Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a186806-7d6a-3d91-b8be-da859cb2a897.roa
File:                     7a186806-7d6a-3d91-b8be-da859cb2a897.roa (raw, json)
Hash identifier:          tQN+COja8mzGgfKND6WbOPRuzp205DxMl9MFkl/tEyE=
Subject key identifier:   75:E3:9D:8D:39:D0:70:5C:D6:1F:F2:22:08:B2:C7:2F:27:1D:4B:A9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452BCC88F0AF132C879EE1FD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a186806-7d6a-3d91-b8be-da859cb2a897.roa
Signing time:             Mon 11 Mar 2024 10:17:57 +0000
ROA not before:           Mon 11 Mar 2024 10:17:57 +0000
ROA not after:            Sun 09 Jun 2024 10:17:57 +0000
asID:                     20940
IP address blocks:        2600:1488:4082::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2b:cc:88:f0:af:13:2c:87:9e:e1:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 10:17:57 2024 GMT
            Not After : Jun  9 10:17:57 2024 GMT
        Subject: CN=69c4b4f7-dc64-4835-b042-fcf03e8238ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:76:50:3d:51:16:d5:d7:19:b5:9e:0b:dc:
                    cd:13:14:5d:46:23:af:d5:db:ed:ab:8d:d1:4e:51:
                    da:3d:0e:53:11:ad:96:5d:85:91:bc:d9:07:f4:c6:
                    08:41:3b:24:e8:90:64:c7:d4:21:09:35:4f:90:36:
                    49:55:44:1d:f8:cb:98:8e:00:20:5a:e6:2f:c7:7c:
                    b6:6f:01:74:78:fa:2d:2b:c5:df:9b:c3:e0:45:58:
                    89:4e:38:56:89:a1:40:4b:f5:21:61:a4:f0:b6:ec:
                    c7:3e:09:8d:db:3d:85:76:1c:de:b2:72:cf:03:38:
                    e1:e3:9a:46:d3:5d:c9:88:7b:92:7c:e5:f1:ff:f4:
                    f4:50:ea:29:5d:77:60:0c:f3:f0:02:b5:b9:aa:bc:
                    f9:ca:06:bf:72:1d:ae:97:0b:35:f0:ce:dc:93:68:
                    fc:0e:c0:4e:42:90:57:71:e3:4a:84:52:bf:3f:ba:
                    9d:dc:a8:60:0c:aa:ee:e1:82:6c:d2:53:84:86:4b:
                    83:dc:44:f8:76:6a:72:10:4c:e7:a7:b2:66:bc:12:
                    5f:f5:07:ab:4d:4a:1b:44:f3:c4:3a:91:da:15:6a:
                    0f:8a:14:d8:a3:dd:f3:a5:2d:7f:0a:c0:06:10:42:
                    d8:87:bf:e9:49:cd:61:da:35:69:09:63:70:e8:e7:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E3:9D:8D:39:D0:70:5C:D6:1F:F2:22:08:B2:C7:2F:27:1D:4B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a186806-7d6a-3d91-b8be-da859cb2a897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:4082::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:19:a0:d4:bd:3b:e5:37:9c:0d:a4:d7:5b:aa:7e:4f:5e:45:
         9e:3e:51:7b:09:9a:70:b8:35:fd:07:68:a8:2e:a3:c9:35:24:
         cc:1e:8b:8e:e6:24:fe:73:3e:64:87:e1:3d:55:92:7f:d8:76:
         0b:77:77:29:d3:4e:8c:7e:39:4b:35:0b:d2:6a:4e:d6:54:28:
         6c:de:66:a3:90:4c:75:cb:2d:55:eb:62:69:b0:ca:ff:79:66:
         35:eb:61:00:d3:b2:9b:bc:aa:65:76:fb:fb:03:4f:b6:a9:65:
         a6:cc:75:be:e1:27:c5:b1:d4:1d:1f:14:98:c4:88:3a:09:d2:
         14:7e:03:a9:cc:f0:3a:4a:0a:bf:9a:02:a9:33:0c:35:21:32:
         b5:d9:33:c4:57:f8:d1:52:74:70:a9:71:ef:93:3c:34:dc:87:
         5b:9d:14:9b:1f:b6:88:1e:fb:e5:df:9b:57:9b:e1:56:b2:4a:
         f5:4f:7a:94:b6:20:02:da:41:a2:83:0c:11:ae:56:5d:1c:df:
         4c:24:e2:bc:89:2c:c6:3f:75:58:4a:14:8e:37:bb:21:13:e5:
         ff:61:11:76:65:46:04:2a:7e:dd:f5:25:44:c9:25:35:30:02:
         b2:a4:5a:67:16:92:d3:5b:f3:c6:71:c4:44:84:e3:e5:32:a7:
         76:5e:d2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:55 2024 by rpki-client on console-fra.rpki-client.org