Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/21ca7c72-d1f5-3559-bbea-9464473a6882.roa
File:                     21ca7c72-d1f5-3559-bbea-9464473a6882.roa (raw, json)
Hash identifier:          ZXKBP26Nnq1UBIUhdVSgzJIISaUXV/uhGnKpInx54zE=
Subject key identifier:   92:03:A8:1F:22:96:9C:EC:85:65:41:EA:EB:B6:8E:7C:B5:59:3E:C2
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584509556E0F93F37E83B31B7840
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/21ca7c72-d1f5-3559-bbea-9464473a6882.roa
Signing time:             Wed 28 Feb 2024 02:00:26 +0000
ROA not before:           Wed 28 Feb 2024 02:00:26 +0000
ROA not after:            Tue 28 May 2024 01:00:26 +0000
asID:                     198949
IP address blocks:        2607:cc80:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:55:6e:0f:93:f3:7e:83:b3:1b:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Feb 28 02:00:26 2024 GMT
            Not After : May 28 01:00:26 2024 GMT
        Subject: CN=ba2ec5e0-2c0e-4791-89b9-1ef61a25d24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ef:4b:ab:4e:1d:cb:e1:44:b8:95:46:13:67:
                    52:d9:45:92:2f:68:62:2f:b2:10:da:1a:de:e5:eb:
                    ba:82:d0:0d:82:b5:5a:d4:f1:18:1b:61:80:0f:9d:
                    a9:4d:69:a2:31:58:a9:95:00:42:03:a8:46:19:8b:
                    6e:93:b7:ec:d4:bd:82:90:95:dd:ac:68:02:57:8b:
                    38:71:22:ef:26:fc:a2:f5:3f:80:2b:d9:8e:67:ca:
                    d5:37:82:bb:59:f6:18:29:9a:c4:9e:22:58:36:97:
                    23:95:a3:3e:23:c1:20:a7:79:1b:f3:f4:92:8b:8c:
                    5c:45:5d:89:0c:55:5b:ce:4c:8a:12:ad:03:ff:c5:
                    3b:6a:61:a1:4a:65:b5:75:88:03:b2:36:48:3e:1a:
                    92:27:de:d3:fe:59:b8:d4:6e:48:0d:a1:69:d3:4c:
                    95:b4:34:4b:9a:b0:21:b8:63:13:18:e4:47:37:27:
                    a9:77:7a:49:48:61:de:cd:5b:b3:40:29:fa:17:29:
                    dd:0b:d4:ae:be:b8:24:99:8d:1c:23:8f:f9:0b:91:
                    23:77:6f:0f:b7:37:d7:c2:32:68:54:6b:b2:e1:a5:
                    12:73:06:76:6e:8a:ad:4d:0c:fb:f3:f2:44:16:84:
                    0a:e7:50:13:ee:d9:33:c1:7e:40:de:c0:6b:ce:41:
                    ad:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:03:A8:1F:22:96:9C:EC:85:65:41:EA:EB:B6:8E:7C:B5:59:3E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/21ca7c72-d1f5-3559-bbea-9464473a6882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:76:97:0b:b7:bd:a9:f9:9a:a8:48:8e:80:37:5b:d0:cd:
         1c:01:9f:91:4f:6a:08:0a:34:ed:6c:e8:b6:52:ff:6d:35:de:
         9a:bf:6a:d5:f4:6c:a4:e9:fa:d5:aa:f7:67:66:e9:24:15:77:
         80:05:d8:db:c9:f0:21:76:3e:2e:f5:55:8a:c4:65:b1:7f:c8:
         84:29:fb:a5:87:39:2f:ce:e3:ff:e9:e7:b4:ab:68:d9:9f:a1:
         4c:0c:8b:2c:39:bb:48:2a:76:82:e2:0e:d7:87:bb:95:7e:8f:
         ac:14:a5:76:9c:1f:93:ed:6d:7a:44:0a:f1:69:af:da:ad:86:
         fb:62:e0:4e:e3:7b:40:4c:62:a8:12:78:55:89:2c:a3:d6:80:
         75:f1:8a:b0:b7:46:61:04:fc:4d:5c:49:aa:01:ec:3d:65:b8:
         5e:a7:f0:19:d9:61:51:9f:3f:f4:7e:21:cd:b5:88:1f:da:5c:
         38:d7:a9:c7:8e:0f:78:38:ec:b6:50:b6:c8:3c:f7:45:05:47:
         8e:1b:a3:10:cc:2e:b2:55:46:0c:be:d2:37:f4:e7:90:82:5c:
         76:07:e3:88:88:74:9a:a6:d5:a0:96:24:4f:d2:a4:97:b5:29:
         45:ea:ec:87:7c:93:a4:62:1e:5f:3a:76:e8:ab:2f:2e:43:b1:
         26:4b:d9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 04:02:54 2024 by rpki-client on console-ams.rpki-client.org