Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ca0726a6-82ac-3e80-9ca8-4c6fc5dbce67.roa
File:                     ca0726a6-82ac-3e80-9ca8-4c6fc5dbce67.roa (raw, json)
Hash identifier:          DVBNW7TlvnAmSzidZK7jfajBWK4ZkWLiObVmh+KbxZI=
Subject key identifier:   52:15:40:A2:2B:EF:94:24:05:05:D2:33:1A:5A:5E:B8:26:93:2A:F3
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858450D858B197B31BFCD6E7812C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ca0726a6-82ac-3e80-9ca8-4c6fc5dbce67.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     30103
IP address blocks:        2620:123:2005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:8b:19:7b:31:bf:cd:6e:78:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=0de33651-9c8c-4ab5-a5e9-6a637b29a43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:68:67:21:7e:d9:0e:b6:9d:68:19:b7:d5:
                    52:8b:1e:dd:63:87:45:e6:d7:8d:d9:24:d6:d9:bf:
                    45:f0:4b:8a:22:5c:6c:e7:f5:9f:62:c9:e0:41:53:
                    61:ae:d3:c0:3f:34:34:16:67:f3:2d:9c:c2:7a:39:
                    b2:bb:3c:7e:0a:f6:29:90:6f:4c:f8:cd:31:67:42:
                    6e:a7:80:af:7d:4a:d7:ed:8e:9c:03:72:d3:77:0b:
                    d8:58:f0:16:cb:ed:20:72:b6:28:62:db:a1:85:00:
                    1e:a8:d9:14:63:8e:35:65:51:3c:2d:6f:38:e0:ac:
                    31:94:d0:70:73:dc:ba:27:a7:2a:bd:02:fc:3f:11:
                    2a:c7:60:fe:8b:39:0c:e4:e7:dd:e5:75:93:0d:2c:
                    6e:72:b6:2b:76:4e:7d:72:34:cb:99:49:4f:ec:70:
                    d9:84:64:c1:d8:89:59:39:d8:c0:6e:0f:4c:ef:b6:
                    77:a7:02:bf:bf:5d:d6:59:f7:e0:f1:e0:e1:d1:49:
                    a6:09:79:07:41:87:55:bd:cb:29:d9:bd:d4:90:05:
                    c4:96:e8:6a:9a:04:2c:44:09:01:22:bf:da:c9:b2:
                    1e:59:82:a2:0d:06:1b:3c:7d:34:94:71:51:82:7f:
                    e1:48:fb:f4:39:57:ea:6b:e0:aa:35:89:a9:50:48:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:40:A2:2B:EF:94:24:05:05:D2:33:1A:5A:5E:B8:26:93:2A:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ca0726a6-82ac-3e80-9ca8-4c6fc5dbce67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a5:a6:86:e3:75:cb:36:8c:44:85:88:78:4d:71:51:09:d4:
         3a:e0:04:b5:64:a5:b3:37:3d:b1:09:48:35:60:26:41:8f:be:
         87:79:8c:bb:97:3b:99:78:a2:cf:d6:59:a8:6b:aa:95:45:9e:
         bd:e9:22:05:ba:47:e1:95:7a:c9:df:21:3c:da:16:28:c1:ac:
         a0:65:93:6c:9f:27:41:ed:70:93:07:f0:be:24:92:02:16:c8:
         be:58:e3:da:6a:23:d0:13:e4:7d:5d:ca:54:74:79:3d:9b:77:
         e7:94:bc:b4:13:9d:a6:9f:2a:0d:21:56:6a:00:b0:7a:9b:9c:
         bb:ca:ea:0e:b3:bc:21:3a:d4:1c:f9:76:70:db:c8:36:a5:83:
         20:b7:96:3c:58:32:12:b2:b3:66:d1:72:db:10:bb:49:4c:92:
         7a:55:d8:90:8c:d3:40:11:d6:a5:5e:da:9c:d0:b8:aa:ef:28:
         1f:b6:fe:43:02:78:03:81:b2:66:e0:0b:09:41:0c:ab:21:ad:
         1b:18:36:ea:e7:eb:fc:c9:7b:66:ae:40:c5:ae:36:ce:a6:c3:
         2f:56:d5:dd:16:21:69:69:7d:ec:11:cb:a9:87:5b:6f:49:69:
         62:b4:25:71:df:5f:30:f9:e4:67:ce:e4:02:e1:f9:8b:64:da:
         02:88:1f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:58:53 2024 by rpki-client on console-ams.rpki-client.org