Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/a22aeb02-0963-3e93-a748-ce4988390984.roa
File:                     a22aeb02-0963-3e93-a748-ce4988390984.roa (raw, json)
Hash identifier:          DboCqYBLWEpQh+TSJNRWet0c+afy9wn0nnpXFO9d1t4=
Subject key identifier:   8F:70:3B:18:0E:B7:4B:EE:A8:69:71:25:E5:12:F4:06:4D:6D:96:05
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F43285845095572561BB6D4DA296E8880
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/a22aeb02-0963-3e93-a748-ce4988390984.roa
Signing time:             Wed 28 Feb 2024 02:00:26 +0000
ROA not before:           Wed 28 Feb 2024 02:00:26 +0000
ROA not after:            Tue 28 May 2024 01:00:26 +0000
asID:                     198949
IP address blocks:        2607:cc80:7000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:55:72:56:1b:b6:d4:da:29:6e:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Feb 28 02:00:26 2024 GMT
            Not After : May 28 01:00:26 2024 GMT
        Subject: CN=74d7f8ad-9c34-4be2-b487-bcf47a7dfb6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:6c:64:a5:a7:46:d6:59:b4:44:20:b9:13:
                    b2:42:23:85:88:4f:dc:b0:2e:f2:4f:29:75:5f:6c:
                    3b:5c:ce:ce:dc:f4:9a:39:6d:7a:e4:5f:e4:f6:57:
                    0a:39:59:41:1c:21:cb:11:c3:80:e4:ea:82:1f:9d:
                    87:16:87:ee:41:ee:0e:61:9e:05:9a:7c:07:9a:e4:
                    af:74:99:a9:28:3f:97:92:66:cb:28:6a:7b:a3:84:
                    e3:97:ac:2c:a9:ab:ae:da:fb:b5:60:b0:25:70:fb:
                    89:19:f8:fa:12:4f:4f:ee:dd:35:4f:f5:d2:1e:ef:
                    38:68:29:a5:95:d3:2e:aa:38:51:8f:5d:73:17:2e:
                    83:b5:5e:db:39:91:6a:30:f3:49:0d:b7:96:dd:4e:
                    d6:2b:0c:9b:eb:9a:88:2a:e9:85:a8:44:81:21:7c:
                    8f:22:9b:93:63:9e:a0:d8:fd:45:04:fc:73:d2:f1:
                    0d:7d:d1:9b:68:e9:c2:5a:79:b0:38:75:f9:fd:01:
                    5e:2f:79:2e:12:32:cc:71:7c:47:75:bd:8a:d7:e3:
                    fe:f4:e1:f9:16:f8:d0:3a:9d:d7:85:33:9e:af:aa:
                    00:a9:de:4a:b6:0b:8f:9c:bc:5a:d7:c7:06:76:2c:
                    a4:97:de:91:c7:17:f6:40:1d:ca:8b:82:fa:9a:b6:
                    69:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:70:3B:18:0E:B7:4B:EE:A8:69:71:25:E5:12:F4:06:4D:6D:96:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/a22aeb02-0963-3e93-a748-ce4988390984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:7000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:c6:c1:6f:cd:bd:c8:92:ae:77:2c:b3:61:3b:bc:d5:de:
         5f:3f:cf:33:1b:2e:c3:f0:d4:8e:9d:75:fe:86:46:be:e2:9a:
         9b:c0:62:d6:91:34:d4:78:0d:ae:63:1f:a3:bd:c9:d5:c2:f6:
         b2:b3:14:44:72:ef:2b:9b:00:21:63:8e:aa:09:cc:6b:3a:bc:
         16:03:4e:2a:4d:aa:0e:1a:a3:89:96:82:c9:3b:36:ac:6b:ee:
         24:57:03:5c:ea:14:08:02:07:ed:aa:9e:66:f3:84:74:e6:f4:
         f4:35:37:df:ea:f1:61:f0:31:f5:de:0e:7b:5e:20:36:3b:92:
         8b:81:a1:fe:4e:cb:c0:50:6c:30:46:c3:ff:51:6e:1f:e0:0d:
         b1:1e:50:9c:c9:6f:f2:c7:1e:8b:c6:f2:08:8f:6a:ef:2d:0d:
         52:9d:b7:f4:80:65:c1:4f:8b:cb:f1:ff:fe:ac:90:2f:8d:42:
         de:ae:e7:2f:80:17:6d:ef:27:1c:3c:49:21:7a:d3:c1:b9:9a:
         44:87:4c:80:7a:c1:db:3a:f3:be:2b:dc:44:fa:43:9b:89:3d:
         d7:a7:09:5f:08:a5:c1:3c:81:d1:8d:cb:6e:74:1b:1a:1b:af:
         ca:50:a5:0f:36:22:2d:48:fe:aa:a2:7d:70:16:f9:b1:f9:a6:
         99:08:04:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 22:21:27 2024 by rpki-client on console-fra.rpki-client.org