Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa
File:                     f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa (raw, json)
Hash identifier:          UrXqLL+E3+bwb0bMT1DuLibmetKbZNCUH0AsLQttlMo=
Subject key identifier:   01:98:9A:D7:AF:87:AA:D2:E4:C6:69:62:92:D7:CD:FE:B2:FC:27:24
Certificate issuer:       /CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Certificate serial:       010D0C9F432858458C6DC9E514DD4845A5067000
Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2620:c3:e000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:c9:e5:14:dd:48:45:a5:06:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=1c061345-e97a-48b5-a74a-deb8268081b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f5:24:6c:b5:88:b9:de:14:f1:45:e5:04:b5:
                    6f:e4:57:ed:f5:93:59:05:e6:81:29:25:c5:9b:5c:
                    47:b3:38:1c:fe:80:00:66:c8:27:ac:e7:fc:ea:c3:
                    a4:70:d5:88:3b:3a:1b:f1:55:dc:89:50:ee:91:4d:
                    e2:6b:d1:e1:89:63:7e:5a:a5:08:f7:09:05:3b:81:
                    c3:65:94:25:4d:ff:97:b8:0a:93:f0:c7:8b:ec:f0:
                    59:af:ab:30:63:37:c1:1b:dd:93:d9:db:0f:fa:eb:
                    64:5e:93:1c:d1:5a:4e:f7:7a:01:a0:9b:3e:b0:95:
                    5b:37:f9:36:e9:0d:6c:0e:f4:5d:cf:01:ba:64:e5:
                    47:17:6c:79:f2:bc:36:01:83:23:42:0f:d6:43:57:
                    95:a4:11:64:2d:bb:18:e7:32:44:f9:f4:ed:32:73:
                    5b:a8:6a:48:7f:c0:04:85:b4:49:e6:3b:46:ff:14:
                    3d:75:81:eb:fc:8d:f1:e0:0c:2a:94:29:87:c2:44:
                    8c:18:e8:57:28:25:55:35:46:24:c2:33:61:35:dc:
                    60:cf:85:46:0a:2d:b7:8e:82:05:db:66:fb:b4:7e:
                    fa:96:48:84:7c:ab:d3:53:7f:cc:2e:bb:79:51:a2:
                    df:76:4b:ac:dc:f8:10:eb:5e:e5:9d:be:3c:b0:12:
                    a7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:98:9A:D7:AF:87:AA:D2:E4:C6:69:62:92:D7:CD:FE:B2:FC:27:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl

            X509v3 Authority Key Identifier:
                keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c3:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:88:bc:47:db:b5:0e:40:0d:93:4d:af:5e:a2:57:00:2e:25:
         3a:f9:ef:61:27:59:78:5a:32:e4:c1:d0:ee:ed:fd:58:d8:76:
         f3:22:59:2f:fa:e8:47:7c:c2:c9:fe:ac:b1:49:70:04:3e:79:
         4a:cd:96:65:a4:47:59:20:72:66:26:20:94:37:4e:2f:52:c6:
         34:aa:cc:b3:14:ed:ce:f1:9e:e3:62:4b:1c:ff:b1:ec:d9:22:
         16:4f:ca:34:8c:19:ac:4d:05:b3:e8:33:59:9f:e4:36:22:a8:
         ec:dd:a3:c8:4b:e6:82:f8:02:d3:c6:56:e1:b8:ae:10:40:1f:
         ba:25:65:d3:46:5c:33:87:39:0d:44:49:7d:39:5a:2b:00:49:
         a1:ca:46:60:24:e7:09:7f:90:63:a0:d4:98:62:e3:d3:e7:80:
         0a:a0:fc:c8:ea:fb:de:22:4a:22:ae:30:a9:fd:fd:ea:2e:11:
         ef:ce:cd:fd:b2:c5:fc:74:0b:ef:98:c3:ca:8f:4b:a7:8e:7a:
         6e:78:d3:90:5e:9f:57:a5:55:e7:01:20:f4:55:4a:0b:c0:00:
         53:39:4e:c4:9a:10:75:fc:78:2d:37:a2:95:f9:c9:52:bf:61:
         70:fd:bb:46:fe:11:66:08:65:d0:ec:81:6b:1f:20:4f:96:a9:
         d7:ad:4b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:41 2024 by rpki-client on console-ams.rpki-client.org