Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/8b4198d6-8379-3397-b854-7f05af2c2082.roa
File:                     8b4198d6-8379-3397-b854-7f05af2c2082.roa (raw, json)
Hash identifier:          qzj0izqtG66Y7bx1L/+0ZVuZqJOVdAEZSk7nEFNDgNQ=
Subject key identifier:   74:60:55:BC:0B:D1:95:B4:7D:E8:0A:4F:B9:D1:57:0E:93:95:75:5D
Certificate issuer:       /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial:       010D0C9F4328584526A5A8C6ECB6B366F035B980
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/8b4198d6-8379-3397-b854-7f05af2c2082.roa
Signing time:             Sat 09 Mar 2024 14:00:31 +0000
ROA not before:           Sat 09 Mar 2024 14:00:31 +0000
ROA not after:            Fri 07 Jun 2024 13:00:31 +0000
asID:                     22926
IP address blocks:        2602:ff53::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:26:a5:a8:c6:ec:b6:b3:66:f0:35:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Validity
            Not Before: Mar  9 14:00:31 2024 GMT
            Not After : Jun  7 13:00:31 2024 GMT
        Subject: CN=5d724f5b-379e-461d-9bc3-60b2d86a4f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f4:a5:3f:57:ef:c4:f8:7b:ef:1b:af:5c:fe:
                    0f:6d:41:bc:02:c7:65:18:65:55:3d:1c:19:c7:70:
                    9f:db:79:bb:cb:21:b4:e5:10:34:7c:8c:32:74:f9:
                    84:d1:a4:2f:ef:01:77:60:37:23:b6:e7:3e:de:25:
                    7b:60:1c:fd:78:85:f8:e5:ce:66:e7:18:8c:40:c6:
                    71:30:73:32:86:c2:ae:87:38:52:ba:be:14:71:a4:
                    95:01:11:39:53:6a:ed:1a:e9:10:73:ab:1e:d4:e3:
                    42:43:33:43:35:e3:3f:7a:f2:c6:0f:82:91:85:af:
                    47:be:d5:8f:bc:8d:dc:07:b8:72:99:2b:02:cf:ca:
                    63:8f:af:d9:e7:bb:b1:12:93:dc:92:67:a3:da:f0:
                    9b:36:35:91:a9:a7:74:5e:25:75:8f:3a:b2:46:b4:
                    d7:ea:29:05:f9:89:5c:76:c0:20:62:a8:b4:eb:7e:
                    f1:57:17:34:13:4f:aa:e7:33:b3:b3:c3:bf:83:c7:
                    31:41:65:a9:b1:00:c7:c4:9a:88:9d:7b:58:0c:6f:
                    36:80:79:80:ad:37:2b:50:e7:c1:3f:06:a7:15:f2:
                    9f:7e:de:df:f0:49:42:16:06:f0:3f:87:50:1d:32:
                    df:62:49:32:a1:85:72:a4:89:dc:ee:d5:82:56:16:
                    3b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:60:55:BC:0B:D1:95:B4:7D:E8:0A:4F:B9:D1:57:0E:93:95:75:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/8b4198d6-8379-3397-b854-7f05af2c2082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl

            X509v3 Authority Key Identifier:
                keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff53::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d8:26:d8:bf:da:12:80:c1:00:15:a7:b2:18:2c:a7:a9:15:
         16:ef:5c:92:ed:a3:f0:cf:7d:e2:22:14:27:09:1b:bc:f8:c9:
         59:34:f1:e4:f4:bf:a2:d1:ff:bf:57:df:41:75:20:28:04:29:
         35:1d:3d:f4:22:31:7c:0e:eb:19:55:8c:a4:77:df:ef:fd:60:
         36:98:ca:17:b2:b8:71:4b:ff:3c:f1:03:c6:78:a5:d9:e4:52:
         05:ac:26:d6:9d:da:55:f7:6b:96:6a:6f:eb:a6:2f:66:22:75:
         74:a0:0b:d6:63:2a:c1:aa:ab:a7:c6:d0:55:0b:49:38:52:86:
         ad:49:d6:83:2b:56:b6:51:ab:82:23:a5:43:a1:7c:10:e7:18:
         b4:d8:e4:23:5d:8c:f9:c4:b2:62:0c:31:a8:d6:9a:48:e2:55:
         3a:61:54:e2:49:78:81:1d:28:29:ba:3e:d0:0e:ae:85:cc:39:
         84:49:49:28:2a:06:6a:23:30:06:ab:bb:97:d3:2a:fc:96:3d:
         b3:1d:26:83:ab:40:7a:ea:cf:a2:38:a8:19:07:a7:f3:0d:ee:
         be:fa:08:f5:14:e9:cf:58:bc:47:78:e4:0c:ab:2b:3c:81:00:
         4b:4d:a2:cf:9b:a8:45:ed:10:ca:38:03:40:b3:88:f5:1d:1b:
         1c:08:17:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 22:44:58 2024 by rpki-client on console-fra.rpki-client.org