Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a46d9b69-b96b-3037-8c65-c588a531a219.roa
File:                     a46d9b69-b96b-3037-8c65-c588a531a219.roa (raw, json)
Hash identifier:          rV0mR3MEz46E3SFJlQtnX/jAvwAY5C1QnCJH2YzoW24=
Subject key identifier:   70:43:D6:48:1A:93:85:E1:99:5B:88:F0:07:27:15:6D:F1:E4:5B:A6
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F432858452C1D3C5C9C7D1E002C8E7680
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a46d9b69-b96b-3037-8c65-c588a531a219.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     208548
IP address blocks:        2605:f440:97ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:3c:5c:9c:7d:1e:00:2c:8e:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=8836e57e-19f8-402b-b2f4-f70efbcea0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0a:97:27:18:dd:14:c0:e8:22:5b:59:98:a9:
                    44:98:3c:a7:e8:c5:3c:ae:5b:cd:37:9e:df:77:e2:
                    d0:05:0c:43:d6:ed:32:82:0b:fb:fe:ee:59:20:9e:
                    0f:d6:e3:40:c0:54:fd:7c:82:39:bd:09:ee:80:10:
                    3d:9d:b5:e9:a7:17:3b:e5:64:7c:6a:b4:4e:02:41:
                    14:a2:3b:41:6c:03:66:4d:65:de:09:71:a0:48:5e:
                    6d:79:49:cf:02:f1:9e:f8:8c:cf:49:19:b3:6b:8e:
                    c5:74:39:ee:08:5c:bf:0c:a0:ff:95:d1:fb:fa:10:
                    9d:88:d6:c6:e4:5a:01:11:c2:21:11:26:61:1a:d4:
                    f1:f0:56:0f:86:d8:d6:d6:fe:40:32:f7:c3:1c:83:
                    19:94:85:dc:23:c9:28:e6:12:8a:26:d2:0c:01:04:
                    a8:83:89:70:66:59:00:e8:78:0f:e3:0f:c1:06:04:
                    68:75:74:44:ef:20:10:89:ba:e8:46:85:99:2a:70:
                    91:0c:6a:ba:55:90:6b:83:99:ef:a0:bd:5f:6b:a0:
                    02:55:72:cc:ec:1b:04:f7:a4:d6:d3:fa:4b:b5:88:
                    b7:be:25:3a:71:06:a0:1c:a8:d2:8b:2e:ab:78:0a:
                    44:d4:17:5c:f8:fa:ca:27:e0:60:6c:ef:88:d0:07:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:43:D6:48:1A:93:85:E1:99:5B:88:F0:07:27:15:6D:F1:E4:5B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a46d9b69-b96b-3037-8c65-c588a531a219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:97ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:10:bd:ed:c2:13:ee:8a:7a:4c:eb:98:0c:65:87:c8:18:57:
         1c:8a:5f:13:e9:c2:99:c1:15:d3:53:6a:f9:21:50:6a:80:00:
         fe:1d:85:f6:d1:89:4b:5d:cb:23:b5:1d:28:c8:9c:d4:ba:75:
         22:3f:b9:e3:3f:26:e4:08:3b:ae:08:39:8a:02:6f:b1:e3:66:
         17:40:d6:2e:2c:41:55:4c:39:20:4d:bd:79:02:94:b1:41:88:
         36:ed:ed:d5:99:ac:4b:5d:70:91:a0:98:0e:51:e5:2e:6c:6a:
         96:d4:a8:55:fb:c5:26:ff:22:2c:83:2b:4b:00:bc:b9:fe:a3:
         b0:6d:e4:80:af:a6:84:bc:56:aa:63:4a:4b:c5:25:96:74:5a:
         e4:d0:7e:a2:53:3c:79:da:13:a5:d6:44:1b:f1:13:a0:63:75:
         d4:7c:97:18:6a:3f:98:bd:23:fb:82:ac:40:5c:b2:d5:e6:c3:
         1c:98:68:01:b4:fa:a8:9a:e5:7a:92:ed:d7:23:8c:d9:10:02:
         43:7a:b0:3c:0f:7d:e8:4a:e5:70:bc:51:d1:99:d7:c3:59:35:
         25:bf:47:1e:15:9a:2c:eb:74:1e:37:a6:90:ea:e6:d9:02:b5:
         d1:0b:a7:e2:14:75:07:e1:86:20:93:6e:9b:cd:59:fe:d5:6f:
         a8:1f:56:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:22:46 2024 by rpki-client on console-ams.rpki-client.org