Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/df12f078-5456-3917-8525-a66090296939.roa
File:                     df12f078-5456-3917-8525-a66090296939.roa (raw, json)
Hash identifier:          pIMEOoz14TYsZ0igk0CLEr2M4/UzU+4H3QFfXf1rqIA=
Subject key identifier:   8D:C6:E2:6B:BF:AA:77:5A:66:E6:0A:FB:4F:0D:9E:4D:5E:71:88:0B
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F43285845DEC847FEAF9B05EFB354EB30
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/df12f078-5456-3917-8525-a66090296939.roa
Signing time:             Tue 14 May 2024 12:59:04 +0000
ROA not before:           Tue 14 May 2024 12:59:04 +0000
ROA not after:            Mon 12 Aug 2024 12:59:04 +0000
asID:                     26383
IP address blocks:        2605:e440:24::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c8:47:fe:af:9b:05:ef:b3:54:eb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: May 14 12:59:04 2024 GMT
            Not After : Aug 12 12:59:04 2024 GMT
        Subject: CN=5aa12399-0262-4836-898e-d7a9022f2de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:10:e9:ce:8c:fa:30:14:95:a7:2b:b1:6b:84:
                    64:ab:89:32:04:e3:c3:93:66:9e:42:0f:1a:f2:55:
                    35:a4:4e:1d:22:53:8f:c9:b5:52:e6:92:c7:95:12:
                    87:8e:9d:7e:64:a9:0c:b7:00:c1:9e:fc:8c:df:12:
                    9c:3a:8b:75:58:7c:2b:c0:0f:3a:21:3f:ab:31:99:
                    f5:9a:19:b0:08:12:e7:2d:2f:ea:28:da:d7:66:38:
                    79:4e:40:c4:0f:fb:0e:41:44:b1:af:d3:7d:e3:9a:
                    68:4e:e7:63:4a:a4:1d:1d:d7:27:89:34:71:ac:33:
                    0f:56:75:09:28:c0:98:00:ff:5e:a3:8f:70:9c:b4:
                    44:1d:9e:08:dc:7f:74:d6:96:d8:8c:3f:cb:5a:26:
                    b5:8d:a4:01:31:89:cc:3b:f4:99:9a:ef:d3:96:fc:
                    4b:2a:e6:71:74:09:13:e6:8f:eb:93:3e:cb:7e:50:
                    c0:51:d5:ba:bf:36:c3:f3:ed:7d:44:7f:03:a1:d9:
                    8a:14:1d:c1:b3:51:e5:79:84:3c:46:81:16:31:34:
                    ed:a3:8f:92:13:97:70:52:1a:93:32:fd:01:1a:ee:
                    cf:07:a9:b0:19:99:b8:9e:38:2c:7a:7f:cb:57:6e:
                    67:ab:53:8a:25:36:1e:08:e4:fd:d3:cc:98:05:cb:
                    3c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C6:E2:6B:BF:AA:77:5A:66:E6:0A:FB:4F:0D:9E:4D:5E:71:88:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/df12f078-5456-3917-8525-a66090296939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:24::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:44:39:af:25:c1:7e:04:4d:ff:1b:27:7b:e0:35:83:0d:ba:
         d8:0c:d9:cd:60:c8:71:60:af:0c:af:1b:f5:ba:5e:7f:fc:f6:
         15:cf:ca:96:95:86:16:93:2b:1a:a8:de:69:24:9e:59:c6:d5:
         76:ff:8a:3e:6f:3f:eb:53:c4:95:6b:ba:31:46:7c:35:6b:d5:
         95:57:a4:db:eb:f7:47:71:88:c4:e4:4e:42:28:1e:6d:ac:29:
         c0:d0:e9:56:07:b6:61:d3:fd:1d:af:48:91:59:ee:1d:b6:e6:
         67:b8:37:09:31:f7:b8:e8:ad:64:e1:9f:3e:c5:18:40:5b:53:
         72:5b:a1:da:ad:79:38:32:73:28:e7:ad:32:a9:46:cd:6a:c7:
         bb:1e:52:1b:3d:e8:86:5e:80:99:77:fa:ec:4c:a0:67:5b:04:
         62:38:a0:02:47:37:48:a6:af:dd:b8:18:35:f3:b6:1e:54:3b:
         de:3c:49:16:c6:be:74:45:6e:23:e1:05:b2:ae:9e:b4:e3:e3:
         f7:e6:d6:27:4b:e7:4f:d2:c9:9d:26:38:15:98:9a:e8:f2:79:
         21:99:18:6d:22:26:0a:13:51:db:39:cb:b4:64:b8:85:43:ae:
         82:a5:2f:46:92:e5:63:62:ab:17:78:34:a9:cc:fc:6b:9f:eb:
         a0:c4:6a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:47:38 2024 by rpki-client on console-fra.rpki-client.org