Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894c2056-e2e2-3940-b1f8-91e29f89c34c.roa
File:                     894c2056-e2e2-3940-b1f8-91e29f89c34c.roa (raw, json)
Hash identifier:          RNzrVut7I8PpBsH8/70iMBG/F/32JKsrWCxwNZ8aEzY=
Subject key identifier:   C7:13:D3:CF:95:4A:A2:3F:4A:79:65:87:0D:1C:93:28:A0:38:6F:4D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452BD798ECC00B943AE02AE4F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894c2056-e2e2-3940-b1f8-91e29f89c34c.roa
Signing time:             Mon 11 Mar 2024 10:40:14 +0000
ROA not before:           Mon 11 Mar 2024 10:40:14 +0000
ROA not after:            Sun 09 Jun 2024 10:40:14 +0000
asID:                     20940
IP address blocks:        2600:1488:a003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2b:d7:98:ec:c0:0b:94:3a:e0:2a:e4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 10:40:14 2024 GMT
            Not After : Jun  9 10:40:14 2024 GMT
        Subject: CN=f70e407f-5024-4b40-beae-448ce78a2500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:26:fe:6a:10:a4:f0:73:01:61:22:95:ed:fe:
                    a1:ae:e9:22:48:c2:79:0f:5c:ce:72:8b:3e:1c:41:
                    3d:88:47:fc:e8:34:35:5f:50:c0:2d:40:ad:cc:d7:
                    b8:00:4f:83:98:b9:48:a2:3c:7e:68:ea:90:ba:ab:
                    35:b8:ac:1d:95:99:d3:99:35:6d:20:70:96:22:89:
                    ce:87:2f:86:69:fb:6e:14:d3:48:3b:8b:01:a9:d7:
                    8c:87:a5:88:48:68:23:1f:de:6f:8c:30:21:2b:e1:
                    31:2c:b9:66:54:9e:73:d1:74:87:a6:af:2a:ba:18:
                    f4:57:c8:97:96:14:53:11:4d:93:34:0a:7b:a0:7c:
                    25:b2:b3:d8:00:9d:21:21:5a:8f:81:fa:97:c7:88:
                    e9:2e:c5:a7:7b:ee:97:3f:76:ff:9f:82:d8:66:cc:
                    de:dc:b1:66:46:53:e1:dc:13:c4:e0:d7:40:d1:b9:
                    8d:7d:33:49:ea:0b:bd:d0:cf:03:b1:19:df:e3:32:
                    3b:37:3e:95:32:0b:af:d2:cf:f0:90:27:70:50:18:
                    0c:30:5b:9a:a3:08:80:a7:3d:5b:24:52:9c:18:30:
                    cb:5c:42:62:32:04:23:b2:97:96:df:3b:97:2d:c9:
                    09:d2:a3:5a:16:9d:ae:45:64:f5:2d:c9:95:a4:d2:
                    44:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:13:D3:CF:95:4A:A2:3F:4A:79:65:87:0D:1C:93:28:A0:38:6F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894c2056-e2e2-3940-b1f8-91e29f89c34c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:a003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:d5:a2:0f:48:1a:89:68:1a:1b:93:8a:f2:a3:27:86:2e:f3:
         73:89:ab:ed:fe:09:c5:a7:8a:20:35:ed:27:c4:85:0d:e8:4f:
         e2:44:df:27:df:1b:12:0f:79:86:a1:e0:84:76:3d:9c:39:7c:
         20:7c:cc:09:4c:72:21:e9:6b:b8:18:d8:75:64:25:22:70:c5:
         4d:14:bf:69:b4:5b:fc:1d:db:c0:bb:f1:9a:79:32:47:e1:30:
         d3:6f:5f:c2:4d:88:3f:29:50:e6:73:5a:7c:8f:d3:df:bd:92:
         80:b7:49:ce:41:8c:86:d2:39:f2:09:0a:b2:fa:ca:68:45:f8:
         57:ef:8b:31:fb:cf:d3:bb:5a:43:c3:6a:f6:76:1f:91:06:16:
         19:0d:f0:96:15:10:ea:9c:c2:ce:b6:bb:fb:1a:64:77:b3:23:
         47:57:59:14:a2:75:39:de:03:11:4e:26:6c:1d:29:9a:b1:55:
         8f:a9:eb:fa:d2:01:e1:a2:f4:7e:12:cc:e2:fb:fe:b6:8b:9d:
         55:57:79:b3:7c:f1:25:a7:68:22:fc:17:e8:2a:95:fc:f5:60:
         dd:f2:96:ed:42:86:08:14:b4:f0:33:13:dd:72:25:09:85:05:
         99:f6:4f:09:25:1b:23:f8:9b:4f:8a:0e:2c:7e:ca:4f:71:57:
         13:f8:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:56 2024 by rpki-client on console-fra.rpki-client.org