Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/753a0e65-65b0-3526-8531-09488bd32ab1.roa
File:                     753a0e65-65b0-3526-8531-09488bd32ab1.roa (raw, json)
Hash identifier:          Kg3vH6mwTof+ho6sYgWzm4dtQvwUjHwx0YfwQccvqtg=
Subject key identifier:   EA:E0:3E:E6:D9:E6:A9:A6:8B:DB:33:EB:62:64:E8:09:93:49:6D:11
Certificate issuer:       /CN=9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e
Certificate serial:       010D0C9F432858451CE03A3081A756FCD5579E40
Authority key identifier: D3:92:CC:31:43:E3:2B:30:BA:92:B6:88:FD:3B:51:49:A4:92:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/753a0e65-65b0-3526-8531-09488bd32ab1.roa
Signing time:             Wed 06 Mar 2024 02:00:25 +0000
ROA not before:           Wed 06 Mar 2024 02:00:25 +0000
ROA not after:            Tue 04 Jun 2024 01:00:25 +0000
asID:                     10261
IP address blocks:        2620:ba:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1c:e0:3a:30:81:a7:56:fc:d5:57:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e
        Validity
            Not Before: Mar  6 02:00:25 2024 GMT
            Not After : Jun  4 01:00:25 2024 GMT
        Subject: CN=c0889144-2f81-4922-a8c6-325311499bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cc:ef:dc:a7:da:3d:99:5b:0c:2a:16:48:51:
                    61:50:4c:75:e5:7d:b6:30:02:50:c8:c0:f5:bc:86:
                    8a:e6:5e:f9:b6:7a:5f:3d:ec:cb:99:67:f4:56:5c:
                    65:f6:67:ab:01:29:7a:b3:4a:00:74:a9:d6:65:20:
                    eb:04:d4:42:d5:ce:a5:63:26:bd:6a:7a:d0:ff:06:
                    6d:b7:00:ff:c5:77:90:6c:93:62:04:bb:9c:c4:d1:
                    85:9b:a5:2a:28:f7:1b:12:ca:9c:5b:13:16:4d:c9:
                    34:a9:22:b4:04:1d:42:8b:81:ed:08:3f:69:b3:16:
                    10:40:f4:6d:ad:ae:8b:65:b8:ed:15:aa:bf:7a:65:
                    35:24:38:47:57:a1:f5:28:c5:84:5a:89:a0:37:1b:
                    89:3d:75:2b:39:4b:f9:c5:ff:1a:9d:d8:1f:25:0e:
                    98:c3:54:c7:64:1f:be:75:15:fa:7d:79:4e:52:cc:
                    03:2e:cf:c6:e0:95:37:7e:28:62:8f:17:69:8c:89:
                    a9:ed:b7:23:c0:66:05:94:2b:a6:24:22:38:8d:e7:
                    ba:69:12:76:3e:d3:99:b6:31:42:07:47:52:10:f0:
                    bc:71:e8:54:5c:da:47:ba:f1:8e:15:13:f0:6e:70:
                    90:96:79:5f:41:b3:67:3e:e6:67:ea:16:59:6f:0b:
                    89:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E0:3E:E6:D9:E6:A9:A6:8B:DB:33:EB:62:64:E8:09:93:49:6D:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/753a0e65-65b0-3526-8531-09488bd32ab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:92:CC:31:43:E3:2B:30:BA:92:B6:88:FD:3B:51:49:A4:92:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ba:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:aa:ab:cc:5e:16:dd:cd:7c:da:61:40:4d:15:e6:90:6b:02:
         bd:a0:54:2f:a3:2a:ca:65:ec:7c:38:e9:50:99:ff:82:4c:0b:
         0f:fe:e7:4c:8c:2a:22:06:5c:01:b7:44:87:14:46:1b:1a:81:
         6b:4e:ae:bb:b0:3f:f5:06:f1:90:2d:3d:a8:4f:7d:da:78:a3:
         cd:ca:b5:8d:5b:68:3a:cc:ef:fb:33:c3:d8:6e:9f:eb:34:7c:
         c5:ee:98:80:63:5d:63:03:f8:56:a2:cc:6f:92:02:88:61:37:
         f9:b0:4e:70:56:3f:b8:28:a7:8a:93:83:b6:ac:6f:45:c4:86:
         08:30:8a:2d:64:60:9b:69:60:a9:c4:59:d8:cd:69:85:53:35:
         7a:92:f4:f5:a3:7e:97:9d:aa:4b:f2:a9:63:88:dc:40:7f:bd:
         c1:d3:7b:57:3e:e1:3a:6b:f2:71:a6:6e:a6:fb:8c:ed:f8:60:
         d3:da:fc:2d:49:e4:5d:b7:7d:8b:9c:eb:36:f7:0f:b3:bb:78:
         bb:1c:6e:d0:cc:0a:a9:fa:83:6b:bf:62:ae:91:df:89:62:8c:
         bb:42:33:e9:77:98:05:ee:d2:c5:6f:07:13:65:f4:41:71:fa:
         6d:7d:74:07:30:7c:5e:fa:6e:60:cd:b9:d1:3f:b0:0c:1c:d4:
         2e:78:3c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 18:48:34 2024 by rpki-client on console-fra.rpki-client.org