Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/8df85303-0c83-3e75-99ff-69c78e7ad9e4.roa
File:                     8df85303-0c83-3e75-99ff-69c78e7ad9e4.roa (raw, json)
Hash identifier:          gP5uKy6KWB0k/AQnjgEmRmCtCChNMeJMZgpc+OACT7E=
Subject key identifier:   DE:45:0E:E5:C1:D5:57:78:7E:3E:61:0C:78:97:92:D0:6E:C6:CF:F4
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F432858452EE7E4181BE419B87A820630
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/8df85303-0c83-3e75-99ff-69c78e7ad9e4.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     209181
IP address blocks:        2607:6b80:6f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:e4:18:1b:e4:19:b8:7a:82:06:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=408c3807-8a29-48a7-8cec-a013b60b0a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:23:69:b9:cc:52:43:4c:55:d8:c3:15:42:
                    83:f8:4c:06:91:e4:8b:18:47:cc:3f:bd:d9:44:00:
                    92:da:7d:76:4d:a9:38:28:0c:4a:2f:d4:db:b9:ab:
                    f2:a6:e6:82:7f:3a:94:f1:fe:f4:d1:a1:72:4d:44:
                    32:5b:fa:39:ad:1b:cf:ec:17:fc:1c:3a:54:f4:95:
                    cf:68:94:22:79:d1:03:5a:9d:f4:19:2e:de:02:20:
                    86:ff:9b:f3:f9:a5:89:2f:2c:96:df:94:4f:c7:fe:
                    05:27:dd:33:97:21:25:ac:8b:f9:35:a5:e5:f7:10:
                    27:25:b1:91:03:57:b1:f9:eb:5d:cd:62:de:f5:57:
                    77:b4:11:71:14:f0:a5:75:89:4d:09:fc:44:ad:54:
                    0b:4d:b3:6f:0e:9b:16:96:c5:02:9e:bb:14:2b:44:
                    52:18:42:16:4b:ad:83:44:ce:a8:90:81:06:59:77:
                    55:99:17:84:05:42:ed:b1:db:3d:40:dc:a8:74:cb:
                    e8:e4:07:7d:8c:20:4f:b1:50:40:62:8e:ac:af:18:
                    19:94:d9:04:87:02:16:45:97:ef:d0:98:83:b7:a2:
                    47:f9:42:92:bb:8b:51:23:fe:f5:dc:75:70:d1:9e:
                    e5:cc:63:c0:75:e2:ea:bf:c1:f5:f7:98:95:00:db:
                    28:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:45:0E:E5:C1:D5:57:78:7E:3E:61:0C:78:97:92:D0:6E:C6:CF:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/8df85303-0c83-3e75-99ff-69c78e7ad9e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:6f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:92:31:fd:99:5e:d2:c3:5f:16:34:26:2a:02:9f:37:e7:42:
         f8:5a:5f:03:6b:fa:85:0b:90:fc:8d:81:8f:3c:f6:c0:1f:ae:
         2b:2c:14:b5:4e:94:ed:c9:1f:89:0e:f9:8a:e4:77:3c:0b:dc:
         41:be:e1:cc:28:0d:bc:6b:28:9e:7f:08:ec:ee:e3:ea:0b:63:
         b6:3d:3b:40:35:f2:3b:d6:42:37:36:d8:ad:6a:db:40:1c:9a:
         c1:38:41:af:b5:32:a9:c0:2b:48:79:79:d0:f8:c9:22:bc:aa:
         db:8c:f4:1d:21:bc:cc:2e:bb:d1:c6:cf:5d:67:1c:42:ec:34:
         84:9d:d3:90:fd:11:46:0e:dd:ad:d9:51:a9:f6:88:db:7f:9a:
         42:7f:50:20:50:6e:18:8d:57:88:ca:8d:bf:44:a3:63:7a:f9:
         fe:4a:e7:65:33:8f:c1:a9:ba:61:9d:61:36:ef:37:d6:fd:c5:
         74:19:04:1f:1b:54:ac:58:3a:0d:5e:b6:95:b4:2c:b0:ad:16:
         69:8c:61:a5:48:49:f8:05:5e:72:96:ad:28:03:52:ed:9a:64:
         94:34:27:45:37:29:3f:ca:10:0b:c4:ec:25:ec:c5:0a:3f:23:
         f2:32:a8:be:42:3a:13:32:f9:8a:a0:8d:62:4e:cb:6f:8d:8f:
         c9:0a:93:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:05:30 2024 by rpki-client on console-ams.rpki-client.org