Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66562d2b-8e0c-3483-8427-979533afc558.roa
File:                     66562d2b-8e0c-3483-8427-979533afc558.roa (raw, json)
Hash identifier:          SVGbpd0XwZM0o3q6DUGceEZJ+DKG7CHSZQqN8nG7MMQ=
Subject key identifier:   90:64:58:C2:0C:F4:E6:09:65:68:60:A5:48:8F:D2:FF:F6:8C:8E:E7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452EDFE8457DE3184E38254890
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66562d2b-8e0c-3483-8427-979533afc558.roa
Signing time:             Tue 12 Mar 2024 12:44:24 +0000
ROA not before:           Tue 12 Mar 2024 12:44:24 +0000
ROA not after:            Mon 10 Jun 2024 12:44:24 +0000
asID:                     7713
IP address blocks:        2600:1417:c00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:df:e8:45:7d:e3:18:4e:38:25:48:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 12:44:24 2024 GMT
            Not After : Jun 10 12:44:24 2024 GMT
        Subject: CN=fbd2c1f3-2893-4207-b266-be898e8b7476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:40:d5:cf:be:fb:a7:f3:a9:e2:cb:f3:48:0a:
                    2c:88:fb:55:27:54:3c:67:09:ec:71:3f:dc:85:46:
                    66:69:08:47:e0:6d:09:7a:e4:1f:44:64:a9:2d:a8:
                    11:0b:c1:6e:29:b7:c9:7c:c8:f5:0e:b5:5c:af:78:
                    d9:0a:3a:49:7b:01:71:45:f8:82:a6:9f:69:01:3b:
                    a6:f5:e0:83:7a:af:9c:a8:5f:8f:b3:3c:e0:0e:cc:
                    2c:32:2d:d8:a5:b9:4b:53:b3:61:7a:72:d8:bd:06:
                    c4:38:50:25:d5:35:a6:78:be:5e:e1:68:55:a7:4f:
                    55:bf:ca:a6:39:31:ce:de:39:58:9b:9e:3e:e0:1d:
                    2c:61:7f:26:36:b8:96:8f:48:91:91:10:6a:3a:1e:
                    e8:b6:18:1d:da:0e:1b:b8:40:aa:87:42:c5:fe:f8:
                    d0:d3:d6:1c:d9:aa:8e:88:50:84:1b:4d:5a:2c:48:
                    3c:0c:e9:8d:80:0d:69:d5:c1:1c:e6:fd:ca:36:c5:
                    d7:52:d7:7d:ac:3e:14:78:cd:bc:41:8c:a6:55:ca:
                    32:22:6c:92:f8:8c:eb:2f:7b:1e:fd:b2:8b:f5:33:
                    ce:ac:d9:30:35:58:cf:22:b1:3a:c6:0a:86:0d:62:
                    a6:ea:0c:be:75:23:d4:72:ab:41:3a:ba:e2:28:d4:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:64:58:C2:0C:F4:E6:09:65:68:60:A5:48:8F:D2:FF:F6:8C:8E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66562d2b-8e0c-3483-8427-979533afc558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:0f:c5:a1:0f:68:fa:fc:84:2c:ed:b1:a5:45:62:66:c5:20:
         1f:47:18:04:14:c9:22:b9:78:88:88:12:50:e9:a7:fb:e6:8e:
         24:4e:f3:82:8f:4e:00:d4:48:8e:3c:49:84:4e:42:af:6a:30:
         e7:db:78:11:89:8c:15:c3:3e:24:c7:b5:45:32:93:c1:0e:09:
         ce:e9:69:a1:87:91:e0:8d:5c:03:13:f4:f1:69:2d:14:d0:0a:
         4d:1f:1a:db:ed:49:e9:d2:3a:9e:9b:98:ea:89:b8:9c:e7:02:
         11:b4:64:35:3c:e0:4d:de:af:24:87:40:dd:1f:4a:80:8c:ba:
         76:94:2a:c2:e7:ec:43:81:b5:d2:c2:6d:2b:57:66:43:ec:8e:
         b4:f7:dd:bd:44:11:db:ac:ab:2c:85:bf:3c:60:00:8b:18:04:
         d2:ea:8e:6d:85:16:8b:c0:4e:4a:65:8c:51:e5:13:f4:99:64:
         6a:fc:3c:ef:e7:14:f1:cf:98:e0:32:c6:9d:eb:50:c3:79:75:
         e1:4d:35:32:17:59:c9:c3:4e:19:cb:aa:0b:08:78:79:9b:07:
         f2:c3:9e:06:2f:b8:a6:36:df:9a:1c:d1:0a:f3:72:26:3b:aa:
         d5:14:10:9a:a0:0b:bc:4e:bd:90:87:fb:91:48:8c:66:3a:8b:
         c3:f5:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:53 2024 by rpki-client on console-fra.rpki-client.org