Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c1ed52d5-483b-3ac4-b7fc-2e392623e69a.roa
File:                     c1ed52d5-483b-3ac4-b7fc-2e392623e69a.roa (raw, json)
Hash identifier:          HX+ULb3yXQuCPFQ1KF9kZvKeRKMVWxZpcL0Cd4BK6gs=
Subject key identifier:   A2:72:CD:17:40:1A:B7:7C:C5:A1:49:FD:F7:86:6A:C2:7C:EE:2A:8B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2F23B71228672AD7DA980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c1ed52d5-483b-3ac4-b7fc-2e392623e69a.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8019::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:f2:3b:71:22:86:72:ad:7d:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=fc4069c8-a119-4bcc-a0d3-f0426e5776c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:c6:dc:11:51:f0:84:ff:60:10:5f:47:e0:
                    f0:41:30:8a:09:15:5b:06:62:f6:18:53:af:73:82:
                    f2:7b:0f:5c:f1:57:58:45:33:76:3f:e0:55:74:69:
                    f2:99:ea:0e:2d:f5:81:04:7d:63:64:d2:32:ba:e6:
                    73:75:09:31:6f:73:a6:7d:d3:d2:4f:b4:dd:85:73:
                    61:2b:fa:73:ce:4d:e2:17:b3:45:17:59:92:9f:a2:
                    27:bd:4d:de:f0:01:f2:d8:73:f7:39:86:bd:5a:4d:
                    c1:a5:04:e3:4b:3b:2a:77:63:46:a4:7f:f2:b2:87:
                    1c:f9:c0:65:90:30:d7:10:84:84:4c:f3:1b:cc:c4:
                    f9:ba:00:44:00:00:d8:7c:5b:dd:03:24:d1:ac:a4:
                    9d:ac:af:49:74:f3:fa:b3:6d:39:0b:2b:b8:8c:49:
                    02:7f:19:ed:65:0a:ac:c2:20:07:20:e5:7e:d5:13:
                    ce:89:db:5f:08:ca:73:bd:d1:aa:43:6b:04:bf:7d:
                    dc:d7:76:be:05:dd:93:b6:89:30:4a:08:67:aa:7a:
                    8f:85:75:de:47:f4:3a:8c:65:e7:8d:cf:59:6b:ee:
                    5b:b0:25:81:e3:8a:3a:7b:37:9b:4b:38:37:ed:05:
                    ef:31:09:3f:3a:9d:7c:5b:ee:b7:2c:f9:a8:5a:e3:
                    0f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:72:CD:17:40:1A:B7:7C:C5:A1:49:FD:F7:86:6A:C2:7C:EE:2A:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c1ed52d5-483b-3ac4-b7fc-2e392623e69a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8019::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:a3:46:d6:d6:76:24:ca:3b:3a:42:50:24:3d:a3:a7:61:0c:
         8f:06:9a:87:d4:28:b9:a7:5c:9b:05:b4:cf:9a:f3:42:05:8a:
         e5:c5:50:6b:be:12:08:d8:55:4b:b5:f0:db:65:3d:c6:53:e2:
         fe:14:69:53:ca:9c:a9:7f:e9:89:44:67:fd:18:7a:3c:1e:62:
         f6:21:71:27:e6:4d:0a:97:95:43:5b:19:a1:95:c0:67:ba:3c:
         db:38:7e:50:a7:43:f9:a0:40:15:b6:dd:44:b8:d1:fe:d6:d1:
         95:73:0e:a8:e5:1f:1c:39:91:29:80:0f:fa:b5:03:09:16:2d:
         cc:44:6b:ca:33:50:31:d5:64:8e:16:ef:ad:1e:7d:f9:32:b1:
         eb:9d:86:d0:d3:e4:06:dc:0d:65:e9:72:98:fe:d9:ea:eb:f7:
         1e:bb:b0:6f:26:fb:95:e2:dd:c0:43:f9:8a:a3:f2:01:61:e3:
         de:2d:2e:39:3f:cb:61:c5:0d:92:9b:b7:ea:ec:49:3e:5a:18:
         c8:f7:3c:e1:1b:12:8c:b3:72:99:a4:b9:24:27:a9:ef:cd:6d:
         8e:75:66:ff:0a:01:fa:14:65:4f:ba:db:58:f3:3c:59:34:60:
         d3:4a:b3:8b:21:b1:b3:8e:4e:4a:65:2b:b0:4c:1d:cd:b8:4e:
         38:17:b9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:13 2024 by rpki-client on console-fra.rpki-client.org