Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c58da76b-697c-3924-b45d-b31bd4dc0ffb.roa
File:                     c58da76b-697c-3924-b45d-b31bd4dc0ffb.roa (raw, json)
Hash identifier:          oushgE07iPE9KTkJsW9+xV7bEux+DcSmJRreEc6NvNU=
Subject key identifier:   E0:FD:56:9E:53:F1:28:27:90:D1:6D:DF:84:19:43:67:FE:3A:70:29
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838EC488169EE34DE5A22589740
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c58da76b-697c-3924-b45d-b31bd4dc0ffb.roa
Signing time:             Fri 12 Feb 2021 05:00:00 +0000
ROA not before:           Fri 12 Feb 2021 05:00:00 +0000
ROA not after:            Fri 05 Feb 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        2603:9005::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ec:48:81:69:ee:34:de:5a:22:58:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 12 05:00:00 2021 GMT
            Not After : Feb  5 05:00:00 2027 GMT
        Subject: CN=c6b751f5-6af2-40ac-bfc5-b4e807f2c840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:91:05:c7:5b:3a:d8:10:a2:db:cb:30:f0:59:
                    1c:93:db:83:ab:57:34:6d:56:97:75:e5:ae:8b:ca:
                    5e:39:15:a3:71:1f:07:96:65:ff:12:7a:7b:6b:a5:
                    5b:d8:d3:26:85:f4:c0:28:e3:a0:5a:11:cd:dc:66:
                    a0:cc:ae:ab:6c:f1:8b:e9:87:bd:b2:00:52:bd:6b:
                    40:6c:3f:ab:63:be:00:a3:34:58:e7:4d:ad:41:a7:
                    86:8b:f5:4f:b2:c6:49:7f:8a:95:1a:40:ce:a7:d3:
                    00:a6:cc:b1:c7:84:c9:31:85:e9:c3:2d:c9:90:92:
                    16:ba:c0:dc:ac:96:3e:29:5a:f8:c5:68:72:eb:c1:
                    bc:78:fe:0b:09:1f:de:13:3b:28:6b:ea:4b:81:9e:
                    8f:3c:50:af:58:f6:86:a7:ae:68:d4:68:de:4f:6b:
                    3d:24:49:29:ac:07:5d:10:8a:a7:cf:66:42:27:5d:
                    73:34:96:71:c8:17:95:6b:d8:cf:c8:ca:5c:82:36:
                    4b:99:ff:84:0c:dd:40:59:aa:91:10:f2:2b:7f:2e:
                    c5:9f:f0:79:cf:fe:ab:95:88:d0:dc:53:fe:3a:e2:
                    d2:1c:9f:2d:e8:7b:5c:06:2a:b6:3d:1a:c4:72:31:
                    49:10:5a:de:54:8d:9d:56:93:75:19:af:08:a2:b3:
                    f0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FD:56:9E:53:F1:28:27:90:D1:6D:DF:84:19:43:67:FE:3A:70:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c58da76b-697c-3924-b45d-b31bd4dc0ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9005::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:fd:fd:52:3c:ee:21:7d:48:63:f1:2b:d5:0d:2e:84:90:ff:
         80:f4:9f:8c:42:b3:23:c7:23:00:de:c2:fc:17:9d:39:e4:0c:
         17:28:e3:c0:cc:cc:35:a0:d7:96:4d:be:8f:a3:1e:f0:65:dc:
         f3:56:e8:5a:bf:4d:1c:8a:a4:65:85:f8:85:1f:7f:ef:cb:97:
         4b:b4:3a:05:ac:77:85:a7:b5:82:be:8b:dc:80:d0:27:ad:3f:
         82:c4:8c:04:68:c4:46:13:d9:97:c4:b1:d3:e1:af:de:5c:f5:
         fc:d3:67:1b:52:d5:cb:60:08:8a:43:ce:2f:80:15:26:9c:fd:
         17:09:35:9b:70:9a:02:e6:63:0b:8c:39:3d:61:2d:1e:80:79:
         ed:8d:5c:fb:18:0b:6c:9c:85:98:24:f4:00:50:4a:fa:62:74:
         0c:e0:fb:45:34:c6:95:b4:4f:a1:ec:91:16:0a:0e:97:be:57:
         2e:08:f6:63:a5:42:4b:4e:eb:61:59:66:cd:94:39:6e:d1:5a:
         ff:2b:0b:42:2e:7d:3a:3b:55:35:d9:e5:2c:32:f9:c9:11:e2:
         d4:1e:dd:5c:b4:1c:68:ba:2d:ec:a6:a1:f0:65:52:57:c4:47:
         76:a8:4f:ed:2e:91:d5:fa:82:2b:20:9a:d4:a4:15:56:97:45:
         1f:93:05:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:34 2024 by rpki-client on console-ams.rpki-client.org