Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fbde4f3-07b6-32d1-91b1-a79fa32c2c21.roa
File:                     3fbde4f3-07b6-32d1-91b1-a79fa32c2c21.roa (raw, json)
Hash identifier:          MOaYI9cBe/ydBOXCXaZONKFsAiTKbat+CqgFBh34pgU=
Subject key identifier:   85:1F:16:49:F3:1E:3A:04:66:E3:77:A7:AA:47:7E:91:E6:9B:CF:D5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858450FF63FDCCC6D7833D4413F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fbde4f3-07b6-32d1-91b1-a79fa32c2c21.roa
Signing time:             Fri 01 Mar 2024 10:59:22 +0000
ROA not before:           Fri 01 Mar 2024 10:59:22 +0000
ROA not after:            Thu 30 May 2024 09:59:22 +0000
asID:                     20940
IP address blocks:        2600:1406:1a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0f:f6:3f:dc:cc:6d:78:33:d4:41:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  1 10:59:22 2024 GMT
            Not After : May 30 09:59:22 2024 GMT
        Subject: CN=fd1c6df6-0d25-4647-8828-78899c124d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:e0:1e:7f:b5:c0:53:ae:2d:e4:2c:6b:64:
                    69:16:c6:8f:2b:0d:17:47:63:e9:3e:6e:46:2c:dd:
                    cb:52:a1:82:19:5a:3d:5f:fa:05:ad:67:9f:38:88:
                    b6:6d:56:1c:b7:0a:3d:cd:0e:83:54:bd:65:30:9c:
                    c8:7f:44:41:d8:8b:ce:3c:a1:97:ac:a3:63:2d:b3:
                    9c:b8:bb:c6:da:ef:7a:2f:0f:1f:96:92:37:60:d9:
                    9c:c2:4d:16:18:67:40:a4:6a:54:a7:fc:6e:61:03:
                    57:0e:c5:41:0c:b2:80:7a:eb:e4:54:3a:ce:f0:0a:
                    45:8b:d0:10:70:83:47:ce:03:b5:3e:68:db:ac:0a:
                    3b:65:25:60:c9:bd:8f:dd:51:cd:ab:d3:6d:1b:f5:
                    b1:a5:24:77:8a:f6:9d:9f:0c:6b:68:84:f4:f9:6a:
                    82:89:24:12:82:24:47:a3:e8:98:2b:e7:06:a3:59:
                    a7:d8:91:4e:f4:e5:e9:44:a7:b8:43:e6:f5:b9:8a:
                    c9:02:31:a5:04:43:82:86:6a:63:fb:1b:5e:f4:e3:
                    2c:9d:88:bc:35:a8:a7:5c:40:de:bf:8a:5a:70:06:
                    cd:f5:bc:ea:c7:55:0e:b3:e7:c0:ea:42:40:68:b2:
                    eb:86:c2:88:a6:6c:c4:8d:ee:0b:1a:6e:d1:ac:a1:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1F:16:49:F3:1E:3A:04:66:E3:77:A7:AA:47:7E:91:E6:9B:CF:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fbde4f3-07b6-32d1-91b1-a79fa32c2c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e7:e0:83:2a:3b:04:22:76:8d:be:cb:d1:08:82:80:41:a8:
         46:08:29:ca:ae:63:46:bc:03:5f:d1:f9:3e:d8:2f:ce:cf:16:
         90:12:c3:ea:38:e8:ab:ae:72:b0:40:19:00:6d:c1:dd:3c:d8:
         42:11:5d:0b:89:f5:a3:e9:79:03:bc:e5:3e:26:c9:58:6b:87:
         d0:4f:f0:da:e8:00:46:e5:4e:b3:9e:1b:23:1c:49:9f:71:92:
         aa:ed:80:46:27:b0:3d:59:a3:7c:da:49:22:09:76:55:22:44:
         aa:85:b8:76:ab:ee:4a:9a:84:51:35:c2:10:34:89:71:e8:b1:
         73:a7:20:6d:35:b3:57:03:7c:5e:c2:7a:f2:e1:fc:73:41:84:
         bd:2e:93:94:5a:1e:41:01:08:bf:60:de:44:32:a2:fe:88:ba:
         bb:83:a2:e7:7c:4f:c9:31:1a:55:f6:38:80:f9:a5:66:13:b0:
         66:0f:30:07:11:5d:5a:ec:30:7f:a2:91:15:45:89:8f:21:4c:
         25:89:16:e3:bf:bc:67:33:76:31:38:10:c9:71:75:b7:5c:57:
         d0:c8:9a:37:a4:65:74:8f:cd:da:3a:87:5a:5c:17:e0:c5:b3:
         2c:25:99:94:76:c5:35:62:26:50:86:c0:58:6c:40:93:fd:0e:
         13:03:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:36:19 2024 by rpki-client on console-ams.rpki-client.org