Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd637946-c570-3823-965a-0c9f709ee183.roa
File:                     dd637946-c570-3823-965a-0c9f709ee183.roa (raw, json)
Hash identifier:          CIkQyLc9aD7eRCsd4+LkCBcuhYO2sPjFdN16PbOkGDQ=
Subject key identifier:   66:53:6A:82:02:69:FA:93:4A:48:8B:32:9F:A1:11:76:38:B3:66:4A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858457FDDE45A6C6DF483E1599280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd637946-c570-3823-965a-0c9f709ee183.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     12222
IP address blocks:        2001:4878:a259::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:e4:5a:6c:6d:f4:83:e1:59:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=3ade27e8-1556-4125-8f89-9b1a0437be3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:c1:99:5c:10:04:50:06:58:c6:0e:34:01:
                    db:bd:3f:9e:0e:fc:c3:38:f3:6f:b8:1d:0d:9d:24:
                    63:d9:bb:de:87:b2:32:13:0a:f1:da:6d:de:f5:c3:
                    88:cf:0b:ff:ec:be:14:52:73:42:41:92:77:38:86:
                    8e:6f:37:d5:19:aa:d0:ea:60:9c:fd:74:6d:64:f8:
                    12:f4:c1:78:2b:ce:8e:a2:37:b1:08:10:d9:eb:4b:
                    99:9d:75:d7:cc:e3:85:a9:e7:f0:b4:af:c0:8c:77:
                    71:08:1d:4c:b1:db:67:17:4b:b5:54:e0:dc:3e:9e:
                    f5:55:26:4c:1b:b1:32:fd:7a:06:fb:f3:17:23:1e:
                    8a:8c:d8:ea:a7:ab:af:b5:a3:b6:53:25:65:07:b8:
                    6f:0e:0c:00:b5:d8:58:48:3b:2e:16:67:02:c1:c2:
                    ce:c0:1f:12:fd:3f:b3:4a:1d:6c:a6:ab:32:82:18:
                    56:82:62:39:13:37:69:31:4a:6d:68:25:4b:16:3e:
                    77:da:7b:56:2e:1c:48:b8:5f:8f:7a:65:f6:7c:d5:
                    0b:98:2b:96:b7:9d:64:fb:67:ea:6c:69:9e:53:22:
                    97:95:1a:3a:52:4c:1a:95:74:c4:72:2e:43:dd:aa:
                    8f:0a:e8:8f:8b:bc:c8:9f:d7:02:e1:a0:e1:72:85:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:53:6A:82:02:69:FA:93:4A:48:8B:32:9F:A1:11:76:38:B3:66:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd637946-c570-3823-965a-0c9f709ee183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:a259::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e5:7b:12:d8:d6:97:26:cc:09:22:67:20:06:d8:a0:19:0e:
         4a:09:49:a8:eb:94:fe:12:d5:12:16:2f:7c:b1:8c:fa:fc:0e:
         62:20:5b:a0:14:0a:22:f2:e0:c4:8b:85:a9:73:4c:5f:f5:55:
         7e:c0:d8:38:eb:7b:f6:4c:89:67:40:6a:09:68:39:c5:6c:5d:
         8d:08:9a:b4:2c:c7:ca:c8:bf:11:72:81:5a:59:fa:27:69:40:
         7f:ac:4d:42:b8:03:9a:08:44:e5:ed:9f:8c:2a:de:2d:f8:9a:
         0f:66:ae:de:d5:46:7e:25:ff:dd:1a:93:3e:89:8f:56:76:c1:
         d5:80:4b:c5:06:2f:6c:62:f1:70:22:13:e6:95:c2:2e:fc:e8:
         9a:60:9f:55:c6:3b:57:6f:eb:e5:a1:4c:c7:50:f7:6a:3f:6e:
         fd:7f:9d:fe:8f:9c:1c:7b:f8:e3:cf:d4:ac:08:b2:66:78:5b:
         be:3d:24:d9:79:a0:44:5d:c9:33:a7:57:02:26:a8:37:62:8f:
         c8:eb:8e:c8:7f:a1:ae:3c:30:e8:ac:ce:66:99:4e:b9:9d:70:
         00:d6:88:08:0c:6f:09:98:d9:88:1f:05:1a:82:a2:56:b3:40:
         a5:98:55:7e:18:7c:bd:8a:97:e6:74:00:62:51:a1:d2:99:6e:
         84:91:b4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:42 2024 by rpki-client on console-ams.rpki-client.org