Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/208befef-81e0-35bd-b5ca-73892691acbb.roa
File:                     208befef-81e0-35bd-b5ca-73892691acbb.roa (raw, json)
Hash identifier:          3CM5wqN7lhRni5BmPsZVPVwefGB9NmW1oN07CJgmQdg=
Subject key identifier:   4D:0C:90:D5:52:82:7A:23:9D:EF:9D:1B:29:27:C4:E1:43:0C:CC:E0
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F43285845A428D12E37BE1B8BD0E6D380
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/208befef-81e0-35bd-b5ca-73892691acbb.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     393336
IP address blocks:        2602:ffd1::/48 maxlen: 48
                          2602:ffd1:2::/48 maxlen: 48
                          2602:ffd1:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:d1:2e:37:be:1b:8b:d0:e6:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=03056b2c-daf4-484d-9402-81db3a3040d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:1f:da:43:78:24:40:83:d8:db:3a:c3:33:
                    4a:79:99:2d:f5:b8:70:5e:5f:3b:19:f3:bf:04:62:
                    8d:f3:a0:5a:98:16:0a:78:6e:a0:d1:51:23:9d:32:
                    cd:f3:76:7a:43:6c:11:d1:c4:6d:27:e3:f2:3f:19:
                    40:24:9b:01:38:58:e3:29:4d:1d:7c:1a:28:ff:ca:
                    3c:da:73:1c:d8:a5:e1:77:fc:4b:4c:7a:68:e3:fe:
                    76:09:5e:68:d4:68:f4:cc:f2:50:71:ab:80:78:19:
                    24:12:5c:64:68:f2:45:b2:f9:80:b6:a7:f3:a1:ee:
                    45:99:91:d0:f3:3a:98:f2:4e:c8:2f:fb:01:e7:02:
                    fb:4d:84:8a:db:02:f2:1c:d6:c3:18:08:12:e4:b1:
                    e9:90:e6:38:a2:af:c1:c6:0c:05:26:5a:01:fb:56:
                    7d:9e:ce:e1:76:72:81:c7:5e:03:29:2f:b6:18:94:
                    a5:d4:66:18:99:8c:0c:85:2a:1b:2a:50:a2:22:f1:
                    2f:d0:f0:5b:c6:49:a7:09:a8:ce:92:8a:b5:0f:d2:
                    69:73:22:a5:bd:6f:72:a8:b7:b2:74:a8:dd:b3:6f:
                    ec:64:4a:bf:4f:8b:66:4d:8b:5e:33:52:e9:59:bd:
                    0c:5e:00:e0:dc:c7:c7:e4:84:fd:08:bf:ea:29:1b:
                    f4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0C:90:D5:52:82:7A:23:9D:EF:9D:1B:29:27:C4:E1:43:0C:CC:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/208befef-81e0-35bd-b5ca-73892691acbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffd1::/48
                  2602:ffd1:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:5f:b3:e6:cd:80:ef:26:58:8c:cd:08:a9:48:0a:9f:7f:73:
         1d:d9:74:5f:d6:48:19:7a:d5:37:2b:c5:82:ee:ba:e8:8a:8d:
         fd:1d:e4:6c:fb:86:8d:d6:6c:cc:93:ce:dc:4e:ff:d0:01:25:
         5c:3b:44:da:44:40:82:2a:f4:c4:9d:4f:43:ad:65:4d:55:10:
         b9:a9:23:20:15:b3:47:98:3c:85:7a:78:f5:0a:f9:8a:4a:37:
         ba:8c:cb:9e:44:4a:ee:98:64:7d:60:91:57:69:62:c9:e3:88:
         47:cf:97:89:f6:7a:a2:cd:ac:22:1a:d4:76:fb:b7:60:d9:27:
         b8:08:27:d1:47:03:6d:fe:68:6f:4c:70:bf:c3:d2:37:72:f1:
         7f:90:8f:6e:a0:6a:74:23:f1:e0:37:e9:39:03:03:ab:1a:05:
         88:15:23:a5:12:2f:06:4c:a2:3f:16:bd:7f:86:f9:62:05:8f:
         f3:96:48:65:77:ef:45:dc:02:d6:e7:ac:53:a1:29:88:da:65:
         be:6e:a7:78:51:62:4a:f1:93:1c:95:d5:53:ef:c2:4c:9d:ac:
         01:9b:cc:92:4e:d1:a1:9c:93:c9:6e:83:48:f1:85:50:0d:cb:
         d7:c2:16:3b:0f:9b:9f:62:fe:b5:e6:20:f0:4a:37:d8:ca:d5:
         11:ba:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 10:16:28 2024 by rpki-client on console-ams.rpki-client.org