Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a8d82b3-7c55-3ec1-b0d5-fb355270d47f.roa
File:                     8a8d82b3-7c55-3ec1-b0d5-fb355270d47f.roa (raw, json)
Hash identifier:          g5ANnJ/issqT5SnRCZPqSe05M9cEHuIBRwl95krWakk=
Subject key identifier:   AF:26:E9:D0:EA:D9:B3:02:0A:04:79:BE:94:E4:30:02:70:7E:7F:BF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452393AA255B2CC08E59FC03A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a8d82b3-7c55-3ec1-b0d5-fb355270d47f.roa
Signing time:             Fri 08 Mar 2024 11:36:54 +0000
ROA not before:           Fri 08 Mar 2024 11:36:54 +0000
ROA not after:            Thu 06 Jun 2024 10:36:54 +0000
asID:                     20940
IP address blocks:        2600:1400:1800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:93:aa:25:5b:2c:c0:8e:59:fc:03:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 11:36:54 2024 GMT
            Not After : Jun  6 10:36:54 2024 GMT
        Subject: CN=b785edf8-3109-47c4-a385-e2a34698b867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:06:c4:16:c1:f7:d8:d0:14:8b:0c:83:86:2c:
                    bc:47:4c:aa:b9:59:cd:aa:a9:a0:da:64:d0:21:91:
                    92:8f:82:2c:21:1f:d9:94:3a:94:1d:94:a3:0c:06:
                    2d:7c:00:5b:43:bb:60:6a:eb:72:56:e5:a3:e6:5c:
                    61:70:de:4e:41:2c:73:1d:16:1f:af:b3:23:f8:83:
                    1b:5a:45:67:f8:49:40:04:93:83:fb:61:e8:ed:2a:
                    82:e2:9f:a2:72:e8:95:06:ee:b6:6b:af:b5:cd:3a:
                    89:e0:94:88:ce:75:0c:43:2e:57:48:b7:f7:ca:c2:
                    77:58:08:80:60:0b:d7:ef:24:09:45:00:70:d7:6e:
                    98:88:31:f1:84:8a:83:02:56:c6:55:ab:88:55:04:
                    6c:93:55:6d:50:c0:dd:11:3b:a6:4f:87:c4:17:33:
                    57:96:4f:61:7b:ad:6b:47:c4:42:ae:f8:e9:68:04:
                    f1:b4:c1:e3:dd:33:cf:91:f9:aa:f3:81:73:8c:20:
                    f5:c5:af:5e:b0:13:09:5d:90:8b:97:65:b4:2a:dd:
                    b0:37:8f:91:e4:bc:f8:5b:c6:5e:1a:3c:7c:7f:ec:
                    09:3b:7e:d7:85:a8:dc:1c:b8:1b:f6:34:74:41:ba:
                    10:69:74:54:6d:b0:2b:af:04:1d:db:cc:e4:a6:77:
                    31:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:26:E9:D0:EA:D9:B3:02:0A:04:79:BE:94:E4:30:02:70:7E:7F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a8d82b3-7c55-3ec1-b0d5-fb355270d47f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1400:1800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4c:24:b5:55:1f:7f:c6:a6:2e:55:52:17:0e:17:d2:d7:52:
         e2:4f:36:7b:67:58:e4:d2:c8:ae:9e:4e:ba:a1:57:21:ee:44:
         00:a4:dd:6f:08:20:a4:89:93:11:b0:e4:20:77:c6:ce:2b:25:
         2c:34:ee:57:4c:fc:bf:50:8a:98:08:2c:68:82:d6:31:68:79:
         74:ba:65:12:f4:91:c1:7d:6b:1e:c7:97:77:a1:4e:ca:56:df:
         45:45:63:c8:76:a3:c9:39:75:23:d5:b5:92:bf:79:af:bf:3f:
         3a:a6:3e:ef:df:a9:e6:53:b7:17:7d:7e:94:03:37:6e:68:af:
         94:42:87:2a:14:41:f1:56:2c:bd:4f:39:6f:73:39:d1:de:85:
         95:f5:ce:e2:9e:73:32:dc:7e:55:0f:e6:60:a9:81:ab:79:18:
         a3:e3:42:99:c6:48:87:b9:1e:ef:67:f2:93:2a:04:68:a6:f7:
         e9:16:94:61:68:42:22:34:eb:6f:2d:e9:84:10:22:72:46:ea:
         7e:8b:4c:14:cd:96:65:49:75:55:6d:d8:a6:61:63:96:ab:3e:
         9f:69:9c:8f:55:d7:2f:73:01:21:de:38:cb:38:f2:b0:44:df:
         43:22:f1:0b:f5:25:91:fc:ae:e2:76:49:e9:79:41:c3:60:35:
         c5:1d:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:16 2024 by rpki-client on console-fra.rpki-client.org