Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c2ae313-b44f-3337-85aa-4bbebac8f8d0.roa
File:                     2c2ae313-b44f-3337-85aa-4bbebac8f8d0.roa (raw, json)
Hash identifier:          NDmVIA5YMoL/jOAjEDPdEQAn9cNapWJT9tjSYj7Tur0=
Subject key identifier:   9C:ED:4C:02:71:F3:5C:5F:D5:24:37:E3:46:35:03:20:1D:B2:12:B3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452C2DAF02500C1627939E7600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c2ae313-b44f-3337-85aa-4bbebac8f8d0.roa
Signing time:             Mon 11 Mar 2024 13:33:41 +0000
ROA not before:           Mon 11 Mar 2024 13:33:41 +0000
ROA not after:            Sun 09 Jun 2024 13:33:41 +0000
asID:                     35994
IP address blocks:        2600:141b:2800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:2d:af:02:50:0c:16:27:93:9e:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 13:33:41 2024 GMT
            Not After : Jun  9 13:33:41 2024 GMT
        Subject: CN=ff93dec7-68a9-4d46-900e-609e4ffd2961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:37:2f:9a:d8:9e:da:f3:79:0e:15:08:89:d7:
                    a0:e9:04:6f:6b:82:3c:c1:06:8a:06:f3:ca:0c:b5:
                    98:0f:50:b6:34:21:2e:62:02:a6:61:ec:ec:59:fc:
                    c6:26:bb:ae:4f:05:a1:81:fc:15:26:58:6d:98:87:
                    cb:6f:bb:c3:24:d2:88:45:d3:9f:12:12:75:4c:93:
                    2e:db:e6:ce:a4:4d:a1:bc:27:60:f4:27:9b:37:90:
                    d9:1b:f0:6c:4b:70:fe:b8:50:35:a2:6f:3d:83:77:
                    7c:7f:5c:31:5a:ca:d2:c3:6c:da:9d:d7:73:18:65:
                    3b:72:2d:54:84:48:88:88:f8:24:cc:ec:81:8a:cd:
                    7a:3d:71:98:73:d1:77:a7:da:51:65:8e:92:c4:06:
                    0e:3e:92:01:80:aa:dd:3c:28:9c:b4:72:9f:8b:43:
                    f5:08:09:86:58:97:18:9a:b9:b8:88:4c:7c:d3:a8:
                    0e:db:df:d4:47:ef:04:0f:c5:e0:c0:2f:6b:fb:95:
                    f2:d8:91:8f:01:46:cb:4c:79:14:bd:24:1b:ee:8b:
                    29:5b:c5:ae:a6:2f:f3:9c:55:75:21:fc:57:94:2f:
                    8d:68:e0:93:af:ac:f1:76:19:0e:e5:8c:9f:b0:20:
                    15:43:85:2c:63:26:b1:c2:f2:16:d1:a6:73:30:4a:
                    cb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:ED:4C:02:71:F3:5C:5F:D5:24:37:E3:46:35:03:20:1D:B2:12:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c2ae313-b44f-3337-85aa-4bbebac8f8d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:2800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ba:20:29:eb:0b:1a:39:f9:f7:70:19:3f:d1:96:13:0c:f7:
         ca:44:49:3b:06:eb:4a:03:63:f5:f7:4f:b6:8c:34:36:30:45:
         8e:83:28:88:b6:ec:91:bb:70:8b:df:61:52:38:fb:92:cf:c7:
         0b:c5:b5:8c:b7:67:33:d9:00:b0:26:e4:10:81:6f:3f:15:5f:
         3e:2c:ef:de:a9:d5:78:c9:b3:38:d8:28:06:58:71:ca:9c:43:
         e4:bd:1b:32:6f:a6:1b:db:ca:35:dc:3c:d1:3f:6d:9a:8d:f7:
         b1:26:bf:87:d2:87:02:de:da:28:f3:fc:dd:3a:94:b3:b2:4c:
         45:9f:7f:93:46:69:03:fe:29:45:6c:28:8a:68:d2:09:db:5d:
         bf:18:17:1b:de:9e:a7:c6:f9:c0:87:51:2c:3b:7d:28:5a:61:
         08:dc:b2:87:07:52:70:19:c8:25:1c:b9:00:cc:f1:58:c9:a7:
         21:3e:3d:6a:7f:44:6a:b6:66:1e:97:b6:02:ba:6d:c8:14:6b:
         fb:2f:ce:28:dc:1b:0f:6b:c9:cd:18:a2:fd:14:7b:9b:cd:13:
         51:be:9f:ba:8c:ec:05:61:6c:56:d5:b8:2c:c4:36:ea:58:33:
         a6:5b:f1:6c:8b:c2:e3:aa:b9:9f:e9:47:03:d7:d8:4a:d7:e9:
         f1:c6:16:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 13:18:25 2024 by rpki-client on console-ams.rpki-client.org