Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1ceb3d1b-b649-306a-b995-cef65268e7ee.roa
File:                     1ceb3d1b-b649-306a-b995-cef65268e7ee.roa (raw, json)
Hash identifier:          O12HRtNVkhGkbI8DatEobJNM9OVnRfnwwrh44yaWzxk=
Subject key identifier:   A0:EA:B5:C9:A7:36:E5:A1:0E:F8:D1:55:84:DF:7C:C2:E7:6C:DF:50
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F43285844F19AAB00F32282D155B47E80
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1ceb3d1b-b649-306a-b995-cef65268e7ee.roa
Signing time:             Mon 19 Feb 2024 14:00:31 +0000
ROA not before:           Mon 19 Feb 2024 14:00:31 +0000
ROA not after:            Sun 19 May 2024 13:00:31 +0000
asID:                     400672
IP address blocks:        2607:6003:230d::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f1:9a:ab:00:f3:22:82:d1:55:b4:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Feb 19 14:00:31 2024 GMT
            Not After : May 19 13:00:31 2024 GMT
        Subject: CN=5b1257d7-f88b-4adf-8d35-9e4ef245ad32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:7f:89:6a:4f:9f:d0:09:73:39:58:25:ab:
                    5f:04:0a:b4:00:6d:ba:ab:d5:82:6a:6d:37:5d:7c:
                    81:94:14:40:7d:db:bb:2c:48:20:ac:2a:38:fa:84:
                    3f:99:99:6d:aa:72:47:ca:73:64:db:f5:e8:eb:15:
                    85:06:27:e3:b5:09:49:6d:66:6c:5a:13:70:61:de:
                    a9:ef:ee:47:40:6c:bd:41:61:7d:80:6e:85:e4:6d:
                    35:66:ee:f3:03:61:d9:f1:81:d2:47:bb:e2:05:fb:
                    18:78:99:9d:ef:34:72:e6:7d:27:bd:b5:08:a5:b1:
                    ee:c9:89:e0:32:5e:6b:4b:95:07:3a:75:91:34:bd:
                    82:ba:fc:dd:96:71:d4:2b:05:9f:13:9d:40:e4:68:
                    e9:4c:51:21:d1:5d:f0:4d:e2:2c:06:1c:e5:5b:fe:
                    5f:e5:ab:2b:96:7f:4d:7a:3b:11:e4:3e:aa:aa:c8:
                    72:a2:38:67:2b:43:b0:33:00:ee:01:f4:27:53:5e:
                    0a:0c:9f:62:84:ed:86:0a:cc:67:64:98:68:19:83:
                    e7:25:13:2d:28:98:c4:38:27:c1:9c:ff:ab:a4:5f:
                    96:85:37:40:70:45:46:51:10:b9:ad:f3:cd:53:d0:
                    48:ba:cc:c7:04:19:af:ae:24:e0:de:e2:d1:f8:9a:
                    0c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EA:B5:C9:A7:36:E5:A1:0E:F8:D1:55:84:DF:7C:C2:E7:6C:DF:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1ceb3d1b-b649-306a-b995-cef65268e7ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6003:230d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:94:96:d3:93:bf:3c:8a:f2:cd:54:91:5e:2b:ee:b2:ea:c1:
         e7:56:fc:9c:40:74:af:d1:28:20:d0:c0:5b:f3:57:d5:6d:fc:
         ad:5f:37:a1:16:eb:cd:f9:b1:08:95:ab:ae:27:e9:30:d2:41:
         b2:9f:0e:b7:7d:59:2f:d9:2f:41:16:68:ca:48:7a:99:bd:77:
         71:0b:80:08:87:20:d5:ba:93:33:d7:ef:db:88:88:a7:b8:48:
         62:54:42:1d:77:f6:13:48:5d:58:8b:a7:21:57:f0:60:d9:ed:
         13:5e:cc:cf:06:0d:88:3f:d9:8c:63:4e:bf:3f:ea:ce:8c:fa:
         c5:fd:cb:e5:9b:99:6d:ed:ea:fb:27:9a:76:f8:4d:53:e4:43:
         76:55:ea:61:87:74:9c:3b:20:7b:37:42:45:31:78:2a:32:0b:
         25:4f:0a:5f:4b:cd:44:fe:4a:ca:81:47:e8:bd:68:f7:2b:f1:
         84:74:23:26:34:1e:79:c7:bf:d8:33:91:6a:63:03:9c:96:4d:
         bc:66:dc:5b:2b:a5:b2:d1:0d:82:75:91:52:17:d2:eb:41:b7:
         d6:b5:bf:16:68:49:61:47:b9:af:55:25:62:eb:f8:e1:9f:08:
         a8:17:0b:6f:a0:0e:60:28:45:2a:e7:69:a6:7e:9f:c2:87:a2:
         32:83:9c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:33:08 2024 by rpki-client on console-fra.rpki-client.org