Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/261f833a-66e3-3d69-8956-e5ed30513310.roa
File:                     261f833a-66e3-3d69-8956-e5ed30513310.roa (raw, json)
Hash identifier:          uVT7rvM7z7DjLI1+8wR9jcYXIqRTgUwjdVVv/7NOYxA=
Subject key identifier:   1D:25:13:8E:E1:23:D9:29:FA:E9:70:23:89:61:51:9F:EA:FF:DF:7F
Certificate issuer:       /CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
Certificate serial:       010D0C9F4328584566BDB550D2E8399CD6B7C800
Authority key identifier: 76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/261f833a-66e3-3d69-8956-e5ed30513310.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     6327
IP address blocks:        2001:4e8::/32 maxlen: 48
                          2604:3d00::/28 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b5:50:d2:e8:39:9c:d6:b7:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=1bbd37f8-2304-4dbb-a93d-2c59436dabe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:82:5a:1d:08:cc:29:93:cb:15:9a:a6:bc:
                    b8:ff:a7:dd:31:c4:6d:b3:2e:58:16:23:28:20:e8:
                    c5:0f:bf:73:10:42:09:f3:e7:1b:58:f6:8f:9a:6a:
                    75:7d:3e:61:66:2e:f5:fc:09:2e:87:82:d3:3c:a3:
                    5a:ce:e7:d6:94:ec:0c:89:46:7f:75:c7:49:d8:cf:
                    a5:95:53:9a:10:0d:78:1b:d2:3d:e6:a1:ee:2e:13:
                    90:13:70:bf:32:18:5a:2f:c8:75:6f:2c:e7:09:c2:
                    cb:fb:7b:ab:cb:ac:6c:8d:c6:dc:63:7c:cb:45:92:
                    52:bb:33:b0:ad:67:7e:d7:f8:50:6b:10:6d:ea:d2:
                    fb:12:71:60:70:91:5a:e7:9c:7d:2f:84:d6:6d:b0:
                    2c:b5:09:5f:1f:1d:cd:95:5b:7b:13:cb:dd:ab:11:
                    20:24:8e:8d:c0:1c:15:2a:49:59:40:da:3a:00:77:
                    30:8d:ef:d6:29:b8:c9:8a:f7:57:55:10:7b:30:4d:
                    b0:d6:72:7c:87:04:ba:ba:09:62:1a:48:b4:4c:a8:
                    17:01:65:88:be:6c:8c:c4:81:39:06:d4:1a:18:24:
                    84:2e:f2:cc:17:24:d3:21:16:bf:8d:7e:98:09:cd:
                    a2:49:15:9d:95:1a:52:82:43:ab:fd:2e:63:75:c0:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:25:13:8E:E1:23:D9:29:FA:E9:70:23:89:61:51:9F:EA:FF:DF:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/261f833a-66e3-3d69-8956-e5ed30513310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl

            X509v3 Authority Key Identifier:
                keyid:76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4e8::/32
                  2604:3d00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:04:76:af:73:02:6a:31:72:df:1e:12:1a:3b:c4:26:f6:2c:
         3f:af:a1:a0:63:0b:10:0b:d1:2a:ef:18:a0:90:b0:94:70:63:
         f9:e8:6c:82:c6:a3:c4:23:b6:5c:e2:cb:2b:ed:51:0a:c0:32:
         d9:dd:5e:c9:a7:1b:d5:c0:18:1c:1d:52:a5:e8:d4:a5:de:a3:
         c0:82:25:aa:63:98:00:46:3f:5e:ff:26:e6:3f:f1:d6:ef:cf:
         bc:be:34:d4:cb:c3:ee:0b:cd:4f:4c:e2:c7:2d:a2:44:5e:fe:
         fa:b7:a6:a2:69:13:19:ed:59:50:07:96:78:24:e1:dc:ad:cd:
         f6:8a:e7:15:db:3b:83:a5:c2:a1:a8:63:a6:72:24:1a:57:59:
         dc:d3:da:66:7c:7d:2d:46:b9:7b:fd:b6:bf:c2:93:a7:b9:1a:
         6a:f8:01:03:e2:8e:1a:eb:87:3d:8c:23:c4:df:cb:de:cb:03:
         a6:70:c3:c1:2a:cc:f6:ca:54:f0:b4:01:a6:82:82:98:37:e0:
         3a:dc:e6:0c:01:0b:08:84:fd:c1:3c:9c:2f:bb:57:64:c6:67:
         ee:41:dd:7c:f4:7f:5b:55:da:65:85:89:8d:ae:bb:0f:09:4d:
         dc:55:44:fe:c9:ed:a3:5f:2b:5c:1f:29:77:28:91:62:42:f9:
         3c:92:73:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:12:32 2024 by rpki-client on console-ams.rpki-client.org