Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/22b0067f-6848-32a9-afe1-94cd676c473d.roa
File:                     22b0067f-6848-32a9-afe1-94cd676c473d.roa (raw, json)
Hash identifier:          VbLAEIKfSY1frWir2/dIyUHkstAMMMo70440czCcdAs=
Subject key identifier:   A0:49:E3:45:15:45:4C:17:0D:9C:B2:6A:44:EB:53:27:E2:A6:67:81
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC3091C4605C63D5015C0C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/22b0067f-6848-32a9-afe1-94cd676c473d.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2603:900a::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:09:1c:46:05:c6:3d:50:15:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=f4ee39fc-3d99-46c1-9275-5c3a03d541f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c4:22:07:b5:dc:a0:a7:23:2b:c9:e1:f9:39:
                    3a:05:60:25:54:97:cf:2d:5a:ce:5a:59:bb:21:f1:
                    a5:ed:61:36:27:62:80:37:bb:ac:e0:c8:4b:7c:f5:
                    af:bd:c6:ed:cc:ab:e4:45:db:d3:2e:dd:70:b7:02:
                    ad:be:2b:26:ae:d6:1d:7e:b2:e3:e0:52:ec:01:76:
                    14:4b:9a:c6:90:b3:d5:c6:e3:6a:d0:63:0a:32:a3:
                    94:3f:2c:b2:a6:6a:1f:04:9f:81:81:93:3b:ff:fb:
                    ca:57:a0:0e:17:3a:f9:c7:2e:4f:1a:b0:af:4d:dd:
                    27:25:54:b5:79:5c:09:fd:9d:01:b6:c7:6f:9c:2e:
                    50:9d:c2:51:ec:73:a9:df:55:ac:f7:12:4a:e7:48:
                    e0:ba:18:66:bd:f5:31:64:c6:f4:aa:f9:07:16:a1:
                    b9:c5:b9:85:5b:48:f0:39:fd:66:9d:6e:6e:d8:c5:
                    82:36:11:99:f7:c9:15:fa:c5:e4:04:8c:00:ce:2e:
                    65:1a:ea:1a:73:28:c2:c8:38:63:da:8e:6b:7d:d5:
                    26:82:25:2a:4e:78:c6:cf:46:ab:92:4a:42:b9:00:
                    94:da:9b:2c:68:69:bd:1c:b5:d9:d3:6d:56:cd:cf:
                    f2:01:a8:8e:e6:ba:22:12:2b:f0:01:11:a5:23:a3:
                    e8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:49:E3:45:15:45:4C:17:0D:9C:B2:6A:44:EB:53:27:E2:A6:67:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/22b0067f-6848-32a9-afe1-94cd676c473d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:900a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:91:ec:a9:fb:c6:73:0e:4d:59:b5:5b:c4:d6:84:87:3e:32:
         e5:a8:48:bf:d8:6f:99:5b:95:bc:8c:ff:4c:78:35:21:55:9c:
         32:dd:50:b0:f7:86:28:c7:2d:06:a3:cc:82:1e:ef:c3:7d:dd:
         47:da:17:70:e1:8b:d7:61:38:8d:98:62:c4:5e:0c:1c:56:f3:
         5c:48:53:a4:81:55:f4:5b:0d:cb:b0:aa:03:ec:22:c1:d0:9b:
         c8:b9:b0:af:77:bb:95:6b:60:a5:63:9b:5c:b2:35:27:71:94:
         9a:95:e5:d8:92:b6:eb:cf:fe:2a:a1:a3:6c:af:43:0c:e8:65:
         08:af:3a:19:34:84:6c:ac:82:af:58:ab:ab:1a:a6:f6:99:01:
         b6:ec:25:f6:0c:3f:59:97:66:00:3c:d4:1a:7e:6e:4f:a9:e7:
         6b:bd:f7:0f:8b:2a:90:58:ae:ee:e6:5a:26:d0:8e:8a:b0:68:
         bb:d1:79:15:e9:66:85:d7:7d:67:00:2f:67:97:26:5b:7d:fb:
         2c:9f:7d:1d:5e:8a:f0:3f:59:87:3c:11:fd:4e:cc:4e:ff:5d:
         60:46:37:30:d3:f4:1b:de:4f:32:31:1a:a8:89:c5:0b:9f:30:
         9c:bc:13:3a:2e:46:ef:de:1f:aa:be:95:b6:c1:00:f6:47:18:
         cc:07:85:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:04:26 2024 by rpki-client on console-ams.rpki-client.org