c5:4a:57:18:c9:b6:4b:b4:ca:00:6a:09:f1:
                    5c:03:37:00:75:5d:01:5a:d6:b8:b9:c8:cd:33:f2:
                    1b:f1:2b:f1:ec:bb:bc:d6:77:8d:3f:85:cf:31:67:
                    2d:a0:6d:25:b3:1e:c1:6f:33:00:01:40:32:fd:05:
                    d0:bb:bd:7d:66:a9:f3:7b:ad:9f:73:8b:88:50:a9:
                    85:f1:9a:5e:7a:c3:00:69:15:1e:4e:61:37:21:7f:
                    4e:ad:37:b8:50:69:77:71:20:ec:4e:a8:7e:85:66:
                    b2:d2:40:ba:b3:9a:22:d4:be:c0:b5:7e:82:4c:ae:
                    a4:35:dc:0d:52:ed:5d:28:b8:07:ea:b7:6e:88:f5:
                    54:ae:cc:82:f9:7a:8d:ab:9e:fd:6b:b9:14:fe:87:
                    6b:a6:07:11:6a:05:07:eb:a0:5a:ab:46:15:f3:87:
                    26:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:37:AD:E4:43:C0:6C:58:16:16:12:62:01:15:27:43:AF:7C:E3:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl

            X509v3 Authority Key Identifier:
                keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:38::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:51:8e:05:95:92:30:00:03:50:52:2d:c1:9d:8d:24:de:67:
         fd:59:04:a4:f7:90:cd:cb:02:aa:af:79:70:3a:94:05:92:eb:
         56:58:78:37:bb:40:36:c5:62:9a:0d:3e:b7:eb:37:5d:93:dd:
         84:bc:e3:e0:47:5e:3b:30:30:af:15:c4:e8:bb:37:da:3c:71:
         ff:b4:46:41:54:ea:b3:9b:50:d4:dc:06:5d:4e:bf:70:7c:a3:
         fd:f4:8c:87:9b:e8:6d:3c:dd:61:5b:b4:11:7e:76:54:b3:13:
         fa:8f:f2:82:e8:6d:49:62:f8:01:57:85:9d:a8:09:cc:d0:e5:
         81:94:a5:d9:f0:ce:c9:20:03:f5:c3:d8:84:e6:1f:22:c3:df:
         d8:a3:76:cd:cf:30:c3:aa:a5:e0:7b:a3:12:df:dc:27:1d:5e:
         f9:fa:dc:75:19:35:7a:40:c0:98:fd:3a:84:9e:e6:c5:3a:08:
         73:ee:f5:16:15:f9:7e:0f:9d:d1:62:10:f6:7a:7c:51:af:7b:
         68:9c:a9:ef:2e:4b:bc:8c:7d:2a:92:5c:37:31:41:c3:7a:39:
         e1:59:d3:84:14:b1:20:dd:fb:d0:18:91:4e:b9:db:2a:77:e9:
         ad:ab:8a:32:9a:b5:02:e4:07:8f:fb:4e:d1:3e:b3:c3:14:21:
         03:b4:29:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:54 2024 by rpki-client on console-fra.rpki-client.org