Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/51ec3cbf-081c-3dd1-82f9-2d95a1877c31.roa
File:                     51ec3cbf-081c-3dd1-82f9-2d95a1877c31.roa (raw, json)
Hash identifier:          y4ykZ9/iaSOMqfGPM0cBEu/xn5yFyeEb+KPtjDg02NU=
Subject key identifier:   C7:A9:DF:FB:F9:54:E9:D8:9D:47:BC:D7:A2:DC:3D:36:0B:F7:B6:E7
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285845AC88CBB2523649932A7E35C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/51ec3cbf-081c-3dd1-82f9-2d95a1877c31.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     2914
IP address blocks:        2001:418:1456:b0a::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:cb:b2:52:36:49:93:2a:7e:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=a42eeeb5-4e89-4c92-9702-975daf14ccc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:56:53:ba:47:76:b1:d0:71:97:db:5f:91:90:
                    21:1c:78:e7:dc:4f:f4:22:5a:0d:18:6d:26:91:79:
                    f7:a3:0b:3b:f1:86:51:90:f8:42:6a:3d:be:63:c3:
                    24:00:72:2d:b5:91:b7:39:e0:d4:34:bd:5c:64:5e:
                    bb:11:e3:1e:37:8a:20:65:6e:a9:25:ed:8c:a1:05:
                    a7:ee:36:c0:2e:ec:5c:10:1f:3a:c0:cf:2a:84:34:
                    dd:21:1a:34:3f:74:93:41:e8:c3:31:d4:ec:c7:c9:
                    a3:bb:b5:46:62:b0:79:37:79:fd:2c:78:7f:9a:1e:
                    cc:70:d3:b3:22:a4:9f:c1:50:8b:d9:b0:ab:8c:64:
                    48:e0:ae:df:e6:b5:62:27:99:36:0b:ba:4f:69:3d:
                    c3:1c:1e:f7:8c:03:50:43:d4:af:06:69:37:11:df:
                    52:bc:9f:27:eb:4a:c8:73:fb:76:c0:a9:85:24:76:
                    f7:47:f5:65:05:a1:c3:f0:6c:05:71:00:5d:99:ec:
                    5b:db:38:fd:24:ef:ba:06:e3:17:41:f4:97:56:2c:
                    ce:64:7e:ee:06:11:18:e9:99:f2:ad:28:e9:cb:32:
                    ae:0b:24:3f:6c:30:03:61:27:20:31:a4:0a:87:f3:
                    8a:32:a9:71:f1:b5:2b:8c:b1:7a:0a:dc:ee:e2:ec:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A9:DF:FB:F9:54:E9:D8:9D:47:BC:D7:A2:DC:3D:36:0B:F7:B6:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/51ec3cbf-081c-3dd1-82f9-2d95a1877c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b0a::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:fc:df:38:8c:80:e5:2b:b3:9d:ed:c9:97:5e:23:5d:58:84:
         da:c2:72:27:71:1b:f8:8f:69:f4:f6:dd:8b:ef:65:61:9c:f8:
         b6:d4:8a:f2:b0:33:f5:c5:06:27:6f:7e:05:b8:16:56:66:87:
         d9:18:c4:82:3e:d5:d0:43:4f:b5:0f:4a:8a:be:4f:27:cc:35:
         fd:94:d9:8e:c7:ad:4e:75:2a:69:c6:68:c2:2d:77:d0:7e:37:
         7a:c1:e5:97:29:94:91:ce:bb:55:3c:96:d1:6a:0f:db:fa:73:
         b8:21:8e:4b:c6:bd:73:61:df:65:0e:ce:3a:1a:c0:3a:40:e9:
         ab:5b:7a:62:a1:89:fc:09:f6:22:e8:f7:3d:ae:76:69:fc:cb:
         ed:03:df:25:0a:cd:88:70:0c:97:e8:4b:b9:53:00:de:d7:47:
         2f:48:c7:b3:cd:e7:7f:34:c9:09:e7:b1:50:95:85:2e:04:52:
         97:b3:9e:54:c9:b4:23:85:9c:6e:7a:a9:89:31:8b:57:26:3b:
         3a:d4:7e:15:41:4c:2b:7d:fa:dc:c4:48:45:26:94:82:36:21:
         d6:13:a3:07:ba:9e:85:0a:5b:1a:df:2c:69:00:db:90:a0:27:
         4b:1d:f9:9e:9d:ef:52:d7:8c:e2:4f:ff:b6:1b:46:2f:27:91:
         fd:3d:6f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:56:11 2024 by rpki-client on console-fra.rpki-client.org