Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa
File:                     730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa (raw, json)
Hash identifier:          zL7asWeqLQ37/cYKCzJFoN06/yAEpdQL80IQZhz4Pvc=
Subject key identifier:   3F:E4:1D:61:74:B1:00:38:A5:2B:79:EF:76:4A:B9:97:95:C7:40:80
Certificate issuer:       /CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa
Certificate serial:       010D0C9F43285845D66903A2B1B0656FFA901A80
Authority key identifier: 31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     396298
IP address blocks:        2604:3cc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:69:03:a2:b1:b0:65:6f:fa:90:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=e2bf348a-d3fc-4600-beca-5eebb16f23d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:23:9f:dd:20:2d:5b:46:f8:fd:6e:1d:dc:51:
                    4b:08:08:d4:dc:4b:dd:ac:09:10:0b:10:16:38:ee:
                    82:d6:57:71:6a:a5:fb:f0:c1:23:8d:48:26:72:96:
                    d3:bf:77:aa:10:c3:a4:18:97:5a:7f:44:95:86:e5:
                    28:6e:cf:39:37:c1:d2:de:fc:f1:5f:09:cd:40:34:
                    9c:c7:72:a5:cf:d4:69:3b:8c:08:27:60:a9:a7:cf:
                    2e:4f:08:9f:fb:56:9b:3e:82:ae:5e:dc:fa:b9:bc:
                    d3:83:d2:71:75:ec:18:05:98:59:9c:f0:8f:9f:53:
                    73:a1:11:bb:c9:a0:9b:e2:e0:d7:d8:ad:18:03:66:
                    26:74:cf:3a:84:f7:6b:b4:30:d2:90:0d:95:b0:66:
                    ae:2b:87:14:7a:1a:c4:88:c3:76:28:7d:5a:1b:10:
                    fc:23:57:97:32:b0:0b:76:f3:d2:15:ac:0b:a5:11:
                    4d:62:a7:61:7f:d6:55:18:31:05:4b:1f:aa:d2:45:
                    b1:58:10:a2:65:cf:e8:10:69:65:0e:cf:8d:d8:f6:
                    69:be:cf:0f:29:57:3f:14:79:2c:e2:e3:ad:8e:e9:
                    d4:8d:70:b4:44:22:74:da:38:51:27:bc:96:c3:96:
                    48:f5:ae:72:ab:a8:69:97:6d:0c:68:28:00:91:0b:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E4:1D:61:74:B1:00:38:A5:2B:79:EF:76:4A:B9:97:95:C7:40:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl

            X509v3 Authority Key Identifier:
                keyid:31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a8:e9:eb:11:fa:74:72:0b:86:af:aa:1e:c5:de:eb:c5:b1:
         be:2d:81:e9:5e:01:fb:43:8a:58:b1:ea:0d:13:0a:64:dd:1d:
         37:37:b6:12:83:19:8b:a4:36:25:51:7a:ea:68:b8:85:b4:15:
         a2:3c:f4:01:a7:fd:e7:fa:47:a1:21:b4:cd:ed:a7:e3:8f:21:
         a9:94:9f:ed:e7:01:98:a6:45:f0:7d:fd:eb:b7:ee:1c:d4:eb:
         fd:57:4a:5d:6d:fe:37:6e:b6:b1:10:44:44:13:ed:ea:6b:2e:
         82:10:3b:45:e3:5f:c3:e1:fe:44:7c:4d:5d:9d:bc:84:7a:ad:
         9a:4b:fd:f3:0a:df:28:91:1a:4e:61:87:44:77:e5:50:09:02:
         ce:f2:52:fc:8f:12:8a:5b:c1:94:9e:08:bb:6a:2b:53:e3:3b:
         15:7c:73:b9:14:a1:ba:61:8a:fc:b2:68:10:b1:d2:6f:56:2e:
         64:b6:79:2d:29:0f:34:e6:9e:19:b6:2c:d2:7f:eb:62:ef:84:
         23:3d:5a:1b:c5:7a:d8:67:d5:3f:0e:d7:88:ae:2c:de:2e:27:
         b9:f9:e7:80:b5:fc:4e:53:fb:7c:e6:68:e4:2f:4b:26:f4:dc:
         74:fe:e8:a7:59:85:3b:e1:1f:38:e2:ea:61:0e:35:40:ab:4b:
         ce:ef:90:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:41 2024 by rpki-client on console-ams.rpki-client.org