Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa
File:                     2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa (raw, json)
Hash identifier:          rcsFHnZLNKjovFm6r6ippubO5dLDcMf7W1CwiHtsMIY=
Subject key identifier:   37:DF:CE:31:C2:11:3A:98:BD:C9:28:48:05:D2:81:6F:97:E6:0F:72
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584608A94DABF366D9738EFCCAD0
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa
Signing time:             Wed 29 May 2024 13:00:34 +0000
ROA not before:           Wed 29 May 2024 13:00:34 +0000
ROA not after:            Tue 27 Aug 2024 13:00:34 +0000
asID:                     57439
IP address blocks:        2605:f440:53::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:08:a9:4d:ab:f3:66:d9:73:8e:fc:ca:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: May 29 13:00:34 2024 GMT
            Not After : Aug 27 13:00:34 2024 GMT
        Subject: CN=6c8a5243-bdbd-41a0-b370-87e8455d6b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:34:81:c1:3d:d2:6a:28:4a:71:11:a4:1e:b5:
                    b4:39:59:a1:f0:c9:e0:fd:c6:f5:80:00:de:b2:6e:
                    bf:48:67:20:20:56:26:13:98:9a:89:84:21:be:85:
                    ef:d9:0f:44:b4:23:b9:5b:dd:65:c6:85:09:04:ab:
                    50:89:e9:eb:47:7f:e9:b5:af:8d:a9:24:52:b3:a9:
                    11:ce:a7:4c:ee:4c:4b:73:3f:d3:39:f5:65:92:39:
                    a4:de:6c:2c:2b:4d:f8:bc:5c:e0:69:4f:a1:1c:75:
                    d6:ec:e5:f8:be:73:28:9a:54:52:3b:8e:b6:27:2c:
                    7b:76:e4:47:ae:69:89:7b:1a:5a:9f:c2:64:72:d1:
                    9f:8e:5e:52:63:aa:8d:92:05:98:48:5a:d3:62:e1:
                    30:a0:5e:9e:a1:20:60:d5:b9:59:e8:f8:b7:13:19:
                    e0:ed:5c:90:39:f6:a6:ae:55:52:7c:6f:5e:55:ce:
                    70:70:7c:5b:ab:9c:42:26:55:ea:f7:37:2c:31:41:
                    a3:d7:9b:47:6b:de:1c:3b:36:6d:c3:81:7b:d6:c4:
                    96:c9:7d:74:98:5c:52:8f:d0:cf:34:20:7d:29:73:
                    45:35:9b:38:66:90:69:56:95:a1:c9:ed:ef:c0:76:
                    e2:8c:43:76:14:9c:49:1d:db:88:06:dd:2e:3b:0e:
                    7e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DF:CE:31:C2:11:3A:98:BD:C9:28:48:05:D2:81:6F:97:E6:0F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:53::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:9c:af:12:fb:2f:4c:8d:3a:bc:6c:a6:92:10:11:d1:0c:d6:
         9d:40:5c:55:52:8c:af:e2:ea:43:c8:48:b7:35:31:2c:88:69:
         83:b5:67:fc:be:a2:2d:58:8b:e0:69:ad:87:7d:ef:c8:ba:31:
         31:c2:7e:b3:63:6e:75:d2:41:12:e1:ed:72:5d:17:53:72:67:
         84:d0:0c:90:5b:14:40:a9:07:45:a1:bd:7d:b5:be:7a:c7:1d:
         cf:af:b2:5c:ee:03:e8:24:74:7c:2b:79:40:c5:ab:7f:0c:df:
         66:42:df:71:59:4b:30:4b:cf:f8:97:41:23:e8:69:11:80:b3:
         9c:b0:b1:ef:46:2d:1e:54:25:9a:04:08:61:37:0c:9e:7d:0e:
         c7:ef:4d:a0:d2:c0:ef:72:81:08:00:f9:34:ad:37:1c:17:fe:
         14:93:c4:43:a2:69:57:93:ee:ec:33:7d:f1:19:80:1d:6c:d5:
         0e:ee:e1:1d:d7:86:45:b0:9d:1b:95:a3:aa:ac:ea:2c:76:22:
         41:52:fb:51:b0:8b:30:83:e6:da:ee:43:a9:60:54:47:b8:57:
         3a:a7:e7:52:3b:09:19:b8:12:32:c8:0b:34:b5:08:a9:3b:db:
         38:d6:14:ff:cb:32:60:f4:ef:17:67:6a:da:0e:23:b2:9a:9a:
         c0:0c:17:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 07:42:17 2024 by rpki-client on console-fra.rpki-client.org