Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cebc2ec2-0867-3c28-b361-949ecc48c961.roa
File:                     cebc2ec2-0867-3c28-b361-949ecc48c961.roa (raw, json)
Hash identifier:          MzP14I2uLUTzhzzTTZP14bS9JCV82cyNZSx3mZ0f/L8=
Subject key identifier:   9D:11:0B:CD:BB:72:A1:D2:83:59:A3:71:DF:B6:1E:96:F6:B1:DE:95
Certificate issuer:       /CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
Certificate serial:       010D0C9F43285841E46D7F36EFB9FE9A804650F0
Authority key identifier: 5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cebc2ec2-0867-3c28-b361-949ecc48c961.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sat 01 Jul 2023 18:05:32 +0000
asID:                     398325
IP address blocks:        2605:e040::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:7f:36:ef:b9:fe:9a:80:46:50:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul  1 18:05:32 2023 GMT
        Subject: CN=025263bd-bb0b-4221-900d-3079296fa419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:04:8b:3e:b5:8e:b2:e4:2d:6a:68:f3:4b:00:
                    48:97:17:75:5f:0c:5d:07:26:37:ab:8f:bd:59:ce:
                    db:bf:6f:d5:ec:c3:fc:a0:5d:ef:83:b2:34:a8:01:
                    8b:fd:25:3d:c1:ea:f2:b5:f7:55:8b:74:c5:7e:71:
                    af:3f:8a:e7:c7:c7:c4:7b:7a:6c:97:80:74:9e:c1:
                    d1:d2:b5:19:01:cf:18:c8:dd:ec:c3:d3:4c:f3:d1:
                    6f:7a:0b:0b:a9:0a:b2:3c:96:b8:8e:fe:0b:ec:2c:
                    81:44:14:74:71:bc:3c:b6:77:99:1c:61:23:20:64:
                    c5:dc:20:37:e4:d2:df:47:38:c5:6f:e9:03:06:29:
                    9e:0d:34:4a:c7:3e:ef:49:96:03:3a:81:d8:41:a8:
                    15:ae:0c:37:14:b0:87:90:a1:a5:ee:a6:55:0e:92:
                    af:5d:4f:5c:dc:aa:00:ec:4e:27:2e:5f:ea:c8:dc:
                    9a:2e:67:9d:5b:9a:1d:80:ae:ab:bc:22:e9:2e:1d:
                    10:48:72:69:f3:30:3e:50:fa:c2:6e:bb:fe:f6:80:
                    84:bf:c0:4f:89:b2:1d:d1:10:9b:5f:1e:0f:68:af:
                    a8:78:1d:0d:de:b6:df:66:62:1a:79:a4:ff:ae:65:
                    5a:ef:80:5b:45:e2:9b:f9:9c:a1:8e:5e:4c:f2:1f:
                    30:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:11:0B:CD:BB:72:A1:D2:83:59:A3:71:DF:B6:1E:96:F6:B1:DE:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cebc2ec2-0867-3c28-b361-949ecc48c961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl

            X509v3 Authority Key Identifier:
                keyid:5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:69:b6:8f:86:6f:ea:73:36:42:a3:1e:51:ce:d7:6c:f1:e9:
         ad:52:0b:5e:91:d9:10:16:b7:1f:1e:e2:ad:93:8b:d4:8c:74:
         d4:f4:01:56:05:84:8b:7f:4c:bf:82:6c:f0:d8:62:81:88:b3:
         d4:6c:dd:1b:f9:e3:74:0e:f7:29:af:c3:4c:86:f5:65:bf:dd:
         01:b3:b8:9d:86:9f:22:0f:ab:04:17:4b:2f:46:7e:28:40:a8:
         d7:e3:3a:05:bc:b9:d8:bc:54:89:19:ec:4f:68:6f:e1:ca:e7:
         25:6b:f7:b3:d3:d9:a8:e6:6e:c1:5b:8c:48:0e:a3:bc:2b:ee:
         89:04:21:75:a7:8d:ca:53:22:5b:fb:20:5f:de:00:e8:d6:3b:
         26:c2:1e:80:5b:29:39:3b:85:76:a3:ba:4a:c5:e8:11:44:5e:
         44:c2:78:32:0b:d0:aa:b8:5f:36:d8:36:98:6f:dd:91:1c:7e:
         e8:b2:ef:eb:bf:49:fd:2a:94:86:1f:c9:02:38:f5:b9:64:32:
         86:34:58:1b:39:7e:89:9b:d1:4e:2c:ab:b1:14:d9:fd:1a:cc:
         f1:0f:6f:92:e6:b2:c9:ce:13:69:2e:fb:49:cf:b5:53:d6:93:
         79:56:c5:52:8d:ca:37:60:28:87:2d:b3:0a:51:f5:54:d6:29:
         0e:fc:65:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 19:17:40 2023 by rpki-client on console-fra.rpki-client.org