Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/947a9a41-a370-34d5-9f58-5938dacbbf5f.roa
File:                     947a9a41-a370-34d5-9f58-5938dacbbf5f.roa (raw, json)
Hash identifier:          AlehqwKPx3wA9DKKLPed+VwEao71kpMTMlhfnWP4Hoo=
Subject key identifier:   BB:94:FD:0D:A0:77:C2:33:8B:43:9A:71:7F:CF:C5:09:F0:98:99:57
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584582A88950540ECBD3DE1DE120
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/947a9a41-a370-34d5-9f58-5938dacbbf5f.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     12222
IP address blocks:        2001:4878:c062::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:89:50:54:0e:cb:d3:de:1d:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=4c9cda02-b16d-4bc8-bfb4-938509036d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:fa:04:65:1a:90:ba:27:6e:17:3e:ae:e5:
                    6d:bb:14:c5:a4:3e:19:7f:15:76:dd:5f:af:70:45:
                    f2:a7:ee:88:76:9f:ac:c6:88:41:6b:2f:e4:02:0c:
                    51:00:bc:f2:4f:96:7c:ae:98:ff:5f:05:46:7f:8f:
                    fb:f9:8b:84:43:5b:ec:92:55:d8:56:1d:72:dc:d8:
                    a7:7d:94:6f:ae:02:7e:e8:36:0e:0e:0b:ad:d9:56:
                    67:cd:70:9e:fb:e1:52:05:0a:c9:43:05:db:3c:c0:
                    d2:58:48:87:06:2e:55:dc:85:9c:f5:0f:1a:c0:1d:
                    5e:b2:e8:46:a8:2e:7c:16:50:b2:92:15:be:d6:1d:
                    aa:b7:bc:a3:60:64:38:30:15:f6:34:58:8e:a5:d5:
                    a1:b9:ac:96:20:e0:34:8d:da:e2:ae:ee:53:2d:b0:
                    2f:73:e7:77:bc:6d:58:76:7f:d4:02:e4:a6:74:1c:
                    01:9d:d9:1b:ef:45:a9:2b:be:27:4b:d0:d8:f1:a3:
                    c8:07:2f:11:8c:84:a3:c4:a6:2b:0f:99:f6:d6:08:
                    e1:8a:2a:cc:92:83:fc:b3:f1:13:ce:ca:42:00:37:
                    32:f8:78:6c:e0:03:10:22:de:16:f5:84:d5:fb:96:
                    af:c3:c7:f6:2d:63:af:09:77:29:8d:c7:c5:1d:72:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:94:FD:0D:A0:77:C2:33:8B:43:9A:71:7F:CF:C5:09:F0:98:99:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/947a9a41-a370-34d5-9f58-5938dacbbf5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c062::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:8e:ea:f7:c9:36:4c:f3:7a:30:fa:e8:a3:cb:17:27:38:d6:
         78:dd:5c:1c:c7:b1:b7:db:93:8f:eb:3f:96:da:c6:36:f8:4c:
         60:59:7c:20:3a:db:53:3d:7c:67:a8:33:10:55:13:27:12:d2:
         74:51:ff:96:33:a7:47:d2:d0:f0:cf:57:df:4d:7f:ce:1f:0f:
         3f:60:a0:a6:99:33:d9:86:db:5b:56:6b:49:20:ab:bb:c3:56:
         6a:fe:90:57:f4:e6:fa:b3:fe:c5:52:fe:0a:96:e3:60:ba:aa:
         3f:66:b6:ca:96:0a:97:dc:7d:85:47:ec:35:0a:93:b1:d7:23:
         b6:8a:04:79:0a:4d:ae:33:91:9d:00:e4:c3:bc:f9:9d:71:4b:
         b4:0d:09:93:56:61:cd:b1:9a:58:08:f8:0a:86:02:0e:21:c5:
         39:f4:ed:af:2f:45:5a:01:ad:96:67:75:89:ed:1f:bb:14:d4:
         d5:e1:e5:ba:8d:79:7f:5b:ea:75:f5:ea:0a:1b:d2:71:42:40:
         0c:79:02:78:73:c5:46:77:22:0c:53:14:66:87:59:f5:49:50:
         f3:9a:d5:bb:b4:c7:50:8d:7a:72:25:d4:8c:f4:f8:fe:f8:10:
         6a:dd:18:ca:e2:b0:b3:ca:b2:86:6b:e8:47:2e:88:23:af:15:
         3b:c1:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:13:09 2024 by rpki-client on console-fra.rpki-client.org