Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ec421b3d-5056-343a-80e3-3a0674245800.roa
File:                     ec421b3d-5056-343a-80e3-3a0674245800.roa (raw, json)
Hash identifier:          lFTMppECQW6fX8mGMI4NQyeh8n++eDNILQWjrlpGSnw=
Subject key identifier:   B5:3E:8E:13:5A:CC:CE:0C:DE:D7:18:8B:BD:2E:03:4D:46:2D:22:14
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DB9E889709261BDFAF280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ec421b3d-5056-343a-80e3-3a0674245800.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11351
IP address blocks:        2600:6000:f927::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:b9:e8:89:70:92:61:bd:fa:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=e893d262-47c8-4879-a51a-058448f9262b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:89:83:fe:81:6d:42:6b:c0:eb:a3:2a:44:12:
                    63:2b:fd:5d:d9:89:ae:08:69:45:1b:8e:14:47:d1:
                    cc:ac:f7:56:fc:a8:40:7d:e1:28:ac:c4:4a:5d:40:
                    2a:8c:a2:0a:c0:e7:af:0e:12:dc:63:2d:a7:20:95:
                    1d:77:d6:e7:ef:82:5c:f2:7b:4d:23:bf:07:5d:2b:
                    6b:53:05:dc:a5:e0:48:63:e0:16:18:63:ad:a2:15:
                    5f:de:d2:2a:d9:e7:2a:9f:d2:7b:69:2a:d3:40:79:
                    1e:91:db:27:3f:1c:be:b9:ba:5a:81:c7:75:ac:8f:
                    bb:cc:8b:72:de:78:0e:80:1b:1c:7b:1c:ed:75:c0:
                    92:95:65:08:f4:ee:e4:d1:5d:be:b1:11:da:0a:b4:
                    d7:e6:cc:83:4f:ec:53:16:df:d8:d8:cd:ea:db:7f:
                    17:ae:1c:25:0d:84:33:56:1f:55:0d:57:c1:26:9e:
                    65:42:45:75:00:98:30:3b:15:a4:81:8c:a2:3e:c2:
                    13:81:86:7b:57:62:94:6a:ac:58:2d:ce:b3:16:50:
                    05:0f:3d:b7:8a:e2:3c:ee:a2:5e:1b:ae:ff:de:c7:
                    62:59:e0:00:bd:2f:e2:a8:4e:53:1d:d9:8d:58:ea:
                    9b:37:a3:9e:1a:24:03:ab:c5:6c:45:39:91:95:b6:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3E:8E:13:5A:CC:CE:0C:DE:D7:18:8B:BD:2E:03:4D:46:2D:22:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ec421b3d-5056-343a-80e3-3a0674245800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6000:f927::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0c:90:bb:f4:e0:4e:43:33:b8:fe:ad:1e:42:a5:a6:f5:b9:
         54:69:c4:b9:38:e3:0c:a7:a6:be:db:52:a5:00:c0:ff:11:ef:
         40:10:54:30:db:c0:6e:c3:05:b2:d4:58:1b:da:60:c3:da:87:
         6c:53:e4:3a:29:a4:d3:c3:92:03:6f:c4:dd:27:cd:7a:ac:62:
         18:cc:1d:bd:e6:d3:94:48:e0:6d:ce:fa:c0:23:a7:f6:4a:32:
         09:8c:fe:a9:89:fb:d7:18:1a:ab:1f:55:35:59:d6:f3:d9:a9:
         c6:fe:10:5f:92:4b:2f:1a:c5:ef:b2:5d:2f:e5:0e:2b:68:e9:
         e4:44:9a:14:5a:db:95:0c:8c:4d:68:c9:e8:08:24:d8:47:14:
         fe:47:8d:f9:fe:4d:d5:9b:40:24:c3:ec:7c:78:6f:a8:81:7c:
         38:27:b0:d9:e3:42:72:97:65:a0:06:a3:ed:b8:25:e1:47:bd:
         fb:32:2e:39:55:a0:00:7d:17:d8:8d:d0:d5:a2:ce:c1:b9:a8:
         cd:7f:e5:df:36:ac:34:af:69:5b:f8:8c:cd:87:0f:98:cc:ef:
         da:44:3e:8e:86:63:cc:a9:98:a9:e2:e9:22:b9:53:4e:98:a3:
         b1:25:6d:59:73:df:cf:7b:22:79:c4:e8:20:45:87:0f:a3:b3:
         cf:4e:7e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:56:16 2024 by rpki-client on console-ams.rpki-client.org