Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa
File:                     e2967edf-17a9-32bb-8570-be2bca3444ee.roa (raw, json)
Hash identifier:          x7+7ZRfhh2vSAd0wDpILWQiEtjJruyFTk5Ug4VbiLzQ=
Subject key identifier:   57:6F:5C:85:CB:D3:A7:76:15:A0:A3:F2:C9:D0:C7:03:FB:E8:1D:37
Certificate issuer:       /CN=3104c204-288d-4f87-83c2-99a30908dea3
Certificate serial:       010D0C9F43285845D1E106A25074C3E472DA25F0
Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa
Signing time:             Thu 09 May 2024 22:03:25 +0000
ROA not before:           Thu 09 May 2024 22:03:25 +0000
ROA not after:            Wed 07 Aug 2024 22:03:25 +0000
asID:                     394353
IP address blocks:        2001:500:205:8000::/49 maxlen: 49

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d1:e1:06:a2:50:74:c3:e4:72:da:25:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3
        Validity
            Not Before: May  9 22:03:25 2024 GMT
            Not After : Aug  7 22:03:25 2024 GMT
        Subject: CN=e66ab30f-13a7-48e3-9603-aeda6a4cd8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:91:fb:af:c7:cf:a8:21:e1:90:9a:05:64:d5:
                    40:41:6c:55:c2:10:59:5e:9c:6a:de:ba:b8:fb:33:
                    f4:0e:77:e6:16:e2:fe:60:88:6e:5c:fd:e5:fc:c4:
                    50:fa:de:86:0b:8b:ff:2a:14:98:1e:53:cf:52:80:
                    c1:d0:22:db:18:1a:ab:d0:09:b0:d7:68:3f:ba:db:
                    33:45:28:31:27:1f:c2:5e:7b:92:67:49:76:2c:fa:
                    fc:e2:87:cd:56:1b:4e:4d:b0:d2:53:d9:df:4f:1b:
                    ff:fe:87:ad:8c:54:a5:27:81:bd:73:f1:ae:60:45:
                    09:22:40:78:e5:25:d4:c1:04:b2:b6:5a:4d:cb:01:
                    29:f1:cf:33:36:d1:5b:29:6f:33:78:49:3f:37:78:
                    e4:05:d2:f2:2b:85:b6:fc:45:35:b8:20:69:9a:d9:
                    b8:3a:56:1f:c6:d6:e0:26:51:2e:d7:36:58:22:43:
                    1b:3d:00:6d:ea:66:3f:b5:45:0f:d7:ab:ea:35:b7:
                    38:5c:2c:d9:c8:b1:a2:df:b5:64:71:c9:c4:72:99:
                    d9:fc:9a:aa:9c:b1:8e:29:e8:45:9a:5b:c7:43:26:
                    49:08:87:79:ef:53:93:a6:d0:6f:f0:09:e6:6c:80:
                    fd:cc:7e:9e:d5:85:28:14:96:fe:5b:e5:30:77:7b:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6F:5C:85:CB:D3:A7:76:15:A0:A3:F2:C9:D0:C7:03:FB:E8:1D:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl

            X509v3 Authority Key Identifier:
                keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:205:8000::/49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d8:c2:f5:5a:5c:97:61:2a:3e:8f:3c:d0:af:5d:4d:33:05:
         94:ac:43:2d:39:c3:2d:53:b5:b7:ff:82:41:10:9e:fb:9f:1f:
         65:6b:ad:96:7e:3c:bd:8b:8a:8a:20:32:dd:b0:15:32:50:5f:
         b4:74:c5:fa:8b:93:ff:96:05:c6:f1:8b:b9:56:1b:72:0c:3c:
         a5:62:60:1b:e3:1b:96:3a:ac:f0:73:65:a2:80:5a:c7:49:e8:
         0a:ed:16:33:ba:de:19:fc:b4:24:67:41:84:ee:18:ba:98:5a:
         af:8b:1b:f9:30:78:cc:93:0b:13:10:bc:e2:75:4e:39:79:14:
         2f:a3:42:95:71:84:f7:e7:dd:40:e1:c1:d8:1a:b1:81:6a:10:
         3e:11:46:04:43:da:6b:f0:f5:20:c8:b0:08:1f:cd:a5:fa:e0:
         1c:cd:1e:7b:5e:f9:05:6c:0b:04:bf:e8:49:8f:b2:79:62:66:
         ac:f8:61:b8:23:9c:c0:8a:cd:12:62:46:c5:80:fd:54:04:9b:
         9b:72:0b:f6:2f:df:87:eb:71:80:1e:be:0d:0f:b4:66:20:07:
         d6:f9:f2:35:20:35:8b:6e:08:0f:99:33:f8:37:26:a3:e1:99:
         81:d4:8a:31:e9:84:71:36:c9:2b:63:e4:0d:b0:39:b6:ee:ad:
         b3:e3:1e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:13:48 2024 by rpki-client on console-ams.rpki-client.org