Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5cad48ae-519e-3c6b-ac26-e146145d06bd.roa
File:                     5cad48ae-519e-3c6b-ac26-e146145d06bd.roa (raw, json)
Hash identifier:          MCt70EhNC6HFK455TGtoZ02pQQnqlP9EtD1/AG/MKFY=
Subject key identifier:   DA:61:67:F4:54:A9:8F:8E:C8:74:21:36:82:0D:A7:92:6A:A0:DF:C6
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F432858458C6DD88A45C8BD414851A200
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5cad48ae-519e-3c6b-ac26-e146145d06bd.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     55293
IP address blocks:        2607:fb30::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d8:8a:45:c8:bd:41:48:51:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=b4d6031c-a2a1-4843-ac9a-f94775478286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:a7:9c:b8:50:8f:fa:4c:41:d8:ae:88:9e:
                    15:15:0f:f8:9a:b4:68:4c:d2:7d:81:7c:3f:88:dc:
                    d7:fd:f1:99:48:9e:ba:bb:35:ce:a6:f7:19:d2:69:
                    c2:7a:ad:e8:d2:1a:9c:bc:d6:24:78:08:23:9d:77:
                    37:fe:f3:af:d3:6e:20:8c:06:88:90:fd:f3:9b:67:
                    a5:05:4a:69:5d:92:34:14:54:48:e9:e5:5e:2a:bd:
                    c4:44:2d:9a:8d:c4:08:82:55:05:17:78:3c:7a:65:
                    fb:93:75:1b:66:89:33:aa:2e:06:a9:6e:aa:b6:a8:
                    31:5b:e8:f4:68:de:ea:15:ab:89:24:d1:8b:56:90:
                    e8:c6:0d:91:c6:73:57:3d:dc:71:0c:f1:98:f7:6a:
                    8f:03:9a:e3:8f:7a:0d:cc:35:ad:a2:8c:c9:e4:8e:
                    b2:a8:fc:a5:89:7b:2b:84:ac:c1:b8:27:3d:65:92:
                    b7:f2:02:64:14:e0:bd:ca:99:c6:18:a3:e5:1e:7c:
                    bc:b6:7f:c7:da:34:e9:0a:6a:bc:dd:a8:97:cf:3c:
                    3a:51:da:f7:bc:50:28:4f:9b:fb:34:83:26:77:f8:
                    c3:1d:98:8f:0a:ef:ff:47:d6:f3:fc:f3:2a:fb:a5:
                    71:0a:39:de:2c:94:13:7a:0c:9c:34:ca:fb:af:52:
                    e7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:61:67:F4:54:A9:8F:8E:C8:74:21:36:82:0D:A7:92:6A:A0:DF:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5cad48ae-519e-3c6b-ac26-e146145d06bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb30::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:09:62:46:e5:7b:d0:43:e0:e7:77:9d:11:c7:8a:61:cd:36:
         02:9d:a7:88:70:49:6e:53:4f:b3:de:9e:f3:a6:c0:37:6c:53:
         fc:04:ef:d2:b6:04:50:28:3b:bc:bf:07:12:c3:bb:2e:e9:f3:
         e6:04:ab:81:c6:c9:2e:12:ca:e3:51:65:2e:6d:b7:9e:43:30:
         40:41:b9:ff:b5:4e:65:41:df:a3:90:f6:0f:16:79:9e:77:18:
         42:30:78:c2:61:a1:30:a3:25:98:96:0e:53:83:7e:87:01:3e:
         75:fa:b7:90:38:09:eb:80:b0:1f:10:cf:83:84:1a:f4:e1:f9:
         46:b6:b9:13:3f:d9:ce:01:e8:bc:6a:7e:94:10:f3:e4:e8:e3:
         a2:00:7c:26:c7:37:23:f0:3a:a9:6f:d7:35:19:97:94:9b:c7:
         7b:e7:05:d3:1a:f1:de:d5:d3:6e:f6:d7:c1:23:05:1d:36:cd:
         f8:95:2d:69:99:35:ac:4a:16:ea:f4:6d:7e:0e:7a:33:80:51:
         66:a1:6f:63:36:b3:4d:0b:d8:18:f0:f2:9a:ed:14:9a:53:79:
         b0:bc:ef:0b:48:be:49:8c:9e:e2:a5:e7:30:56:5f:a0:f1:2b:
         7a:75:da:ea:a4:66:1a:03:cf:7a:ca:f3:7f:78:ce:65:15:d8:
         44:f7:01:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:50 2024 by rpki-client on console-fra.rpki-client.org