Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbe30727-0e2f-34a4-aee1-99b46a60c7f7.roa
File:                     bbe30727-0e2f-34a4-aee1-99b46a60c7f7.roa (raw, json)
Hash identifier:          gmDoRIT41wFeD91NUbR9mrIIiwDc/triwgngve+4Rag=
Subject key identifier:   D4:20:C0:62:77:C1:71:B9:22:95:80:BE:08:4F:4A:08:39:BC:A7:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B2C1B73EA4DBBD624EC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbe30727-0e2f-34a4-aee1-99b46a60c7f7.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        2603:3018:1400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:2c:1b:73:ea:4d:bb:d6:24:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=31ae791f-0e8b-4ca4-8a37-fc84314bae3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f7:18:5d:19:91:5a:01:b4:5e:2d:0d:9e:fb:
                    27:da:e9:1a:13:f4:c1:66:00:ed:46:de:74:be:8e:
                    5a:24:f1:3d:69:90:6f:8f:86:bf:26:48:7b:85:f4:
                    92:89:2e:65:ca:43:c2:2a:d7:86:ef:d0:2d:07:ae:
                    4f:7a:bd:de:81:03:6c:db:aa:7e:b4:01:f6:d2:50:
                    d7:d1:7d:97:a5:a3:64:ed:9f:0c:1a:be:1c:cd:80:
                    b3:11:ef:00:77:9b:7c:cd:11:b3:54:3a:e2:3a:a0:
                    f4:d3:b8:c4:2e:22:57:e0:84:77:cb:6a:e0:12:0e:
                    4b:64:33:6e:e8:82:79:2c:47:f3:1d:fd:b0:c3:78:
                    72:e0:de:94:be:8f:fb:79:1e:77:c8:9e:44:45:02:
                    ff:1d:0d:81:53:c4:63:f5:14:b7:40:18:e4:d1:49:
                    34:0f:48:69:6b:d8:2f:a8:bf:29:08:4a:7d:e8:d7:
                    df:53:34:b4:d7:c1:7f:33:31:3a:73:07:98:40:7f:
                    37:4d:08:c5:40:83:37:9f:8b:49:3d:fd:45:05:8f:
                    4c:42:1a:2c:e1:6b:80:90:b2:56:5b:8b:a8:45:31:
                    30:ab:48:36:69:d4:e9:a7:f9:99:b2:c1:5e:4d:02:
                    45:7a:44:08:e4:7c:36:be:f8:b5:65:ba:7a:cb:e8:
                    e2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:20:C0:62:77:C1:71:B9:22:95:80:BE:08:4F:4A:08:39:BC:A7:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbe30727-0e2f-34a4-aee1-99b46a60c7f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3018:1400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:6c:b2:12:d0:f1:12:3d:fc:30:ed:34:e0:93:48:84:df:f2:
         d2:ea:46:36:c7:51:1b:51:4c:bf:16:00:f9:64:06:64:51:64:
         2d:94:de:1c:d3:ec:52:06:59:a1:8c:68:a5:87:b7:ee:a6:5e:
         5d:d5:c8:bb:7c:82:9f:53:e1:03:91:01:aa:43:5a:c8:91:e4:
         55:9a:90:00:fc:1d:76:bc:65:5a:32:02:f3:a2:9a:41:62:a9:
         79:d3:41:f0:08:32:6a:07:3c:f6:c7:c0:b6:a9:5a:15:45:ef:
         ab:01:ce:05:b3:98:05:72:18:cf:31:a1:fa:ae:ae:7b:97:b6:
         75:96:32:84:da:cf:b5:ae:e6:80:8a:7f:85:a8:b7:cd:33:31:
         40:61:70:f1:1c:cc:08:00:0e:14:72:3e:ae:d2:5e:b6:17:0e:
         5f:fc:58:e0:46:da:3c:97:14:10:a9:9e:2d:83:dd:9d:4a:32:
         0e:f7:7c:6f:e6:bf:f1:31:10:1f:d0:0d:5f:04:97:df:cf:ea:
         a9:80:0a:4d:ac:2e:02:86:07:ff:3f:61:40:c8:4a:a2:9a:38:
         31:85:3e:d6:b9:4e:dc:02:78:05:ef:6f:0a:19:73:4b:ba:0f:
         6f:23:d6:d9:18:6e:e4:83:3c:cf:36:c7:f1:77:cc:0d:28:06:
         40:c0:b9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:07:05 2024 by rpki-client on console-ams.rpki-client.org