Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9367561-43f6-35ac-a86c-61b162bee60f.roa
File:                     e9367561-43f6-35ac-a86c-61b162bee60f.roa (raw, json)
Hash identifier:          S1SIr9wcLjrD/sgVropSPOnyMO6aJHFCQX9CJjXJurU=
Subject key identifier:   AD:DB:89:B8:64:97:E0:36:80:E0:23:24:4F:36:E9:AE:66:52:48:98
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838EC65541A1D026C36120C2840
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9367561-43f6-35ac-a86c-61b162bee60f.roa
Signing time:             Wed 09 Sep 2020 04:00:00 +0000
ROA not before:           Wed 09 Sep 2020 04:00:00 +0000
ROA not after:            Mon 09 Sep 2030 04:00:00 +0000
asID:                     33363
IP address blocks:        2603:903e:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ec:65:54:1a:1d:02:6c:36:12:0c:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  9 04:00:00 2020 GMT
            Not After : Sep  9 04:00:00 2030 GMT
        Subject: CN=b6bbb709-8cf4-4ff8-9d93-226571c197d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8d:d6:16:06:b9:92:de:20:a3:69:1c:60:c4:
                    1d:56:e9:dd:a9:39:9b:73:8d:6b:94:fc:23:77:e8:
                    14:71:80:c3:c2:49:41:93:9f:e3:db:2c:34:da:cb:
                    f6:d2:3a:bd:52:23:60:fe:12:50:83:27:ce:fa:7c:
                    a8:dd:59:52:a2:94:89:57:8c:37:11:41:10:bd:f8:
                    14:02:e1:9a:65:37:c3:4f:c4:72:c6:3c:7d:0a:81:
                    90:c6:47:37:1a:90:f9:e0:ec:5c:a9:5e:fd:b6:c5:
                    8a:4e:90:43:da:a2:e5:8a:4d:1c:16:97:52:ea:da:
                    82:2a:2f:20:ba:4d:10:d2:67:38:ef:ac:3c:d3:66:
                    03:da:76:ce:09:a5:af:37:9c:ad:d1:0b:d4:cb:ae:
                    40:f8:2e:b4:d6:b5:31:0f:24:bf:58:ee:2e:2c:fa:
                    b4:cb:c3:e3:ba:f7:1e:01:f9:31:c0:7a:c3:49:a2:
                    f1:c5:47:88:4b:10:2c:94:7d:48:4a:29:75:b4:0e:
                    90:b9:97:9e:bc:7a:42:1f:a3:1c:63:0a:0e:5f:90:
                    62:fe:fb:f5:50:c6:09:05:27:26:64:ac:d3:ae:d4:
                    67:d7:21:39:24:4f:3f:ec:f8:49:3a:ab:b8:77:02:
                    ff:39:2b:e6:ae:de:f3:b5:15:e0:94:03:bc:e0:d1:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DB:89:B8:64:97:E0:36:80:E0:23:24:4F:36:E9:AE:66:52:48:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9367561-43f6-35ac-a86c-61b162bee60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:903e:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:19:08:ed:96:05:8d:f8:9a:fd:82:a9:4a:7a:0b:95:39:72:
         f8:31:d9:72:36:ce:7a:b0:b7:b7:3f:46:57:63:51:d2:ab:c1:
         5d:fe:fe:d5:ba:ae:c2:bf:26:42:54:cc:4f:7a:0a:12:7d:81:
         dd:c0:6f:08:36:12:65:ef:e0:32:d0:22:5b:12:0d:ca:5c:f5:
         7e:0f:ea:4b:ce:8a:30:90:73:6a:63:6d:fe:6c:79:26:95:b7:
         cd:1e:17:43:5b:3a:75:4e:b8:d0:24:af:74:3a:2d:c9:60:98:
         91:c3:bb:53:5e:ad:42:35:c3:4b:13:a0:b2:84:08:8a:44:db:
         40:72:4b:e1:16:d0:82:b7:67:a8:7e:c6:48:45:e4:b2:21:8c:
         79:25:5e:cd:18:0b:39:ef:a3:21:35:21:3d:ce:1d:a4:f7:bd:
         3c:8b:ec:68:4f:6b:6f:22:23:a9:b5:b0:7a:aa:3e:f3:f1:fe:
         e7:cd:dc:ff:ca:88:ce:0f:3d:96:6b:c7:37:d9:a8:2a:a1:c5:
         69:96:63:af:42:bd:c6:e3:a6:67:95:c8:42:c7:97:a4:7c:0f:
         01:6e:f9:b9:ba:6b:fb:4b:e4:85:e4:df:1d:0e:61:29:10:74:
         b7:7c:0a:7d:d6:50:36:ba:c2:4d:7c:f9:54:f4:ce:f1:59:ce:
         a5:67:18:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:09 2024 by rpki-client on console-fra.rpki-client.org