Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/964e02a3-82bd-3773-aa1a-471566eaa8a2.roa
File:                     964e02a3-82bd-3773-aa1a-471566eaa8a2.roa (raw, json)
Hash identifier:          IzP3eYFb/3pDGW8b0tvS1LiyZixTnJgaRO2tocxjZwk=
Subject key identifier:   5F:9A:FA:B1:A3:22:1F:82:9B:91:73:8A:2F:3C:E3:36:C2:99:1C:36
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452EB49C0134D0E6058D881280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/964e02a3-82bd-3773-aa1a-471566eaa8a2.roa
Signing time:             Tue 12 Mar 2024 11:17:10 +0000
ROA not before:           Tue 12 Mar 2024 11:17:10 +0000
ROA not after:            Mon 10 Jun 2024 11:17:10 +0000
asID:                     24319
IP address blocks:        2600:1417:61::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:b4:9c:01:34:d0:e6:05:8d:88:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 11:17:10 2024 GMT
            Not After : Jun 10 11:17:10 2024 GMT
        Subject: CN=b6a1621f-5fd4-4e7c-ae5f-40041bc00594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:cf:5c:b5:a2:f6:d1:07:20:d9:a4:a8:ef:
                    06:4b:9c:3f:0d:ce:b0:ac:25:a1:ca:ca:34:eb:5d:
                    80:94:89:bf:d2:f1:74:52:ee:60:45:6b:58:41:b0:
                    dd:8c:72:8a:3e:f3:09:6a:f2:83:bf:41:c4:53:4d:
                    51:18:a4:ca:a7:d5:ec:ba:d6:6f:30:f5:6f:db:74:
                    33:29:40:c3:b7:cf:07:79:f9:ee:09:67:d9:8d:4f:
                    0b:0b:4c:b3:b6:27:96:71:11:a1:34:c9:0a:af:af:
                    bc:1a:23:85:cd:dd:ac:46:4e:23:c6:e8:f9:ff:8c:
                    b3:a0:47:db:1e:36:13:ee:8e:4f:6f:84:0b:f2:74:
                    73:87:57:8c:cc:66:ca:69:d7:ab:5a:6e:84:c6:3e:
                    e3:7d:48:af:1e:49:be:90:1c:5f:1e:f7:23:57:60:
                    d9:88:90:b3:19:24:ca:aa:f5:47:13:b0:e5:9b:60:
                    94:6b:fe:eb:57:cf:b6:3c:d3:8a:d5:c7:81:05:bf:
                    96:d7:a6:84:22:6c:d2:ad:4f:4a:88:a5:b5:bc:1f:
                    06:c7:b3:b8:cd:ca:4e:fb:11:99:7e:54:26:cf:1a:
                    d2:46:c1:02:27:6d:88:58:fd:86:e7:d3:f8:9a:16:
                    b0:31:9f:1d:0e:da:2a:35:1e:32:f0:85:7d:a6:5e:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9A:FA:B1:A3:22:1F:82:9B:91:73:8A:2F:3C:E3:36:C2:99:1C:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/964e02a3-82bd-3773-aa1a-471566eaa8a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:61::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:42:41:f0:84:db:ab:a7:86:62:d5:0f:9c:67:e4:d6:7d:0f:
         a9:46:d3:d3:a0:02:ea:3a:8f:77:db:4a:4a:7f:ae:9e:59:61:
         b0:cf:44:d9:fc:d2:90:68:fa:bd:54:5c:a5:dc:a4:f8:e3:54:
         de:08:2f:92:32:a3:69:ee:e5:03:f2:98:b9:12:6a:f3:72:4f:
         7b:12:32:df:17:c7:8f:2f:9a:63:dd:41:54:87:02:2d:a7:46:
         c9:e5:a0:ee:dc:ed:48:a6:57:22:14:f8:61:ea:0f:f1:22:60:
         9d:0f:5b:6b:cd:8a:bf:83:5d:95:24:76:47:a9:02:0a:d4:e6:
         e1:57:7f:19:12:35:c6:8b:bd:87:ee:a2:8a:54:b3:9e:89:97:
         68:b7:72:df:25:00:4c:e7:61:6a:3e:64:6b:6d:05:fe:4c:66:
         44:e8:1c:94:b3:37:a2:02:5b:5b:90:e3:07:b0:7a:eb:e2:0c:
         fb:9d:8c:42:d5:45:eb:1f:1c:8d:a8:b9:bf:39:ba:e0:e6:2c:
         21:03:18:e2:47:74:ee:3d:4d:b7:05:79:61:1d:54:d5:a2:11:
         dd:47:6b:85:8a:1d:c8:c3:1a:f0:30:a1:fb:5f:49:ef:fd:3f:
         48:d2:18:c8:c8:b8:31:29:68:92:4a:4e:dc:7c:29:6d:86:7a:
         91:82:66:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:36:33 2024 by rpki-client on console-ams.rpki-client.org