Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/19efe00d-a476-38cc-87ba-1f7c9ed736aa.roa
File:                     19efe00d-a476-38cc-87ba-1f7c9ed736aa.roa (raw, json)
Hash identifier:          T1IvA+dVROnY0Ue9pb+o6swTnxpYgNyNUgDgFrCtzO0=
Subject key identifier:   12:4F:C9:0C:14:43:C3:5E:85:2B:DC:EC:8B:B2:23:57:2C:1E:2A:B5
Certificate issuer:       /CN=a97ec683-752f-402c-9901-cad9c007976f
Certificate serial:       010D0C9F432858451A159090E3BDA9EB3F089000
Authority key identifier: D4:79:40:E9:8A:39:8D:AE:C3:51:4B:CE:C9:9C:1C:9B:92:CF:AA:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/19efe00d-a476-38cc-87ba-1f7c9ed736aa.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2620:b6:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:90:90:e3:bd:a9:eb:3f:08:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97ec683-752f-402c-9901-cad9c007976f
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=56f9deef-684f-47ef-94df-e5f8b9337e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8e:a4:fa:33:dd:22:79:d1:3a:4e:8d:f9:50:
                    5f:68:65:ad:78:f8:e8:c0:b6:d2:7c:e1:3c:bd:12:
                    91:80:1a:9f:02:81:06:4e:6a:b7:12:88:96:e8:36:
                    64:9c:88:a2:67:79:e5:ff:cc:6c:89:01:83:30:42:
                    a2:ab:64:28:12:a8:fb:af:3c:38:d3:06:04:59:c8:
                    bb:65:be:8f:20:35:46:66:cb:ad:a7:c8:b2:d5:92:
                    79:a8:c9:f3:3b:c6:4f:f4:9d:fc:53:59:84:c5:9a:
                    51:bb:e1:a6:3c:b8:04:a0:7c:c8:c7:da:52:81:41:
                    cd:63:30:31:b7:63:8f:35:56:3e:49:ad:31:c1:f4:
                    cf:a5:45:58:92:2f:ee:06:d9:77:c5:8e:a2:6c:09:
                    f8:78:59:86:16:de:88:03:cd:65:3b:88:10:67:ce:
                    17:32:da:67:04:8b:fb:0f:59:1b:3f:7d:3c:eb:91:
                    86:3a:4b:c2:aa:a6:01:0f:0e:18:18:74:1f:dd:82:
                    45:37:d7:1b:ea:39:61:d7:b1:72:03:7f:a2:fe:a4:
                    0d:0c:d6:57:c1:80:f8:34:55:f4:c1:6c:0b:52:86:
                    10:ad:5c:6f:f7:fc:84:2d:49:7a:3d:ab:87:4f:69:
                    53:c9:75:dd:31:85:61:84:9b:31:08:97:13:6c:8c:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4F:C9:0C:14:43:C3:5E:85:2B:DC:EC:8B:B2:23:57:2C:1E:2A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/19efe00d-a476-38cc-87ba-1f7c9ed736aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:79:40:E9:8A:39:8D:AE:C3:51:4B:CE:C9:9C:1C:9B:92:CF:AA:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b6:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:08:14:9d:cf:72:cb:66:cb:bc:3c:f0:f2:ff:ec:eb:0e:12:
         06:22:17:c0:8d:9f:78:34:c7:11:69:74:08:c8:76:c2:77:85:
         17:fd:e2:1c:ff:5f:09:70:60:e4:32:38:94:f1:99:28:f5:48:
         b4:99:a1:ef:20:7e:79:e3:2b:d7:c0:fe:f3:c6:38:ef:f8:0e:
         e9:ed:8d:67:96:f0:58:9d:01:b0:66:eb:2e:3e:e5:87:9e:79:
         17:6c:9e:6a:56:fd:7f:40:49:37:a6:40:55:b4:0c:59:d9:79:
         19:37:52:d8:3b:e0:16:33:a0:fb:96:88:88:65:68:36:53:df:
         9a:45:0a:75:3e:69:51:04:7b:39:38:d5:ce:36:ef:34:05:69:
         20:b8:8b:95:54:d8:4a:ad:07:cf:8a:44:a6:f5:7a:d5:da:46:
         88:ab:1c:c6:69:8a:bb:c2:16:2d:29:b3:48:28:6d:0f:e6:16:
         02:6f:b0:82:6b:77:4b:c5:cc:d3:af:1d:ea:f7:b7:27:f3:6b:
         ce:cb:1e:1c:c7:88:a1:31:c4:63:97:06:4f:25:48:15:47:c8:
         82:ff:82:3d:e0:fc:59:f6:e5:8d:66:3e:5f:b7:94:61:12:3a:
         b3:86:77:8a:2b:13:db:09:9d:3e:25:04:2e:d5:03:86:99:55:
         44:00:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:01:30 2024 by rpki-client on console-ams.rpki-client.org