Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa
File:                     86d17516-6609-38bc-b9c5-1de3645b206a.roa (raw, json)
Hash identifier:          0nUhP6Z4ozAZf0jxQ46VUl8YBQpLSeVmfVj8J+nPO34=
Subject key identifier:   5D:68:7B:96:60:C2:08:43:EC:79:68:8C:B1:CE:C7:1C:2A:F9:4E:97
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858456F1DC8F68FF96E0C1981CE80
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     20253
IP address blocks:        2606:bc40:202::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:c8:f6:8f:f9:6e:0c:19:81:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=cdbf2330-adf0-41c6-8aa7-9e20c67b3920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:7b:ac:f0:90:47:06:c9:01:19:b2:5c:80:
                    c3:80:9f:d6:c2:36:08:4f:c4:ca:ca:f9:73:5a:8f:
                    aa:f2:60:fd:c0:48:bd:09:40:ce:4c:0c:6e:23:36:
                    93:75:38:d2:77:3e:bd:a6:9b:e7:c6:a6:2f:eb:39:
                    18:f1:6d:fa:4c:a7:f0:c0:18:5f:18:8b:e5:69:6d:
                    78:5a:b9:2d:13:56:5b:f5:83:98:3a:06:06:ab:9a:
                    d1:31:48:39:5f:b0:b6:88:6c:71:68:7b:69:47:23:
                    69:eb:d4:35:f2:5e:71:63:16:21:17:5d:39:fd:f0:
                    9e:9a:62:d2:a9:a0:84:f9:94:12:48:16:79:8e:e4:
                    90:a6:89:f8:2c:ed:5a:95:fc:a4:a9:4b:b8:d0:57:
                    05:c4:b2:cc:de:11:c4:48:1e:a7:3b:39:0a:63:98:
                    3d:68:db:8c:78:26:e1:ab:23:20:10:ca:4d:6f:8c:
                    7a:03:92:cf:b9:d0:80:83:a1:7e:63:54:08:88:b9:
                    c2:18:11:31:1e:c8:c7:c2:cc:af:0b:b1:86:c3:95:
                    5c:b0:64:ce:c3:1d:e5:91:aa:aa:6b:a3:4a:0a:4d:
                    cd:13:56:76:3c:60:f3:47:51:ce:dd:5b:13:ab:56:
                    9e:11:0a:77:78:05:69:df:ef:e1:f3:d0:6a:d5:a3:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:68:7B:96:60:C2:08:43:EC:79:68:8C:B1:CE:C7:1C:2A:F9:4E:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:202::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:78:ec:b6:b0:b8:58:03:05:ef:ed:cd:98:18:0c:b7:eb:5c:
         19:5b:8b:a2:5d:24:99:f6:f2:11:3a:47:30:3c:74:54:68:f6:
         61:c3:71:87:8c:fa:96:be:69:d0:40:21:ff:1b:3b:e6:36:98:
         1b:66:5d:a0:5c:8d:a5:d0:91:c4:99:5b:55:12:df:cb:7b:77:
         d7:ca:be:10:8e:7a:71:eb:f1:7d:75:ad:19:1c:a6:ff:59:37:
         a9:c6:74:a2:bc:80:1b:3a:01:54:85:50:12:bb:8a:2c:1e:bf:
         36:57:71:16:37:69:23:76:ac:72:5b:2a:d3:c7:d6:ee:dc:27:
         ef:a1:69:a2:9d:b1:48:21:46:cf:ab:dc:ee:19:d8:5b:5e:f7:
         fe:09:fa:03:e7:aa:19:d9:55:f1:25:25:a0:96:ae:9d:d3:36:
         81:b1:78:39:db:d9:89:66:86:47:b6:ae:40:83:a6:11:69:17:
         d6:ad:95:ed:3c:85:91:3c:c8:10:3c:87:b4:30:33:b4:f0:e2:
         22:3d:1c:ba:2f:e8:af:5e:8a:c6:19:ef:ae:8a:3d:cd:bd:d4:
         52:aa:c6:87:b8:9e:ff:26:cb:85:da:e9:f3:e0:2c:3d:8a:83:
         9b:36:7e:b2:3c:33:7c:4e:05:ae:54:69:fa:2e:21:36:bc:81:
         3d:c5:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:26 2024 by rpki-client on console-ams.rpki-client.org