Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6f20871f-b538-30ed-bc23-c082954673db.roa
File:                     6f20871f-b538-30ed-bc23-c082954673db.roa (raw, json)
Hash identifier:          5xZhA2LnIat5LN0RyDDSPp7rFgl731T1r8uAv6Bb56M=
Subject key identifier:   63:41:F4:9E:FD:53:CA:C9:83:FE:8C:64:88:7B:71:FF:D4:8A:65:3D
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED0030D8EAF31D3B6DDE0C0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6f20871f-b538-30ed-bc23-c082954673db.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     54858
IP address blocks:        2600:2100::/28 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:03:0d:8e:af:31:d3:b6:dd:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=d2af9702-4c72-47d0-bbb6-ab632e90f6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:33:e8:98:16:3f:eb:bb:b4:f9:07:cf:05:9c:
                    98:00:83:0c:c0:c6:fe:d7:7f:da:9e:32:53:8c:9b:
                    9d:54:d0:b3:11:fe:ed:76:3d:c4:9e:c1:d4:46:dd:
                    97:4e:da:30:1f:42:a8:f2:37:4d:46:ce:5a:a2:e0:
                    e4:5f:68:84:82:3e:ac:e4:a0:7a:e9:59:e6:95:e2:
                    de:d8:15:37:ca:8b:57:d7:0f:34:ee:ff:85:e8:34:
                    bd:4a:89:a6:e8:e0:f2:76:73:72:8d:d3:95:4e:a0:
                    82:21:71:a1:09:1a:2e:99:b8:c6:2b:b4:ea:55:f5:
                    45:5d:87:1d:c4:a4:e3:cd:33:9d:4e:0b:9b:18:a9:
                    9b:36:d5:36:77:db:32:e9:2a:08:93:12:74:4a:cb:
                    04:fb:36:b1:d2:10:95:58:33:ad:e2:6d:2c:f9:3f:
                    82:df:2d:8b:4e:d7:56:d9:82:5b:2a:aa:37:43:67:
                    9b:82:a4:ed:ee:56:9d:5e:5f:a1:42:d7:ac:78:8c:
                    d0:4d:cc:fa:a0:f4:e3:c0:66:5d:a2:cb:40:f0:62:
                    5a:42:43:33:ed:6e:98:6f:3d:c1:ad:7d:42:28:9d:
                    9a:69:34:63:b8:ab:78:a9:35:34:bb:98:71:32:e5:
                    7f:52:5e:e5:de:70:a8:18:7f:c4:b1:68:c3:26:f6:
                    3e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:41:F4:9E:FD:53:CA:C9:83:FE:8C:64:88:7B:71:FF:D4:8A:65:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6f20871f-b538-30ed-bc23-c082954673db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2100::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:9b:8a:c0:d4:2b:0e:ac:5c:cd:b7:65:fc:af:3f:66:92:
         14:e2:eb:f0:de:63:76:d6:5d:e4:ba:23:11:36:5c:7c:98:f8:
         02:c6:06:da:44:2b:01:3b:ea:e3:f0:9a:04:85:40:b1:c8:b5:
         be:90:be:b8:85:95:f4:00:13:d6:aa:9a:8d:ad:8b:a3:e1:d8:
         cd:33:39:c9:9c:b2:29:d1:89:68:38:4c:af:ef:f6:d9:58:44:
         52:5b:a7:2a:49:a8:6a:5c:33:02:53:21:17:8b:4e:50:94:d1:
         3d:00:e4:ff:77:b6:29:83:10:0e:fb:b4:57:c8:4b:fc:6b:58:
         fd:15:75:85:3d:96:81:ee:b4:46:40:13:e0:44:08:f5:53:96:
         4d:f4:49:b6:27:14:1e:82:3e:59:5f:ab:ba:49:00:ba:78:72:
         be:42:5a:21:bc:e1:7d:33:a4:bc:cc:3c:96:ba:ca:d0:35:31:
         7e:f2:3f:94:ac:16:0e:d3:bf:9f:49:9a:3f:77:3a:5b:65:c4:
         4a:07:ca:cb:a9:3f:c4:36:5e:13:5c:17:e3:46:e2:20:21:88:
         16:ad:cc:52:1c:3f:6f:82:7e:e6:b9:5f:2d:3b:c3:7d:22:65:
         ea:ac:f5:f6:bb:71:e8:26:71:c6:c3:42:e8:50:39:fe:d6:f9:
         49:de:72:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:52 2024 by rpki-client on console-fra.rpki-client.org