Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0da19735-40c4-31c3-a739-88e03152a67a.roa
File:                     0da19735-40c4-31c3-a739-88e03152a67a.roa (raw, json)
Hash identifier:          rM0cOo/vIZbd4fnYPRCbzIpFlbPVXnsVKeeiUpczMxE=
Subject key identifier:   34:0C:68:DB:E8:50:8B:E1:40:E9:98:6C:46:D4:F8:CA:03:4F:E8:40
Certificate issuer:       /CN=0cb0d156-0906-405d-9cea-d599952bae65
Certificate serial:       010D0C9F4328584515E59578D6CA36E0D0BFEF60
Authority key identifier: 61:75:AD:68:36:B0:9C:A3:C5:D3:D2:C7:09:97:B5:B6:3A:1E:AC:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0da19735-40c4-31c3-a739-88e03152a67a.roa
Signing time:             Sun 03 Mar 2024 14:00:31 +0000
ROA not before:           Sun 03 Mar 2024 14:00:31 +0000
ROA not after:            Sat 01 Jun 2024 13:00:31 +0000
asID:                     20303
IP address blocks:        2605:ed80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:15:e5:95:78:d6:ca:36:e0:d0:bf:ef:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb0d156-0906-405d-9cea-d599952bae65
        Validity
            Not Before: Mar  3 14:00:31 2024 GMT
            Not After : Jun  1 13:00:31 2024 GMT
        Subject: CN=7af70356-5c36-43ab-976d-f4a1a07abd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:c1:57:e2:16:51:06:c7:19:d0:ca:0d:71:
                    b0:ee:65:17:42:ed:b2:33:b8:83:8f:98:44:3f:7c:
                    1f:73:81:16:71:d2:23:00:47:16:1f:f0:cf:44:e5:
                    a9:bd:83:48:f8:1f:2f:60:70:d5:ab:ad:49:03:34:
                    44:f3:42:6a:ae:14:11:14:8c:31:30:9e:af:0d:d2:
                    f6:fb:3b:20:ce:6e:9a:5e:f7:da:0e:74:7b:4d:49:
                    ba:70:3f:7e:53:45:b1:33:e0:6a:e9:d7:58:d5:5c:
                    a6:2a:7c:3e:9c:bd:f8:55:4a:4d:b4:27:21:83:46:
                    e6:f7:ee:6b:41:38:f1:5a:82:77:20:37:49:fa:4b:
                    74:5c:79:b8:64:b5:b0:d4:25:5d:39:43:b2:d6:ec:
                    8f:c5:58:eb:82:41:63:44:d8:ee:c9:39:39:15:2f:
                    d7:73:7a:54:ae:2a:41:0f:3c:e0:7b:3e:54:75:d3:
                    71:58:84:f8:fd:d4:9c:14:1f:d7:19:ce:81:f5:62:
                    b4:05:22:6c:47:e7:25:e4:02:7f:30:48:5e:4f:bf:
                    4f:37:29:02:90:d2:67:17:45:72:cf:1d:cd:93:50:
                    75:36:85:09:f7:eb:36:4c:4d:31:9e:94:00:51:47:
                    98:cc:36:34:83:85:54:51:8e:e3:48:7a:8a:29:44:
                    10:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0C:68:DB:E8:50:8B:E1:40:E9:98:6C:46:D4:F8:CA:03:4F:E8:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0da19735-40c4-31c3-a739-88e03152a67a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.crl

            X509v3 Authority Key Identifier:
                keyid:61:75:AD:68:36:B0:9C:A3:C5:D3:D2:C7:09:97:B5:B6:3A:1E:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ed80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:f0:1e:43:09:11:16:c8:35:72:37:79:d9:8d:54:dd:37:61:
         42:3d:42:29:30:ba:f7:5f:26:65:4d:4b:93:73:9b:a5:a2:82:
         37:b2:bb:6a:05:2a:eb:07:74:86:07:65:03:b7:f8:1b:49:77:
         a1:66:45:2f:6f:88:a4:e2:05:10:45:f0:fb:5a:96:13:e5:fd:
         06:67:c4:3f:98:d1:3e:e0:b5:b1:60:a8:8b:91:c5:40:39:f0:
         25:9e:3a:a8:24:ae:af:30:32:52:4e:cd:11:11:82:25:bf:67:
         d9:45:40:f5:93:94:a0:4f:85:1c:a5:cf:68:42:26:97:cd:36:
         e0:61:f8:8b:35:05:50:65:72:c4:85:ca:70:c6:6b:86:28:2a:
         74:77:43:6a:37:36:5b:64:b5:3e:cb:ae:62:c7:e3:77:d2:a9:
         de:4c:08:e3:d2:2e:6e:79:2a:97:4f:fb:42:5f:99:ba:a5:5d:
         bb:a8:01:6a:69:b6:46:67:c9:5d:95:af:db:c8:7f:25:6b:48:
         ed:ab:93:c6:85:a5:e4:59:90:b1:d9:16:15:e0:be:37:88:09:
         fd:f1:90:af:27:5a:1b:36:16:0e:9d:07:0e:d7:91:ed:b4:4e:
         26:b4:3e:77:e0:44:3c:6a:47:cc:8a:c2:a6:da:75:d6:3a:26:
         ac:7f:96:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:38:20 2024 by rpki-client on console-ams.rpki-client.org