Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/e699a7c9-a651-3e8d-81a1-512f04e659b9.roa
File:                     e699a7c9-a651-3e8d-81a1-512f04e659b9.roa (raw, json)
Hash identifier:          YgFxVDVZp6obOJm+oHv17fgEp6SNe+4d6aaXTMKMiIA=
Subject key identifier:   D3:E9:3F:29:43:36:C7:F9:03:7C:FC:5F:2D:EC:9C:82:FB:B0:97:32
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F432858450EEAD91CA4BB3326D6469A80
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/e699a7c9-a651-3e8d-81a1-512f04e659b9.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     51082
IP address blocks:        2606:f280::/32 maxlen: 32
                          2604:1740::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:d9:1c:a4:bb:33:26:d6:46:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=f0219336-e497-44c4-a0f9-373549ac791a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:dc:bf:c7:bc:23:59:c5:9d:a7:07:67:db:
                    7d:19:5f:94:4c:8b:8e:d0:26:b4:d9:9f:0c:38:6f:
                    92:91:69:18:f1:b4:4c:38:95:24:57:aa:e8:18:cb:
                    62:0f:9e:a3:34:6a:a0:66:fa:b9:93:d0:94:67:a0:
                    f5:60:be:e6:2d:57:99:24:60:b6:2d:c8:7d:14:63:
                    e4:3a:0d:a0:d8:db:cf:a6:21:a3:22:29:27:ec:18:
                    70:2e:46:a5:b3:47:52:bd:0d:b8:c6:b4:88:0c:3d:
                    c4:f3:9f:20:cc:f6:59:80:39:a0:37:61:01:d3:b8:
                    9d:c2:19:14:b0:43:2b:a7:81:b2:fe:38:5d:b1:fb:
                    61:84:57:26:24:d7:d0:d5:1c:8a:14:af:1e:ea:52:
                    a2:47:7b:7a:cf:52:7c:a9:67:97:4e:6a:4f:8a:ac:
                    cd:1f:e8:26:cf:aa:43:fd:c3:b4:5c:5b:53:7a:79:
                    7c:6c:d5:a8:a0:8c:a8:c5:5c:f4:40:ef:4e:80:bb:
                    98:11:6d:18:12:4f:2c:b3:28:9e:d3:b7:40:b3:d4:
                    ef:02:42:36:e2:a9:8f:9a:9e:70:8f:36:f9:7a:08:
                    31:26:6c:6d:35:1f:c9:78:8a:7f:bf:77:59:c1:91:
                    33:61:cc:8c:1b:f6:7a:78:14:94:d2:53:d3:45:b0:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E9:3F:29:43:36:C7:F9:03:7C:FC:5F:2D:EC:9C:82:FB:B0:97:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/e699a7c9-a651-3e8d-81a1-512f04e659b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1740::/32
                  2606:f280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:21:ee:3c:84:f0:96:77:bb:c0:7e:d5:59:40:ee:27:fc:d0:
         5e:1a:24:a5:f8:ec:ba:54:16:c1:dc:1e:26:37:6c:e5:43:68:
         5a:43:49:70:b5:be:fe:fc:3f:18:5e:00:e4:24:cf:a4:67:da:
         63:84:02:b2:62:1a:53:26:c8:98:88:b0:04:d3:31:7e:a7:51:
         26:e8:1e:73:23:62:a3:a5:09:a1:8a:82:03:22:3d:b3:51:25:
         8c:73:94:a0:81:4e:56:a6:54:70:a7:55:20:bb:38:67:19:e6:
         a5:6a:01:b1:52:a2:f9:73:0e:82:88:8e:8c:2e:ec:29:97:cb:
         0e:de:b0:6f:72:2a:97:2b:f9:22:c9:83:70:06:e3:48:a0:52:
         27:b6:0d:af:35:d1:0e:98:fc:ca:5e:e0:04:f0:24:34:6b:05:
         c2:d6:22:9e:31:ce:b9:ce:dc:e2:bb:45:4f:31:ec:ae:0d:6b:
         b9:09:aa:4d:97:66:9b:02:50:49:13:bd:99:93:b4:b6:06:55:
         c8:cc:fd:e5:80:cc:e5:58:8a:01:11:f1:64:40:01:0f:73:d0:
         fc:e8:6f:72:c2:75:fe:bc:d1:4d:0c:94:10:fd:9a:65:a6:71:
         bc:13:05:98:ee:ba:d9:6c:d3:86:07:be:3b:8d:66:06:8b:e3:
         36:dc:1b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:15:33 2024 by rpki-client on console-ams.rpki-client.org