Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2036ac2e-c2d4-30fc-90fc-57af3bd6c87f.roa
File:                     2036ac2e-c2d4-30fc-90fc-57af3bd6c87f.roa (raw, json)
Hash identifier:          BegLr8LN3bBLMqTNk731ggJBYb6YyjstBYbldt0kD0U=
Subject key identifier:   CB:A7:0B:03:50:5A:F0:87:DC:46:12:CD:78:B4:94:C7:16:5E:0A:6D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452EE83901DD1712A0FC477A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2036ac2e-c2d4-30fc-90fc-57af3bd6c87f.roa
Signing time:             Tue 12 Mar 2024 13:01:10 +0000
ROA not before:           Tue 12 Mar 2024 13:01:10 +0000
ROA not after:            Mon 10 Jun 2024 13:01:10 +0000
asID:                     4230
IP address blocks:        2600:1419:19::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e8:39:01:dd:17:12:a0:fc:47:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 13:01:10 2024 GMT
            Not After : Jun 10 13:01:10 2024 GMT
        Subject: CN=ada691ce-50a8-43c7-8eb2-e288c7412cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b8:6a:a1:d0:5a:be:52:ab:a9:7d:fe:a4:39:
                    14:5d:ad:04:39:13:63:56:b3:76:3a:83:be:d2:5a:
                    43:c3:45:70:2c:db:87:a3:ec:f4:62:f9:da:87:bd:
                    6d:be:77:95:b6:45:ca:18:3b:9b:d3:e2:3b:67:ac:
                    9d:e9:e2:85:bd:41:ae:e1:67:ee:2d:bb:f4:06:e2:
                    d1:8f:ce:bf:fc:0a:b3:66:43:46:46:37:e4:56:97:
                    95:af:41:10:25:56:43:6e:48:4a:b7:8d:79:85:ea:
                    69:13:dd:3b:1b:97:fa:ae:65:27:31:94:81:13:de:
                    b6:2e:25:bc:b9:24:e7:d6:52:bc:e7:9f:d7:11:70:
                    70:3d:7f:52:85:47:76:4e:d7:d6:36:1a:72:9b:8f:
                    21:b3:2a:f2:59:76:b2:55:1b:18:02:ed:c5:62:f3:
                    74:68:2f:bd:e4:87:a8:22:66:bd:29:99:ef:27:37:
                    46:97:59:33:fd:7d:5d:19:fa:cb:db:70:46:7a:dc:
                    99:c1:6f:0c:15:3e:aa:41:f1:d4:3f:db:d5:dc:e1:
                    ca:9d:b7:34:9b:10:7d:2e:a5:f4:31:e0:99:03:c3:
                    73:b0:a6:3f:24:39:11:e1:74:0a:eb:ae:1e:ac:31:
                    2f:15:4f:a0:43:e5:37:fa:0a:eb:99:f2:ec:52:21:
                    0b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A7:0B:03:50:5A:F0:87:DC:46:12:CD:78:B4:94:C7:16:5E:0A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2036ac2e-c2d4-30fc-90fc-57af3bd6c87f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:19::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:cd:67:87:ce:f8:c5:31:9e:26:2c:2b:74:85:84:88:4a:aa:
         7e:96:c8:8a:eb:34:29:00:58:bb:f4:a7:47:45:f9:f6:c6:7e:
         10:52:af:4a:14:69:14:1a:d1:15:88:91:69:c8:b9:bc:45:e2:
         33:52:c0:69:38:c0:3a:79:0f:3b:0e:bc:08:e3:8c:e8:80:57:
         0b:5c:39:b8:6f:c3:97:e1:6f:56:1b:75:af:3b:ac:d7:a7:e2:
         cc:4d:ce:f7:49:b2:c2:96:b6:8e:1a:34:b9:cd:c3:e3:0b:c8:
         cd:f1:d9:85:74:ee:65:34:3e:f1:a6:e1:8b:fd:b0:8f:9f:46:
         ba:73:08:d7:ba:1f:fc:6d:b1:b6:c7:c3:ea:1c:39:1c:ef:96:
         7d:3d:f6:bf:9e:f2:4b:7e:2b:74:85:51:c9:91:8a:5b:21:89:
         bb:80:43:90:c2:f4:ee:23:f2:ad:8d:98:9e:4e:3c:b1:07:64:
         6d:a0:d2:e2:9d:9c:d4:d7:ad:07:c1:c6:e3:fd:2f:bb:74:92:
         86:a7:32:ca:b1:24:75:79:66:ce:ce:58:f5:0a:b9:f0:89:6e:
         bf:df:7c:51:e8:cf:0b:cd:1a:c4:a5:47:44:63:cc:2d:df:cc:
         2a:f8:b7:09:62:92:45:08:26:b1:57:ee:0d:cc:16:c6:dd:9d:
         62:74:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:51 2024 by rpki-client on console-fra.rpki-client.org