Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06df4e25-1c8e-38e9-8659-c16f8e5b5afe.roa
File:                     06df4e25-1c8e-38e9-8659-c16f8e5b5afe.roa (raw, json)
Hash identifier:          kGh11rfvblMSUiIpIC1XOgVPRtvTpVfglFzurAzQ54U=
Subject key identifier:   2B:4D:64:88:E8:65:F8:11:11:0A:3B:17:39:CA:3C:59:D4:33:D2:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452EE35172BC6997B24EEAC900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06df4e25-1c8e-38e9-8659-c16f8e5b5afe.roa
Signing time:             Tue 12 Mar 2024 12:51:17 +0000
ROA not before:           Tue 12 Mar 2024 12:51:17 +0000
ROA not after:            Mon 10 Jun 2024 12:51:17 +0000
asID:                     8781
IP address blocks:        2600:1417:4800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e3:51:72:bc:69:97:b2:4e:ea:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 12:51:17 2024 GMT
            Not After : Jun 10 12:51:17 2024 GMT
        Subject: CN=e9d6aedb-8ab2-4f14-95b2-fa5c2265114a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:bf:e8:27:c4:6e:0b:d8:e0:cc:36:00:60:
                    1d:66:d8:57:77:20:66:81:75:06:9e:0d:d5:b9:03:
                    3c:45:62:67:ac:a3:3e:be:0c:ca:6c:55:24:0e:72:
                    fe:c7:d1:c8:db:1f:2a:b2:a0:47:25:bc:cb:fb:3c:
                    dc:91:eb:e1:3b:89:e8:87:35:37:28:3c:6d:87:1e:
                    89:ae:ef:b6:da:21:c3:26:e8:d8:29:33:ee:07:1b:
                    2a:0d:55:ed:4c:25:e2:0b:83:bb:ca:da:7e:de:2a:
                    6e:5f:9d:69:1c:02:16:9f:b7:59:d7:f8:4b:aa:22:
                    94:4a:59:f0:a9:93:7c:91:b5:ea:fe:8b:fc:a1:ca:
                    ee:aa:01:6f:30:b5:64:8c:b0:1d:81:35:f3:4b:77:
                    d1:92:a3:cc:cb:da:50:35:6f:53:28:a8:93:d4:ac:
                    af:87:77:8a:58:4a:e1:b4:7a:c2:c9:77:21:f3:c7:
                    3c:c7:a2:85:4d:64:d0:0c:40:f6:aa:26:52:2f:c8:
                    d6:d6:0c:41:55:51:a9:90:88:72:42:8d:9e:a7:e0:
                    b8:33:8d:2a:8c:15:a0:7d:57:14:57:b2:49:5d:ad:
                    ef:6b:ee:72:f9:df:ee:76:55:0c:a5:3e:46:5f:0e:
                    12:57:7c:1d:4f:ab:a5:ee:07:0d:a1:5d:b3:77:13:
                    07:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4D:64:88:E8:65:F8:11:11:0A:3B:17:39:CA:3C:59:D4:33:D2:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06df4e25-1c8e-38e9-8659-c16f8e5b5afe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:4800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:61:b2:ab:98:24:bd:d9:9f:f3:8b:44:20:f6:d3:b0:92:01:
         d7:4b:95:3a:81:49:b4:1d:cf:e6:ff:b1:5c:39:3f:cb:42:38:
         99:a9:fd:50:5d:bb:85:39:b4:ac:21:35:29:78:38:39:18:07:
         bd:ab:34:4c:08:8d:dc:c9:4a:b7:ac:b1:60:10:94:48:7c:a0:
         ea:db:b5:0f:be:5e:c2:2e:6a:8f:fe:85:70:71:da:d3:17:a6:
         9c:48:6a:fe:2a:b4:0d:4a:49:74:3b:fe:dd:a2:bc:12:f1:bc:
         b4:e7:be:24:8a:81:d7:8b:e4:14:59:3d:19:fc:de:59:2f:29:
         d0:70:b5:e6:cd:f0:e4:ea:bb:62:b3:8e:cc:b5:f1:46:6e:e5:
         f8:fe:cc:f8:22:82:49:dc:ee:02:99:a4:14:d9:f8:c7:0b:15:
         97:47:79:fd:30:0b:f9:20:5f:6c:d2:3c:52:6b:23:95:08:25:
         a2:3f:45:32:0f:a0:b6:61:1d:09:34:f5:ac:b1:e0:c1:ab:ba:
         5a:d2:d7:ac:9f:e2:a0:c3:61:58:c5:47:87:fd:ca:a9:7a:a5:
         86:c4:6b:49:63:02:de:45:ca:16:b7:fb:c9:ad:1c:b5:cc:13:
         96:70:10:0f:7f:d1:84:d4:90:0e:2a:1e:6b:75:ea:29:aa:42:
         f9:04:bb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:13 2024 by rpki-client on console-ams.rpki-client.org