Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/bbd2d963-8fd1-3b0c-8eea-727137ca4c69.roa
File:                     bbd2d963-8fd1-3b0c-8eea-727137ca4c69.roa (raw, json)
Hash identifier:          TMqlTkdT/wbUQM0RCVkv3DyT2tk3Uq6mej6tncrK3qc=
Subject key identifier:   72:F9:78:1F:A3:21:6F:AE:C4:17:87:6B:D4:A2:68:B2:D1:03:47:98
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DE76820C24868766F6080
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/bbd2d963-8fd1-3b0c-8eea-727137ca4c69.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        2001:4c8:1090::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:e7:68:20:c2:48:68:76:6f:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=f2f5abea-b09a-4901-a59c-0267d7f3f3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:3f:32:2a:bd:80:23:8f:33:a7:cd:17:55:
                    7f:2c:bb:dc:aa:01:af:6a:69:40:a7:f0:fe:ad:44:
                    d0:0a:62:71:ca:3a:b3:e9:94:3f:7f:7a:8c:c9:4c:
                    cf:a9:03:ed:82:23:36:3b:83:58:36:8f:ba:a7:35:
                    81:64:53:b2:f6:76:b5:7a:84:09:b9:c4:e8:d8:68:
                    fa:e9:48:df:ef:90:72:9d:46:7a:c7:34:5a:39:8f:
                    a0:77:cd:0c:3e:8c:4f:57:73:0e:05:2c:7a:fa:c2:
                    c5:e1:1c:d1:dd:01:64:52:a3:06:22:f9:19:39:d4:
                    61:f2:05:6f:5b:46:30:76:ad:bf:9b:c2:fb:70:fb:
                    13:ff:b1:95:a8:83:d9:83:5b:c5:11:7d:d3:bc:07:
                    66:11:87:90:6a:ee:62:4b:63:97:0a:c3:81:29:08:
                    f1:11:af:2f:07:c6:92:0d:89:61:46:c5:53:52:3c:
                    c0:01:21:49:67:8b:32:88:5c:c2:ef:09:90:a6:d7:
                    e8:38:c0:8b:27:e1:e2:12:0b:9e:c2:c5:3d:ce:5d:
                    09:b3:3d:f9:30:92:e3:cc:7a:4d:4b:f2:46:ab:b8:
                    cd:3b:e8:a5:f6:cc:43:97:52:7f:f2:57:a4:e5:88:
                    70:e0:69:5b:0e:1b:30:30:8d:c1:25:0f:5b:26:6b:
                    60:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F9:78:1F:A3:21:6F:AE:C4:17:87:6B:D4:A2:68:B2:D1:03:47:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/bbd2d963-8fd1-3b0c-8eea-727137ca4c69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1090::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:34:55:2d:3c:60:af:26:6b:52:e4:77:7b:ae:bd:d8:61:f2:
         d8:26:2b:29:86:e6:69:39:73:1b:1f:00:d3:04:68:6f:6a:4b:
         e3:c1:1a:b8:95:f2:3a:8d:5a:7a:b9:d7:66:31:80:f5:32:05:
         e0:30:82:a2:ab:1c:7b:e8:81:f1:6c:6e:bb:70:e9:af:d3:c5:
         67:5e:c6:2a:96:27:66:14:66:a5:9f:89:a2:96:62:23:ba:a3:
         92:6a:30:5c:c1:5f:92:40:e7:2c:9a:b5:f2:2c:09:30:d3:88:
         9c:33:3c:48:49:98:56:61:1f:cd:ef:ae:2d:5e:ef:d2:49:68:
         9d:d3:74:3e:8f:80:6b:4a:03:a4:9d:39:34:ad:ee:65:26:88:
         d7:b0:48:ea:c2:c5:02:01:83:e8:e1:54:11:3a:48:08:a5:49:
         fd:cc:e2:7f:7e:83:ba:71:7f:a5:2b:ef:74:fb:01:10:fd:6a:
         83:4a:f9:90:5d:f2:bd:63:de:3a:31:c7:34:85:ab:ce:b4:f6:
         d9:25:d6:7e:2b:03:fc:05:55:e1:e0:62:04:06:68:0c:91:48:
         6c:e2:42:16:37:26:56:03:7c:cd:70:51:25:b4:25:fa:20:61:
         30:e3:fe:e0:5f:e4:88:da:f4:cb:82:2e:f0:df:d0:2f:96:96:
         10:88:d2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:43 2024 by rpki-client on console-fra.rpki-client.org