Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5580679c-fe47-36a2-af08-7e277e246b50.roa
File:                     5580679c-fe47-36a2-af08-7e277e246b50.roa (raw, json)
Hash identifier:          QKRLmxF2kCn7w+D+Ry24rKcnnatwM5QXuUeEmM5aLqc=
Subject key identifier:   C2:07:47:C7:ED:88:95:D8:E8:36:3C:29:F6:27:C3:00:B7:C1:A8:E4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DB9FC9BF4CACDC78658C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5580679c-fe47-36a2-af08-7e277e246b50.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11351
IP address blocks:        2600:6000:f5d5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:b9:fc:9b:f4:ca:cd:c7:86:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=1d4ae554-d4f2-45e1-bc0a-5f4a35c4bd14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:73:db:41:b3:16:ae:af:8f:69:16:a3:c9:
                    0f:40:84:af:ad:60:03:df:5f:31:eb:a7:73:75:6b:
                    53:8d:a4:f3:84:56:62:07:ed:59:bf:e1:83:91:3f:
                    92:1a:3c:8b:4a:f5:ba:33:d7:f8:8f:27:a2:7d:a2:
                    fa:c5:fd:a5:34:9c:ed:3a:0c:80:e9:b0:f8:08:4f:
                    6b:21:7b:4b:58:ac:a6:56:6d:49:1d:bb:af:6f:23:
                    cd:9a:ef:b3:11:b4:09:74:ba:ec:28:45:23:05:35:
                    81:d1:a5:1a:40:5e:b8:ff:e8:52:e1:bb:4d:2d:12:
                    63:e8:62:8f:72:f1:d5:bc:28:7b:fa:40:2c:86:dd:
                    9c:a0:bc:99:46:d5:11:ca:9f:00:dc:af:8c:fa:12:
                    fe:e2:f9:a9:be:41:05:09:30:0e:15:ba:fc:0f:74:
                    1e:55:cf:2d:d8:03:05:d9:f9:66:68:49:8a:91:ec:
                    ad:35:5a:a4:dc:f1:00:53:4f:de:7e:b6:cf:72:f6:
                    19:80:d8:52:31:65:9f:34:34:5b:43:49:5f:08:56:
                    a3:68:47:c6:5e:e8:0f:32:72:0b:39:52:c9:ab:c3:
                    dd:82:22:97:a7:32:03:15:42:a9:64:4a:5c:d2:be:
                    41:b6:ca:7e:1b:d9:d1:c8:4e:34:62:76:cb:9f:ad:
                    17:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:07:47:C7:ED:88:95:D8:E8:36:3C:29:F6:27:C3:00:B7:C1:A8:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5580679c-fe47-36a2-af08-7e277e246b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6000:f5d5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d8:71:85:3d:a8:9c:b5:85:58:14:76:77:f5:ad:73:4a:17:
         7a:f2:41:b9:f3:f1:34:c7:9f:6d:76:3f:7c:df:0b:cb:2d:c8:
         a0:57:fe:11:1d:06:bf:57:53:ac:1a:c8:c9:13:1b:f8:ed:72:
         3a:95:40:62:92:17:42:a2:42:e4:1b:7d:12:62:19:5d:e2:b7:
         36:d1:b6:61:22:78:cf:9c:e7:af:d8:84:14:16:49:da:a7:3f:
         a4:08:d8:c9:e3:9f:5f:ae:43:b9:1f:5b:50:5a:b5:c9:de:34:
         d0:76:51:b6:7f:0a:3a:0b:83:25:c6:25:81:e0:64:07:98:95:
         6f:68:24:e4:3e:6b:cc:15:3e:42:d6:66:ec:e4:99:f7:43:13:
         2f:8f:aa:d0:89:d5:eb:d7:23:91:29:c2:16:56:95:bc:a7:83:
         63:1d:20:f7:fe:ae:92:c7:ee:a7:08:a0:33:1c:ec:50:ae:9f:
         26:37:f0:99:03:42:b4:e2:57:ce:3c:a5:ce:9c:c9:28:f0:6c:
         cd:4f:20:e9:99:d3:4f:34:c8:35:c7:11:a7:69:de:27:c0:70:
         e6:ea:58:07:68:44:9e:a8:fc:4f:1a:6b:57:2f:96:ba:32:a3:
         da:b8:a8:f1:eb:f3:cc:67:73:1e:c2:eb:31:9e:c3:d2:d3:7b:
         f7:59:a0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:04:09 2024 by rpki-client on console-ams.rpki-client.org