Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/23ebdd6f-c918-3bb3-a088-fde483711cf8.roa
File:                     23ebdd6f-c918-3bb3-a088-fde483711cf8.roa (raw, json)
Hash identifier:          PKcp9ZB473uI+g5fK+/bDoDaNWDgtI1ktT7R4vaBOEA=
Subject key identifier:   A2:86:C3:61:C1:C5:CE:2E:43:97:1B:59:F0:83:B1:B4:06:1B:BD:81
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F432858461EFED2A87223854FB03B2900
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/23ebdd6f-c918-3bb3-a088-fde483711cf8.roa
Signing time:             Thu 06 Jun 2024 13:00:32 +0000
ROA not before:           Thu 06 Jun 2024 13:00:32 +0000
ROA not after:            Wed 04 Sep 2024 13:00:32 +0000
asID:                     394354
IP address blocks:        2620:10a:80ec::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1e:fe:d2:a8:72:23:85:4f:b0:3b:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Jun  6 13:00:32 2024 GMT
            Not After : Sep  4 13:00:32 2024 GMT
        Subject: CN=e1ac4d4b-8e17-4ffb-be25-fdd3827cd775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:36:61:78:00:a1:5a:d0:28:b2:5b:b3:0f:57:
                    3a:d5:34:8e:09:5a:9e:94:68:d5:53:0f:54:88:10:
                    20:f4:1c:6a:3c:46:1a:b9:c7:9a:8a:fd:4e:0a:87:
                    bb:66:ef:66:f8:55:d7:b7:d0:0b:2f:52:8b:5e:24:
                    9f:a0:39:89:f4:40:74:ca:36:77:da:2f:60:0e:97:
                    2c:7d:44:5d:2d:d6:66:ae:74:ac:3c:75:54:50:13:
                    6d:07:9c:57:26:2f:9e:25:02:42:57:63:9b:74:cc:
                    6d:f4:f0:b5:9c:b7:31:f9:30:9a:93:18:13:04:14:
                    f9:57:0a:bf:30:71:15:a6:33:f7:c9:db:c7:99:d2:
                    f5:b5:03:eb:38:6e:09:0f:4a:3f:96:99:07:b3:17:
                    96:6a:45:a0:d4:25:90:84:b8:53:58:24:c2:01:09:
                    a6:77:4b:57:b5:ac:dc:bd:b7:f9:65:a9:bd:1a:ad:
                    c8:be:78:a8:9f:5f:a7:f1:54:cd:0a:e8:dc:d1:0d:
                    81:af:02:b7:39:8a:cf:d9:28:9a:70:a4:1a:7e:ae:
                    11:0e:4b:1a:dd:38:23:15:a8:95:25:7e:0a:ae:90:
                    37:ce:ab:54:94:d9:8c:96:cc:20:87:63:b8:5d:17:
                    41:68:e3:35:07:65:7c:73:40:65:f1:67:48:61:c0:
                    05:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:86:C3:61:C1:C5:CE:2E:43:97:1B:59:F0:83:B1:B4:06:1B:BD:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/23ebdd6f-c918-3bb3-a088-fde483711cf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:80ec::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:9c:88:01:22:ed:96:df:0c:73:16:ab:04:37:fd:1f:e1:86:
         f1:47:58:8c:73:9e:40:cf:81:15:7a:a7:ca:13:b5:77:89:91:
         58:fa:07:b5:94:76:be:96:e6:83:75:46:17:a1:77:9b:92:51:
         46:ae:39:f4:ef:0b:e9:b3:a5:8f:d1:df:a9:ca:3e:f2:90:ed:
         fc:7a:ce:5b:4a:86:db:9f:9a:35:23:55:e7:85:4d:30:12:b1:
         4d:7d:20:13:24:60:93:9d:5f:6c:16:c1:21:05:cb:b4:4e:b0:
         87:22:5b:30:02:c3:67:0a:8d:76:31:36:c4:64:33:24:3b:9e:
         eb:cc:48:91:0a:0d:75:7f:41:d0:e1:86:d4:e7:43:92:90:c3:
         94:02:b8:32:b6:3c:90:bd:40:1b:89:fe:16:fd:16:39:81:e6:
         07:9d:1a:c1:85:5b:ed:98:8d:3b:e3:00:7c:a1:a3:13:b1:2b:
         4e:63:a1:df:64:95:80:c5:e9:b3:09:f4:19:b8:87:be:50:de:
         d7:18:fc:db:5b:a3:a1:67:52:08:d7:50:26:10:e3:bf:70:ab:
         82:bf:54:fe:aa:1c:57:a0:d4:d7:8b:b2:b6:f5:a7:cf:cc:5e:
         0c:62:2e:77:d0:58:fd:d0:d6:9a:c9:54:a5:89:98:19:24:63:
         0c:f3:80:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:27:53 2024 by rpki-client on console-ams.rpki-client.org