Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/043db50e-d504-35e2-a949-f1fdfd29043a.roa
File:                     043db50e-d504-35e2-a949-f1fdfd29043a.roa (raw, json)
Hash identifier:          YlnflLYb8eyq22Y+zRDZW85NHw3HnkUvazAJmK03btE=
Subject key identifier:   D4:3E:6A:DD:35:39:F2:AE:2F:C6:94:C5:74:F8:2D:02:26:4D:57:B8
Certificate issuer:       /CN=7db346f0-17b1-4b0d-942b-291f70e18910
Certificate serial:       010D0C9F43285845DEC90FBE00C88F3040AF6960
Authority key identifier: 4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/043db50e-d504-35e2-a949-f1fdfd29043a.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     40317
IP address blocks:        2605:5e00::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:0f:be:00:c8:8f:30:40:af:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db346f0-17b1-4b0d-942b-291f70e18910
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=33586a89-594f-4a6f-915c-3ab9605f79e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:9a:b0:76:54:aa:99:8c:1e:b0:e6:cd:e1:
                    0b:49:48:53:b5:04:0a:7c:09:22:d0:1b:a6:fe:55:
                    bf:0f:22:7f:6d:99:8c:18:6d:8f:b9:87:4d:bc:04:
                    2f:fa:18:22:a2:91:10:79:c2:10:a2:17:3d:ca:eb:
                    c4:f4:d7:38:e6:8f:58:39:10:64:45:95:92:43:b4:
                    7b:73:81:89:68:5b:e4:67:37:3b:e2:e0:3a:66:0a:
                    bf:67:df:2f:48:94:72:e0:23:3d:c9:00:69:fb:67:
                    b7:1f:76:cf:82:26:87:df:3b:42:61:c8:8f:2f:0c:
                    93:0c:dc:a1:b5:04:83:6d:9e:8a:e6:79:e7:fd:c0:
                    8a:8c:02:78:12:a8:af:70:4e:24:c4:95:a3:30:cb:
                    3d:cf:8d:3f:68:e9:c5:d6:0f:c8:3f:1b:09:40:bb:
                    84:80:9d:e7:65:4f:4d:7e:8c:66:d0:d1:4a:17:fc:
                    58:eb:39:1a:d6:bc:17:33:c4:3d:f3:50:88:94:9b:
                    0c:33:8c:db:87:11:ba:41:4b:a5:ae:bd:c8:65:88:
                    3a:48:17:fb:f1:57:0e:db:5c:7e:f9:69:15:94:c1:
                    a7:55:4c:0b:95:95:9c:6a:fa:29:5c:00:22:c8:b5:
                    ff:87:32:ff:58:e7:b4:5f:c3:33:9a:5d:2a:5a:6a:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3E:6A:DD:35:39:F2:AE:2F:C6:94:C5:74:F8:2D:02:26:4D:57:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/043db50e-d504-35e2-a949-f1fdfd29043a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:5e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:1a:09:a6:c1:51:31:6b:1f:b1:7c:20:7c:aa:05:2a:ca:06:
         f6:e0:22:b4:14:52:d0:3e:74:d4:93:3b:69:b2:37:63:51:23:
         d4:c9:10:ec:f9:fe:dc:2e:c5:f8:f2:64:ba:ee:ec:e2:10:31:
         1d:25:4d:35:91:1f:b8:df:c4:99:4b:94:9d:8c:a2:19:94:e9:
         13:eb:77:9c:d3:77:46:b9:e4:4f:13:10:69:d9:ae:75:97:b7:
         02:06:a2:1b:35:cc:39:d5:c8:dd:55:93:41:3e:d7:4a:cc:35:
         e5:96:59:9e:3e:3b:cc:b8:6c:09:89:9e:0a:f0:a0:04:06:f9:
         91:ac:15:c1:44:e3:2a:db:73:f5:53:27:9e:a3:18:61:06:d5:
         f4:bd:07:81:05:46:81:0c:e2:95:9d:8a:e4:b5:60:88:a4:d7:
         7e:16:07:82:2a:d8:2b:a2:52:d5:2e:72:2e:74:ea:48:f0:92:
         13:f2:1c:f8:ef:d6:a7:92:7a:56:90:81:fd:98:c3:00:c6:b0:
         66:d0:92:27:25:7d:fb:91:15:26:13:94:f1:f4:ef:32:5b:15:
         94:97:d2:b8:1a:b1:8c:0d:f0:21:6c:e6:51:f2:a0:19:f7:1a:
         f9:67:c2:43:f7:70:2e:f0:8e:f7:b9:04:16:91:5f:eb:2d:39:
         ce:cc:00:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:36 2024 by rpki-client on console-fra.rpki-client.org