Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/75f98aba-05a3-38de-a4f7-6a4e4f9701f8.roa
File:                     75f98aba-05a3-38de-a4f7-6a4e4f9701f8.roa (raw, json)
Hash identifier:          2DcsOlz/aiTMfG1qLvJ7w95H6Ib2K1V4/U3QSfG94ZE=
Subject key identifier:   BE:AB:6E:F5:95:49:BA:1B:28:77:B3:EE:53:40:88:F1:3C:04:CD:02
Certificate issuer:       /CN=daef5cc1-9697-4016-a7b1-84106520128a
Certificate serial:       010D0C9F4328584548F19ABE172F73ADDB9FFBA0
Authority key identifier: 53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/75f98aba-05a3-38de-a4f7-6a4e4f9701f8.roa
Signing time:             Thu 21 Mar 2024 20:51:05 +0000
ROA not before:           Thu 21 Mar 2024 20:51:05 +0000
ROA not after:            Wed 19 Jun 2024 20:51:05 +0000
asID:                     6556
IP address blocks:        2602:815:900f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:f1:9a:be:17:2f:73:ad:db:9f:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daef5cc1-9697-4016-a7b1-84106520128a
        Validity
            Not Before: Mar 21 20:51:05 2024 GMT
            Not After : Jun 19 20:51:05 2024 GMT
        Subject: CN=a591b12a-bbc3-41b3-9092-2e8030a2db37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:58:90:73:54:1b:f4:2a:a9:2f:26:51:2e:ea:
                    47:9a:8d:2b:89:ef:bf:d3:10:a0:46:74:1b:68:b1:
                    6a:d4:9a:17:e4:89:ea:85:c7:76:4b:e4:a0:49:b2:
                    6a:a7:a5:91:e1:32:e3:2d:33:64:05:cd:0f:88:da:
                    38:c1:92:59:2b:46:13:10:e9:b5:ce:b2:d9:bb:8e:
                    74:7f:2a:a7:c4:e6:0c:5e:ec:e3:9e:11:40:5b:41:
                    59:50:c7:22:30:1d:db:73:c0:70:3f:8b:bc:80:a0:
                    09:42:8f:7c:c3:fc:b9:21:35:72:47:eb:f4:0c:ab:
                    0e:7e:b1:78:ad:f2:88:0c:44:41:1f:33:3a:b3:1a:
                    ae:55:f0:00:a5:03:18:19:58:4a:3f:30:bb:5c:dd:
                    ad:74:ea:e3:aa:40:0f:75:0f:39:f9:e0:06:15:ed:
                    9b:c3:d6:e7:62:81:f5:3c:27:d4:1d:1b:13:6b:00:
                    7c:b0:2e:14:9f:c4:ec:f1:01:f1:bd:04:6b:ea:21:
                    65:bf:bd:e6:3f:8c:76:79:01:a5:a1:c1:0a:9c:6e:
                    1f:23:c4:8d:73:74:b4:04:23:df:50:fb:ba:b6:22:
                    25:47:0a:02:d8:14:89:f3:34:f6:06:7d:ef:79:f3:
                    fb:13:aa:ba:22:33:e9:e3:2f:bd:e2:d3:1a:83:17:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AB:6E:F5:95:49:BA:1B:28:77:B3:EE:53:40:88:F1:3C:04:CD:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/75f98aba-05a3-38de-a4f7-6a4e4f9701f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl

            X509v3 Authority Key Identifier:
                keyid:53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:900f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:f1:1a:1b:36:29:c5:7f:20:a5:b7:44:95:99:83:01:8f:57:
         70:fb:3c:86:10:04:aa:41:90:37:52:c1:8f:02:89:bf:28:a6:
         e7:ee:f7:1c:06:0c:0a:05:54:db:eb:80:3a:ee:a2:b3:25:57:
         bb:fb:12:91:b8:49:9b:09:ac:d7:c3:fe:94:7c:a2:54:05:2a:
         bf:62:58:7f:c1:6a:e7:8b:1a:9e:6b:6c:0d:ab:89:b6:df:07:
         3e:14:52:57:93:93:58:d8:a3:90:3e:d8:a9:72:10:c8:c0:59:
         53:35:c6:2e:d3:b8:1c:e8:72:a1:fc:e2:26:db:17:34:a9:8d:
         3c:74:01:49:21:c7:4a:63:00:f5:30:2b:e0:e0:01:a3:48:cf:
         fa:b5:ab:45:de:52:f6:3c:c4:4a:ad:16:51:06:31:df:43:c2:
         bc:49:9d:9e:50:a2:17:61:52:bf:61:c0:f0:cd:3a:80:94:a5:
         a6:01:60:f2:65:23:10:25:26:1a:49:4f:a5:bb:a1:93:5d:69:
         3f:7d:ed:76:c5:3e:31:af:1e:20:30:11:02:b8:64:18:06:e1:
         9a:17:e1:a4:2f:ef:ff:c9:c7:1d:cb:b0:81:35:33:ea:8d:18:
         69:4b:43:5e:4d:17:44:93:3e:50:78:8f:25:8f:60:f5:4a:ab:
         f5:8a:29:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:30:01 2024 by rpki-client on console-fra.rpki-client.org