Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa
File:                     d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa (raw, json)
Hash identifier:          RIEcLqJHel9eKqq2Eq7KQRMYrJfttz9OXe/3u9ZsCO0=
Subject key identifier:   7B:6F:A7:16:9C:0D:C2:C5:1B:66:74:1E:ED:17:12:99:E1:68:81:0F
Certificate issuer:       /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Certificate serial:       010D0C9F432858451A15869199017168C5CCFCE0
Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2610:e8:3180::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:86:91:99:01:71:68:c5:cc:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=3235d99c-ca5d-4489-998c-e78335f66877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:ba:86:13:15:39:98:c8:6d:92:6a:d2:36:
                    64:ae:74:70:f1:7e:0d:5d:88:bf:11:53:c2:1a:5d:
                    9a:ac:6c:c9:d3:1f:ea:7b:61:fc:e1:e5:d4:6f:da:
                    51:ea:14:3c:d4:53:61:3b:66:68:ca:87:47:8d:37:
                    5c:92:f0:38:d6:0b:61:8e:b0:4f:16:18:41:d0:73:
                    e0:73:be:1c:6e:0a:b7:ee:66:a9:3d:af:2f:72:a6:
                    29:fe:f5:34:fc:25:a8:9f:14:1c:7e:38:b9:da:9f:
                    52:24:6f:da:08:9e:97:1b:f8:f8:66:38:ad:4b:8f:
                    a9:b0:5c:a1:04:20:3d:9d:b4:d2:b4:a9:8c:77:03:
                    b6:de:1a:bc:1b:be:53:28:17:3b:c7:4b:39:b5:f2:
                    d2:9d:19:a7:76:3e:92:7e:3e:d8:36:f5:ad:be:fa:
                    40:b3:2a:7f:a5:0d:18:05:45:0c:47:ac:4c:bb:52:
                    67:21:d1:60:c1:5b:5d:de:7c:ee:76:3b:fa:80:23:
                    74:75:a6:d1:22:bd:b3:a5:2d:1b:b1:1c:a3:2c:06:
                    ca:be:57:63:ab:0c:57:43:aa:36:bb:28:64:14:40:
                    a3:43:bd:d2:db:c6:ce:63:17:f3:3f:23:f5:19:f6:
                    c5:57:18:0b:d3:b9:76:2f:73:fd:6d:bb:87:4e:31:
                    c5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6F:A7:16:9C:0D:C2:C5:1B:66:74:1E:ED:17:12:99:E1:68:81:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl

            X509v3 Authority Key Identifier:
                keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:e8:3180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f3:1a:cb:b8:8c:4f:eb:71:09:84:00:52:ea:55:13:d5:68:
         66:c6:60:e1:18:f8:be:0b:70:51:ea:3d:d6:d9:6e:72:55:bb:
         c0:d8:8e:e2:fc:6c:a7:db:7d:56:1b:fa:5f:36:68:94:1e:de:
         4d:68:60:77:cf:c5:7a:90:7a:ae:42:c1:81:86:b2:78:cc:15:
         70:b8:9b:f6:0b:0d:10:4c:2e:cf:dd:39:e6:0e:fb:47:e6:43:
         0f:ff:29:2b:aa:d0:3e:23:bf:50:d9:c5:cf:9f:50:25:67:25:
         a2:71:cc:04:9b:8f:29:9a:f9:fe:27:3e:4f:d8:e0:90:2b:dc:
         f1:03:04:88:c4:9d:5c:1f:5d:50:fc:f5:0b:9d:71:46:c6:da:
         76:b4:da:ad:d8:87:ea:1e:b6:32:0a:55:64:10:b8:3a:a3:c8:
         c7:4c:e8:09:89:e2:fd:24:1c:95:49:d7:14:e3:7b:ba:f4:0e:
         b0:32:5c:dc:4f:11:fc:c5:5d:e1:4c:5c:fa:ff:ad:76:70:ed:
         50:e4:7d:1a:52:00:28:a8:6e:5e:12:a8:1d:10:6f:f3:91:17:
         53:fe:cf:17:e7:c6:95:a3:60:0e:55:a0:b5:1b:2b:0d:82:31:
         b1:65:72:74:08:09:ab:a4:a1:4f:bf:cf:13:5e:8c:30:19:e7:
         f1:ea:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:10 2024 by rpki-client on console-ams.rpki-client.org