Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/b801981e-8b4e-342a-a6f6-9042400af3fd.roa
File:                     b801981e-8b4e-342a-a6f6-9042400af3fd.roa (raw, json)
Hash identifier:          +dgeHye9i/kdboOQs23QjYVl6Fl9zJPooRctaP2/1J0=
Subject key identifier:   48:C7:CF:92:02:2C:8E:80:98:5D:39:F6:56:C3:E2:8D:98:79:D5:0B
Certificate issuer:       /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Certificate serial:       010D0C9F43285845DBFE7128E0A9E7D8FA71A8C0
Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/b801981e-8b4e-342a-a6f6-9042400af3fd.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     27580
IP address blocks:        2604:f1c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:71:28:e0:a9:e7:d8:fa:71:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=4661fd45-21ba-4bfe-8980-aee1967774ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:32:c9:48:9f:ff:b8:8f:fc:ae:d7:64:a9:f4:
                    d2:d4:5a:be:4e:18:76:9c:bd:77:60:d2:25:5b:3a:
                    80:53:8c:71:19:0e:77:37:da:7f:9a:18:8a:2a:a3:
                    a8:7b:f8:2b:66:3f:76:3c:c4:22:fa:52:72:f8:0a:
                    b1:74:bc:41:9a:d6:ce:25:b5:0c:8a:29:cb:ef:00:
                    ba:6e:42:1e:8d:ea:74:e4:10:10:34:86:13:21:65:
                    dc:4a:f9:0e:e4:48:c1:f6:f2:0a:7a:89:cf:e3:d8:
                    aa:b9:0c:e2:6c:ac:5a:27:1b:dd:47:20:67:7d:3c:
                    b0:6f:3a:8f:dd:e7:3f:64:ab:f2:7a:46:42:38:8e:
                    11:81:41:8d:72:11:b6:61:08:3e:0c:f0:c3:e7:84:
                    9b:db:a2:2c:89:8c:5a:97:ca:b1:c3:06:5b:46:da:
                    10:2a:7f:59:5a:78:1b:0e:59:18:8d:49:88:ee:6d:
                    5d:51:10:62:f9:e5:d3:f2:72:84:60:fd:a2:b4:79:
                    dd:41:76:58:0c:1a:be:17:ba:40:56:8e:29:78:e0:
                    0e:13:0c:e3:ab:6d:a2:b7:96:6d:1c:46:5c:ee:e7:
                    8b:71:fb:89:f4:02:47:8c:f4:58:4a:cf:7d:a8:47:
                    a6:67:02:5c:9f:a9:6a:89:6c:5f:8e:dd:23:ac:cd:
                    01:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C7:CF:92:02:2C:8E:80:98:5D:39:F6:56:C3:E2:8D:98:79:D5:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/b801981e-8b4e-342a-a6f6-9042400af3fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:fc:c0:31:64:f0:9b:3f:d2:19:37:e0:49:e9:05:75:1d:50:
         6a:27:a8:25:db:b4:d4:ce:f0:95:60:e0:10:36:84:c9:90:d0:
         dc:63:b0:41:7d:6f:ae:0b:08:69:87:d1:1a:24:e1:9e:85:d5:
         ff:4d:2a:1c:f0:63:60:02:ba:96:c8:36:cd:2b:fb:00:95:ed:
         cb:99:3f:77:28:fc:57:1c:6e:33:e8:4a:4c:8f:e1:42:7e:a5:
         d0:55:bc:48:d4:7b:60:ab:b6:b3:b8:66:55:df:d6:7d:d8:fa:
         e8:10:87:6d:5d:26:08:33:3f:ac:52:fa:b4:94:37:41:44:f8:
         21:25:be:08:41:91:76:9c:98:c4:28:96:58:f8:d2:35:9f:0e:
         b2:32:46:59:c5:fb:ce:89:90:45:dd:3c:6f:4f:9c:4e:ab:55:
         f9:6a:b4:7c:a0:44:2e:1a:92:fd:c9:e7:0e:33:b5:36:bc:fd:
         dc:67:5b:69:f7:34:a0:d3:50:7b:92:a2:66:f6:94:44:fb:76:
         d7:8d:39:5b:1b:82:92:5b:07:43:cf:f6:42:a3:1a:7d:58:5c:
         7f:8b:57:5c:a6:cb:81:c9:d1:f1:2a:83:4a:70:1a:68:1b:a7:
         8f:d5:02:f2:ff:0c:0d:41:d8:de:9a:81:a8:09:c5:c3:7f:c2:
         47:f7:43:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:12:50 2024 by rpki-client on console-ams.rpki-client.org