Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c57db79-bf18-3a38-b9c2-1995b96a055c.roa
File:                     3c57db79-bf18-3a38-b9c2-1995b96a055c.roa (raw, json)
Hash identifier:          b1IBQGn0A4IVhuTkQbZfe98ulco3GR0UbSeBp8S4ZKc=
Subject key identifier:   35:14:0A:26:09:7E:7C:B3:74:A3:C6:53:0B:5D:5C:2F:78:F3:26:12
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2F1E6D58AE1EBE5DB9D50
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c57db79-bf18-3a38-b9c2-1995b96a055c.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:f1:e6:d5:8a:e1:eb:e5:db:9d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=0c8f6927-df1d-4f3b-b4db-64d910a1b7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:37:66:53:d9:43:ee:15:f3:60:f5:11:3a:d8:
                    14:78:b7:76:18:b5:38:78:8d:ee:99:90:82:30:34:
                    bc:f0:ed:2e:d7:8f:10:42:3d:78:1d:9d:6b:c0:14:
                    47:ab:0b:b6:f8:d4:e7:8d:e4:2f:36:ba:50:5b:6b:
                    70:10:0b:b1:92:a3:8b:3f:37:0e:a6:24:7d:bf:46:
                    7a:86:78:3e:62:cf:c9:4e:65:a8:f9:41:b9:c8:ec:
                    67:52:b1:53:0b:66:45:4c:ed:b3:4b:49:b5:88:da:
                    70:28:be:d7:3c:34:82:07:46:ec:6f:5e:dc:73:3b:
                    60:6c:0e:dd:a8:78:70:c9:98:3e:45:3b:a1:bd:cf:
                    68:70:77:bc:c5:22:28:6e:1f:66:6f:9b:df:e5:93:
                    40:1a:88:e2:09:7c:23:f0:5c:8a:6c:1d:8e:54:82:
                    d6:89:fe:ed:2b:55:58:8b:2d:47:34:67:07:34:b5:
                    e8:28:31:86:fb:ad:43:a2:3a:75:b3:e8:cd:a3:69:
                    bf:fc:4f:71:c5:e1:32:f3:13:9d:8c:1f:51:db:9d:
                    2b:60:22:e7:af:5d:87:80:83:02:70:c4:f7:99:f9:
                    83:5e:24:ca:2d:5f:61:5a:49:8f:17:ef:8d:34:f5:
                    f8:19:ad:64:c4:6c:43:1d:c9:f3:7c:93:96:71:e6:
                    af:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:14:0A:26:09:7E:7C:B3:74:A3:C6:53:0B:5D:5C:2F:78:F3:26:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c57db79-bf18-3a38-b9c2-1995b96a055c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:5f:2e:14:16:6d:bb:9e:fa:4c:9c:44:b4:d3:b3:4e:f6:d4:
         93:68:5e:e4:ec:48:4d:ad:ee:cd:c5:98:56:73:a0:44:1c:87:
         90:e7:df:b6:2c:72:c9:c8:65:eb:3c:93:4a:5e:18:71:67:bf:
         e5:b2:5b:50:eb:0d:98:7a:7c:1b:55:a7:a5:03:38:a5:26:52:
         71:22:bc:dd:6e:a0:07:56:e4:f0:0d:47:03:da:5e:81:21:8b:
         fa:db:63:c7:86:65:39:44:91:aa:02:c7:e8:56:4f:54:8d:b6:
         93:9f:fb:c6:7b:16:83:d5:96:b7:fb:ab:b9:38:ad:f9:4e:a5:
         70:04:ea:d7:31:f6:60:b3:f8:61:fd:20:73:50:41:ec:92:76:
         b7:38:7c:7c:5c:f5:96:27:b5:f3:8e:c1:0f:84:22:27:a0:68:
         5e:07:3c:f8:20:84:aa:df:74:ad:67:20:c9:a4:c1:e5:7e:38:
         d7:dd:c4:8d:16:32:f1:19:75:72:72:01:c0:fb:38:f1:ef:f2:
         87:a5:a1:9f:28:43:a8:63:7c:cc:a8:c1:1f:f7:e8:3d:c8:4f:
         f5:20:89:a0:e1:83:b1:f0:e9:99:ec:75:cc:37:a7:04:f3:a9:
         72:af:38:39:81:b3:10:01:aa:ad:8f:bc:68:fd:f1:4c:83:c2:
         15:99:00:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:32 2024 by rpki-client on console-ams.rpki-client.org