Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bc5ab001-20f8-3dd4-875b-a1df9d060ee5.roa
File:                     bc5ab001-20f8-3dd4-875b-a1df9d060ee5.roa (raw, json)
Hash identifier:          bHlZ+Lwte6fSaCqzkZv3kLs8o7z+x7ICt1rnhCqDAF8=
Subject key identifier:   6E:C8:95:6F:37:75:DF:26:CD:30:05:83:19:E0:B3:5C:D8:3C:6E:1C
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285845E88E5EFA17856F37E17EF180
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bc5ab001-20f8-3dd4-875b-a1df9d060ee5.roa
Signing time:             Sat 18 May 2024 01:00:27 +0000
ROA not before:           Sat 18 May 2024 01:00:27 +0000
ROA not after:            Fri 16 Aug 2024 01:00:27 +0000
asID:                     396356
IP address blocks:        2607:6b80:47::/48 maxlen: 48
                          2607:6b80:48::/48 maxlen: 48
                          2607:6b80:44::/48 maxlen: 48
                          2607:6b80:45::/48 maxlen: 48
                          2607:6b80:4a::/48 maxlen: 48
                          2607:6b80:41::/48 maxlen: 48
                          2607:6b80:53::/48 maxlen: 48
                          2607:6b80:42::/48 maxlen: 48
                          2607:6b80:43::/48 maxlen: 48
                          2607:6b80:46::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e8:8e:5e:fa:17:85:6f:37:e1:7e:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: May 18 01:00:27 2024 GMT
            Not After : Aug 16 01:00:27 2024 GMT
        Subject: CN=ec96bd4c-e372-468e-977f-1105b6b89832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2f:11:e6:32:6a:91:fb:7e:fa:34:ae:63:b7:
                    ed:53:02:e6:6c:da:6c:53:8f:b0:2f:c1:4e:b1:bf:
                    4d:19:3c:b1:bf:f7:24:cb:86:25:83:b6:ef:d7:ab:
                    2f:22:cf:1f:78:d4:b5:ab:14:7f:28:ac:6b:1e:fa:
                    08:28:dd:b5:77:97:12:61:c9:38:a8:20:36:d8:72:
                    e2:c1:5b:a1:9f:94:3f:c6:a2:82:57:ca:51:f7:bd:
                    1e:31:d0:51:41:b1:9a:9b:88:66:25:67:ad:ec:47:
                    80:17:af:e2:ff:ea:9e:89:8e:90:da:9a:14:04:37:
                    43:73:ad:b9:0d:01:91:f0:7f:b6:45:99:26:aa:71:
                    7b:70:5e:52:3b:84:a6:37:fd:1e:00:12:e4:0f:ea:
                    f7:9e:06:db:14:0b:cc:c7:70:d8:ef:85:3d:70:13:
                    54:44:ed:78:b0:4e:61:44:47:e0:64:01:f1:d8:22:
                    92:4c:2e:c7:c0:f4:d6:da:6b:90:3d:29:92:bf:45:
                    87:d2:ac:7e:26:79:bd:ec:f6:4e:98:92:d0:ea:13:
                    3f:c8:e7:1e:22:28:9e:71:e9:ea:90:fa:53:d2:19:
                    6f:34:f5:e2:06:ff:5d:83:2b:f5:63:d3:85:aa:8b:
                    52:d9:62:6c:f3:1b:08:12:4b:ff:f7:44:2b:65:e7:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C8:95:6F:37:75:DF:26:CD:30:05:83:19:E0:B3:5C:D8:3C:6E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bc5ab001-20f8-3dd4-875b-a1df9d060ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:41::-2607:6b80:48:ffff:ffff:ffff:ffff:ffff
                  2607:6b80:4a::/48
                  2607:6b80:53::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7c:4a:57:56:c6:47:53:16:fa:f0:4e:d4:f7:24:42:e8:4f:
         8d:57:e4:cc:16:f8:8f:21:2f:09:c4:81:a0:0f:9d:ed:55:ab:
         50:c8:e0:a4:f5:f3:de:14:1d:67:77:20:1e:ab:2c:2d:f2:26:
         10:53:22:68:26:d8:3f:47:f6:3f:15:51:85:83:77:eb:1a:21:
         35:1b:dd:85:d9:31:ed:68:90:9f:0a:44:de:1a:be:81:31:6d:
         67:ea:87:f4:02:b4:bc:3f:a7:3b:f6:63:88:1b:d6:b0:41:0d:
         3f:b2:90:8d:bf:52:c0:25:b5:0e:13:ac:7d:be:17:5a:2b:60:
         7f:61:76:c2:a4:5c:ab:2a:f9:27:a5:24:87:77:93:fa:56:90:
         d9:43:8c:e6:7d:46:2e:03:81:fc:7b:59:c6:ea:91:44:8d:ca:
         89:52:90:de:e3:d6:80:8f:71:c2:10:ea:29:b8:df:5d:eb:6f:
         0f:61:9b:c2:84:a2:90:00:15:7e:00:e5:aa:c3:8b:57:03:40:
         ba:0d:68:10:ed:11:8e:9f:4e:85:af:70:9c:2b:e8:67:14:74:
         18:5c:20:6e:15:c4:44:10:f9:97:20:cb:08:d0:7c:16:7b:b1:
         69:69:25:36:9a:bb:1c:03:80:29:4b:a2:6d:85:2a:d4:e3:67:
         27:22:67:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:44:23 2024 by rpki-client on console-fra.rpki-client.org