Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/419014e1-edc7-3f1d-80d5-f0b25f240ad1.roa
File:                     419014e1-edc7-3f1d-80d5-f0b25f240ad1.roa (raw, json)
Hash identifier:          F1gGWCyA6qBCaE/BAXVmhcyP4DQHYzpybQ6s3KPUMxE=
Subject key identifier:   A9:6B:0A:4A:48:A2:DF:97:22:D8:81:BA:5B:73:5C:2E:18:C8:9E:57
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452C0AE49632852ACB5A740640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/419014e1-edc7-3f1d-80d5-f0b25f240ad1.roa
Signing time:             Mon 11 Mar 2024 12:23:35 +0000
ROA not before:           Mon 11 Mar 2024 12:23:35 +0000
ROA not after:            Sun 09 Jun 2024 12:23:35 +0000
asID:                     35994
IP address blocks:        2600:1406:d800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:0a:e4:96:32:85:2a:cb:5a:74:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 12:23:35 2024 GMT
            Not After : Jun  9 12:23:35 2024 GMT
        Subject: CN=aeed595a-63f3-419e-b670-b134ee9087c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:79:8c:99:8a:f1:6d:70:d7:3f:1e:1c:5c:8c:
                    d4:15:87:90:cf:92:b0:3d:b6:e8:17:8d:98:4a:7d:
                    01:6a:55:da:60:a9:67:ac:cb:a2:2b:3b:71:2c:91:
                    03:2c:2f:fb:7a:58:4c:32:aa:86:99:7e:aa:60:b3:
                    a1:36:ec:21:fd:f2:73:d4:2b:24:77:a3:36:a8:aa:
                    b3:22:62:8e:ac:66:d2:17:59:b9:46:32:46:08:de:
                    d1:df:69:b2:74:58:7d:fa:2b:fc:c0:0d:f5:9c:c3:
                    a2:8f:3e:de:06:00:d7:25:54:d3:81:77:76:f9:ca:
                    16:88:d0:fc:c6:fe:bf:c2:86:80:e9:76:81:d2:29:
                    fe:3b:d5:49:f1:87:9c:9b:ec:06:5b:1b:d1:8f:06:
                    4f:99:07:f3:ce:cd:28:7d:19:9b:e6:6f:a9:03:a5:
                    b6:e1:0f:df:3c:0b:11:ca:c8:33:96:22:0b:70:2b:
                    39:10:1a:75:bd:92:31:54:9d:1b:c3:cb:5b:d1:bb:
                    6c:0c:41:1c:0b:87:07:11:a9:94:ab:0f:cd:fd:b1:
                    e8:06:7a:bd:fd:ec:fc:93:96:c1:89:be:a0:e5:89:
                    39:03:55:6b:36:ea:a8:4b:65:d7:e4:36:65:35:6e:
                    a7:15:bc:5b:62:c3:60:79:97:02:5c:23:fb:62:d3:
                    1e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6B:0A:4A:48:A2:DF:97:22:D8:81:BA:5B:73:5C:2E:18:C8:9E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/419014e1-edc7-3f1d-80d5-f0b25f240ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:d800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d3:ab:d1:94:e2:2e:f9:17:0f:68:28:ee:51:29:4c:49:d5:
         62:e0:36:f7:a9:ee:80:af:44:2c:6b:b8:9a:7e:18:ea:da:fa:
         f2:9b:30:23:46:54:8f:f0:fa:17:a2:79:18:57:14:2f:fb:e1:
         dc:a2:78:be:7b:ab:cd:57:88:c0:78:9b:08:ac:a0:2a:2b:c4:
         4d:87:1b:cc:8a:1d:79:b5:fd:4f:1f:fe:ba:7f:5e:4d:b4:35:
         ad:82:23:10:00:60:e7:2a:bf:87:98:62:ad:cf:1c:cc:7c:d9:
         f9:ce:d6:18:c0:05:67:ae:c2:e1:00:45:90:09:a6:38:ea:0d:
         51:b2:e6:21:e9:9d:70:f5:4a:a7:60:0b:11:81:d5:f2:94:6d:
         7b:1a:b2:04:9e:98:c7:e0:a9:e8:4b:d5:c8:cd:63:38:3c:ec:
         c7:c9:68:06:28:73:f3:7b:71:53:08:6d:09:25:65:e6:27:73:
         14:33:d9:7a:14:4f:d1:87:68:45:a1:61:4a:4d:71:0e:71:8f:
         ef:4b:f7:ae:5c:91:c2:9f:83:5d:6b:26:c1:6d:39:62:a8:17:
         56:5c:69:1e:78:00:04:c0:b2:8a:88:f5:17:9d:7b:43:2d:56:
         f2:8d:28:e7:c7:4f:68:02:73:d5:0c:f3:a6:3d:2f:7d:65:bb:
         0c:9c:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:57:42 2024 by rpki-client on console-fra.rpki-client.org