Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a14400e4-1a08-36de-a174-48ef201cf215.roa
File:                     a14400e4-1a08-36de-a174-48ef201cf215.roa (raw, json)
Hash identifier:          GY9OMiYzBNbxxEBgQcT+sV4KRGuAiAVQBYrUwMUDrzc=
Subject key identifier:   96:CC:BB:90:89:BC:00:FC:52:CD:B9:BB:1D:7D:F8:A9:A5:1F:D0:31
Certificate issuer:       /CN=d498318a-7059-42be-9b60-234aedba5e34
Certificate serial:       010D0C9F43285845068ABBEDCC962ECC30A09A00
Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a14400e4-1a08-36de-a174-48ef201cf215.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     16787
IP address blocks:        2605:1c00:ff0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:bb:ed:cc:96:2e:cc:30:a0:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=5e7275ea-d3ed-4b0e-a822-82190788cc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:96:07:5e:7b:cf:84:87:6e:5b:94:4a:a0:70:
                    aa:f0:8e:7d:06:58:6f:03:cc:84:b0:3a:bb:eb:d0:
                    d7:eb:4d:ea:fa:cf:40:a1:15:a2:7b:cc:e0:af:31:
                    b3:2f:0a:ff:74:79:45:3d:1b:43:20:f4:9c:a1:7b:
                    36:03:b0:91:45:27:9c:93:1b:aa:07:9f:5d:a3:2a:
                    71:d6:58:92:37:bf:46:b7:f7:4a:aa:bc:d4:ea:81:
                    f8:a6:04:ee:ec:59:22:c6:92:dc:a0:ea:3f:b9:4a:
                    3d:98:ef:d2:ca:7e:7a:6c:7e:de:5e:7c:12:0f:80:
                    12:22:64:e2:72:54:e2:43:6f:4b:83:27:cd:be:be:
                    c6:96:ce:bf:d3:17:98:f9:ab:2e:9c:60:cd:a3:58:
                    1a:82:fd:99:db:bd:f2:08:db:99:f1:bb:d6:6c:3b:
                    1a:b7:b9:58:0d:05:aa:47:dc:87:68:7d:6a:30:25:
                    3d:67:8b:36:19:43:ce:c1:dd:3a:1a:37:9a:6e:0c:
                    e6:d3:0e:a0:60:d4:04:b2:02:0b:8a:9e:09:e7:0f:
                    93:fa:1b:39:b9:36:ef:ed:7f:46:51:f4:8c:f4:74:
                    e2:07:8b:f0:6c:e7:c9:6b:26:91:3f:83:b2:ba:3a:
                    a5:10:0a:01:5f:ec:28:78:ac:c0:e5:9f:39:7c:4e:
                    28:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CC:BB:90:89:BC:00:FC:52:CD:B9:BB:1D:7D:F8:A9:A5:1F:D0:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a14400e4-1a08-36de-a174-48ef201cf215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl

            X509v3 Authority Key Identifier:
                keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f7:3f:e0:b6:28:80:69:07:fb:47:d2:21:dc:ea:df:22:77:
         d4:9b:17:ad:86:97:b4:b9:16:d4:09:55:97:e7:82:3e:7c:3c:
         1d:3e:e1:d6:f0:6e:41:c2:54:2a:ed:47:65:bd:5c:7d:f8:ac:
         fd:c4:5f:07:fc:2c:72:69:99:bd:c1:3b:c0:84:6b:a4:88:92:
         61:4e:34:fb:33:5a:25:2e:f1:11:0f:7b:78:d6:0e:db:a8:7c:
         bf:0a:b9:b1:14:4e:c6:d6:d9:bf:77:c7:64:a9:cf:f7:4e:a6:
         b3:e7:df:41:59:bd:82:30:9d:09:49:d0:2d:b5:ae:03:43:68:
         ba:53:53:56:ab:f1:6e:cf:59:a8:bd:af:69:7b:00:13:c7:12:
         35:67:f4:a0:14:2a:4c:a2:8f:9a:60:54:78:23:f7:ab:56:49:
         7c:ed:b3:31:60:3a:88:fc:f9:5c:d2:f6:42:ce:1e:2d:14:42:
         70:f9:8a:50:63:8e:c5:6f:ba:87:11:5b:54:19:aa:ba:e6:33:
         c7:eb:42:27:d9:2f:96:39:57:1a:94:4c:76:15:14:50:6b:2a:
         b2:16:a7:c6:ec:ff:04:7e:2b:5d:8f:4c:46:03:11:06:24:c1:
         63:08:e3:d9:c1:74:97:6a:e6:32:f7:1d:70:76:2d:1f:f7:81:
         32:44:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:58:22 2024 by rpki-client on console-ams.rpki-client.org