Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5b18bd02-337b-3521-8f52-7348d72e73da.roa
File:                     5b18bd02-337b-3521-8f52-7348d72e73da.roa (raw, json)
Hash identifier:          TBdm3wlMN77gQN3rjJlpjA0kI4fmunbLv8J09Qyscnc=
Subject key identifier:   36:27:42:E5:49:D5:10:F6:43:7C:C0:EA:42:73:55:C3:90:51:F4:33
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584509556E47FA5FD25ABDFD8000
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5b18bd02-337b-3521-8f52-7348d72e73da.roa
Signing time:             Wed 28 Feb 2024 02:00:26 +0000
ROA not before:           Wed 28 Feb 2024 02:00:26 +0000
ROA not after:            Tue 28 May 2024 01:00:26 +0000
asID:                     25664
IP address blocks:        2607:cc80:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:55:6e:47:fa:5f:d2:5a:bd:fd:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Feb 28 02:00:26 2024 GMT
            Not After : May 28 01:00:26 2024 GMT
        Subject: CN=5893ba04-3551-424b-ba08-1873306ad3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b4:e8:45:26:62:cf:8a:41:59:00:f2:ac:6c:
                    c1:4f:21:c9:2d:70:25:6c:68:03:3c:43:9d:c3:42:
                    94:bc:ea:51:ed:e6:a7:73:09:b3:a6:2c:a6:e9:d0:
                    b3:4e:83:dc:7e:65:f9:ce:a9:09:44:b6:f7:46:cb:
                    bf:7c:47:6a:68:07:f7:ce:5d:8a:ee:35:29:51:3d:
                    37:c0:72:2b:07:e3:1e:89:a5:a3:ec:06:2d:58:2c:
                    c0:21:08:94:c9:b2:44:5a:7f:5f:02:0c:82:01:24:
                    8e:13:52:57:63:a6:cc:9d:6c:c7:fe:c3:e5:d5:3f:
                    2f:7d:06:f9:74:a5:4e:29:f1:5c:23:71:80:4d:48:
                    6c:a5:4d:9e:f0:04:ff:38:ed:83:84:74:e3:cd:31:
                    bf:6a:8b:5c:5d:c6:b6:59:2e:c7:64:ae:0e:50:ef:
                    02:16:23:4f:21:b9:be:c7:e4:a9:5b:24:fc:e7:9d:
                    a0:ea:70:e1:07:66:4d:85:64:ae:e0:6c:20:39:fb:
                    ab:3f:41:ed:97:05:c6:8b:51:bf:80:e1:1f:41:52:
                    38:a6:7e:b0:c1:c1:1d:35:59:14:42:4d:1c:08:90:
                    44:89:78:c0:f6:4e:34:16:51:c0:02:f2:d9:2d:ac:
                    f6:9e:9a:4d:66:ef:17:a9:20:a2:25:f2:23:89:96:
                    c3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:27:42:E5:49:D5:10:F6:43:7C:C0:EA:42:73:55:C3:90:51:F4:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5b18bd02-337b-3521-8f52-7348d72e73da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:45:46:1a:2e:fb:62:7b:74:7f:08:fe:3a:98:20:c1:b5:cd:
         3b:d1:c5:1b:54:9b:33:30:47:a6:e1:5c:3e:06:3f:c3:58:aa:
         af:10:66:fb:ed:8a:c2:a6:63:1d:13:6f:6c:ec:a2:0f:5d:5d:
         1d:c3:e3:b6:89:4e:54:11:91:fe:49:d2:cf:54:f9:4b:ef:33:
         0a:d3:b4:bd:b8:d9:13:c3:54:4d:25:e6:c5:5c:19:b9:73:d7:
         96:1a:31:5f:3e:0b:a7:e2:20:2e:b8:54:34:f2:b7:c7:1f:c6:
         30:17:a2:d0:b4:cd:17:a1:a0:66:b9:16:c5:c9:e2:0d:37:a3:
         bb:0d:bf:ca:ca:55:4d:92:17:c1:b4:5c:cf:22:42:27:6c:44:
         51:35:e4:c1:30:f2:5e:34:04:b5:d9:3f:48:ff:8e:f2:d6:ed:
         32:37:b2:77:9d:02:d6:bd:31:81:ee:b7:6c:c8:ac:c9:5b:fd:
         0e:a1:8d:93:1e:73:ab:71:46:4f:57:57:b2:7a:b2:d9:b8:25:
         4a:ad:7a:c2:69:91:1a:ae:6d:3d:87:d4:db:72:94:d2:9d:4f:
         da:e0:a5:2a:f1:46:9c:84:8f:e5:6e:8d:51:0b:98:b0:be:65:
         9c:fc:68:c4:38:b7:70:8d:0a:96:48:11:81:f2:4a:51:c7:dd:
         26:c2:0e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:14 2024 by rpki-client on console-ams.rpki-client.org