Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dc24b3c-db82-3734-8e0b-a0b93536450a.roa
File:                     7dc24b3c-db82-3734-8e0b-a0b93536450a.roa (raw, json)
Hash identifier:          vxS8QTC17A9X4oeK5X+0YzErLneUPzlnE2YR2Ctxmvc=
Subject key identifier:   83:E3:40:5F:C7:F4:6E:C3:72:7C:53:A8:9A:1E:6B:63:AC:59:A8:B6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858451AFC5905E06756E6328F0B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dc24b3c-db82-3734-8e0b-a0b93536450a.roa
Signing time:             Tue 05 Mar 2024 09:45:32 +0000
ROA not before:           Tue 05 Mar 2024 09:45:32 +0000
ROA not after:            Mon 03 Jun 2024 08:45:32 +0000
asID:                     20940
IP address blocks:        2600:14a0:b0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:fc:59:05:e0:67:56:e6:32:8f:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  5 09:45:32 2024 GMT
            Not After : Jun  3 08:45:32 2024 GMT
        Subject: CN=dd610156-104c-45ab-a7a6-d1b5b8258cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:de:e4:28:94:22:f4:df:f8:8a:68:f0:7b:1b:
                    c8:a3:c6:c1:32:8d:c6:f4:7d:5b:a3:4e:28:25:6d:
                    68:63:39:75:b2:67:f4:11:49:ec:e1:bf:49:2f:73:
                    1d:4e:ba:f9:2f:fd:99:a1:d5:8c:97:66:8a:87:cd:
                    95:dd:db:e8:b5:8c:b6:2b:fe:d9:7b:b8:dc:a9:c4:
                    1f:49:ec:76:dd:92:00:55:7b:59:2e:c9:02:80:04:
                    f3:cc:f6:19:87:93:3d:c0:df:ae:31:49:06:05:75:
                    59:7c:02:ee:e9:7e:79:87:0a:77:c7:22:8f:df:2f:
                    a0:b4:c8:11:43:c1:f9:34:f4:cb:a7:96:58:27:a3:
                    98:b6:58:ff:ed:b8:1e:79:36:91:a6:2e:b0:26:31:
                    6e:4c:5a:ba:0c:1d:ab:16:cd:dc:51:ea:0c:7c:9e:
                    b1:5c:b6:9d:3c:28:80:32:71:3e:a0:f7:95:c4:ac:
                    b3:99:b5:87:6f:c5:ae:db:4e:e0:d8:5a:a9:78:e9:
                    ac:ab:9b:72:6f:93:ec:f8:09:39:90:97:d0:d0:fa:
                    16:be:b6:92:20:32:4c:0e:2d:ed:99:8e:7d:44:1d:
                    ca:64:01:6d:2a:67:81:d9:fb:f8:b9:fb:5a:fc:af:
                    2c:4f:bd:6d:4a:a7:95:36:1d:69:74:a0:d4:7d:36:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E3:40:5F:C7:F4:6E:C3:72:7C:53:A8:9A:1E:6B:63:AC:59:A8:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dc24b3c-db82-3734-8e0b-a0b93536450a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:14a0:b0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:52:93:e1:8b:ad:18:e8:a4:0b:be:6a:80:53:cc:cd:3a:15:
         99:20:d9:b5:8e:bd:97:6f:72:ca:08:33:64:4e:1f:fd:7f:82:
         4e:9c:9f:f1:11:4b:5f:65:a3:0e:6e:58:ae:e2:7d:1c:64:e3:
         f6:2f:3f:89:92:a3:cd:02:04:b5:3e:ac:d2:89:b9:81:95:fe:
         24:7d:14:ab:d3:47:8a:01:6c:72:59:68:68:d4:8e:10:34:32:
         d2:ee:f5:dc:b0:0e:c6:1d:f0:d2:47:92:be:96:5f:46:90:79:
         78:69:ab:68:19:0c:0f:70:3e:0a:14:d1:14:c0:e5:bd:87:96:
         fc:68:34:09:3b:35:58:6b:1f:49:a4:5d:93:73:aa:b6:6f:3f:
         41:0c:c3:f3:5e:32:06:d5:ce:64:b1:a1:fe:c5:98:76:4c:fc:
         0e:a4:ca:59:67:49:d2:fc:5b:33:a0:b7:3d:61:93:5f:7f:d4:
         dc:67:fb:2f:b8:c1:dd:4d:a8:4a:dc:7e:eb:eb:96:26:df:44:
         57:5a:da:b0:54:f7:ac:38:d2:6f:22:f7:8f:44:76:d1:4b:e2:
         cd:12:1d:40:ae:14:d6:f7:c7:b9:ef:34:40:26:0f:d8:aa:02:
         57:3c:31:d8:23:59:cb:23:c5:b8:72:6e:79:72:20:40:52:05:
         3d:18:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:58:10 2024 by rpki-client on console-ams.rpki-client.org