Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b1e75ac2-bce3-37cf-ae4d-e7f373871433.roa
File:                     b1e75ac2-bce3-37cf-ae4d-e7f373871433.roa (raw, json)
Hash identifier:          SjRCL1XS4dDJBzsHPGHM1Q9M9dluFtt0LaLCEqZJ/Ps=
Subject key identifier:   12:46:2F:54:50:2F:98:F2:6F:03:14:0E:80:C1:FB:6E:21:B5:3D:BD
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F43285844DCAA7DCDFA0E38E5DD428180
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b1e75ac2-bce3-37cf-ae4d-e7f373871433.roa
Signing time:             Mon 12 Feb 2024 02:00:25 +0000
ROA not before:           Mon 12 Feb 2024 02:00:25 +0000
ROA not after:            Sun 12 May 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        2606:9c40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:dc:aa:7d:cd:fa:0e:38:e5:dd:42:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Feb 12 02:00:25 2024 GMT
            Not After : May 12 01:00:25 2024 GMT
        Subject: CN=2fe92c4a-4d68-4f03-a106-713616624987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:8c:96:32:7f:c7:94:71:42:35:6f:be:81:
                    95:1d:98:93:e2:a5:07:02:21:31:22:e6:28:ca:a7:
                    2c:2c:61:3d:ce:69:e1:d3:fe:ad:ac:bb:6f:0c:af:
                    e7:05:19:f7:00:a2:0f:c7:f6:c9:8e:30:db:07:17:
                    3f:a4:89:b5:61:3f:68:92:84:ba:94:de:9b:3d:6e:
                    ce:6f:43:f4:aa:c4:76:1b:44:65:f8:dd:2d:83:2b:
                    94:32:44:7d:fc:f0:eb:9c:2f:41:93:2f:c0:53:81:
                    46:f3:09:54:12:0b:68:81:58:c5:d4:18:de:75:95:
                    8b:f7:b7:2a:54:94:fb:d1:33:af:b8:66:bb:0a:c5:
                    15:6e:16:73:50:62:77:d3:f7:b5:35:5b:ba:0b:59:
                    6d:0a:22:c9:11:35:cf:cb:98:1f:0c:96:12:39:6b:
                    ad:bd:1c:ae:c4:20:a1:6a:58:3c:8c:d0:5a:35:ec:
                    d3:f4:f3:73:4a:9c:ec:c9:1f:ba:7e:ea:06:ea:92:
                    86:98:b1:d6:f5:c2:b4:70:82:f3:c9:32:18:aa:58:
                    dd:72:e1:38:c2:aa:e0:66:6c:7f:32:b9:e3:89:58:
                    51:e3:d3:9d:6e:9d:d9:7e:2d:8b:48:53:87:59:6b:
                    23:59:2f:59:03:41:07:c5:25:87:ce:00:db:8e:fc:
                    ec:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:46:2F:54:50:2F:98:F2:6F:03:14:0E:80:C1:FB:6E:21:B5:3D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b1e75ac2-bce3-37cf-ae4d-e7f373871433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d6:a5:dd:7e:1e:b2:ec:16:10:e0:c6:72:1d:05:74:59:95:
         67:54:bf:94:57:0d:32:aa:a1:fc:4d:bd:52:4a:1e:dd:8e:ca:
         02:13:e1:ed:08:45:3f:94:f4:1f:5a:53:67:96:90:bd:9c:17:
         ee:e7:3d:57:67:0a:b2:62:72:05:59:00:69:f3:01:cd:8f:5d:
         b9:41:b7:23:d7:62:3b:71:f6:65:23:0a:36:c1:13:3e:2b:60:
         24:ca:8b:56:cf:68:7e:da:7b:c2:20:1a:d6:ca:c6:fd:2d:f1:
         19:6c:20:f7:c5:e7:cb:ec:4c:ba:54:7f:d5:60:48:de:10:7f:
         19:ea:a8:af:fd:99:9e:1e:8f:67:b3:68:57:fe:cc:3c:df:e5:
         aa:65:a9:6a:71:66:25:3e:46:61:0e:3c:f2:a7:94:a9:47:b3:
         71:89:c9:ed:ff:9d:83:50:07:03:0d:c5:7f:f3:bf:e5:9a:8b:
         9e:46:3f:32:05:82:3e:3c:73:fa:4f:f1:ad:b3:27:63:14:34:
         c6:fd:49:a0:ed:fd:a0:94:da:cf:6f:30:c5:56:bb:51:08:08:
         23:ff:7f:7d:d2:be:de:ba:c1:ba:bf:ec:ca:de:36:bc:99:85:
         e0:ff:5c:8f:97:1e:b4:8b:97:d2:cf:07:48:68:94:f2:3f:bf:
         d6:3e:1b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:06:03 2024 by rpki-client on console-ams.rpki-client.org