Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/66671d8e-d946-3018-a32d-f3a3d3c928dc.roa
File:                     66671d8e-d946-3018-a32d-f3a3d3c928dc.roa (raw, json)
Hash identifier:          +g0vTF3bsTFHn+v0Wrr0SmDIhLgf8vDpPHFBmfE/7og=
Subject key identifier:   5D:51:BD:4D:07:AB:A4:10:A6:AC:B5:15:77:79:3F:29:BB:76:2F:48
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F432858459ADE8DF753ADB93D3DD71B00
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/66671d8e-d946-3018-a32d-f3a3d3c928dc.roa
Signing time:             Sat 20 Apr 2024 05:08:59 +0000
ROA not before:           Sat 20 Apr 2024 05:08:59 +0000
ROA not after:            Fri 19 Jul 2024 05:08:59 +0000
asID:                     14618
IP address blocks:        2607:9f40:35::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:de:8d:f7:53:ad:b9:3d:3d:d7:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Apr 20 05:08:59 2024 GMT
            Not After : Jul 19 05:08:59 2024 GMT
        Subject: CN=e805449c-1118-4582-865e-4dcf5569536e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:4e:ab:93:36:c0:b1:9c:39:73:f6:b8:f4:
                    f9:5e:fc:49:eb:b7:9c:a9:d0:06:31:92:95:1f:43:
                    ef:58:29:e1:a0:94:dd:5c:3a:4c:60:96:90:cf:bc:
                    f6:d2:1a:7e:99:04:70:14:91:3a:21:5a:6c:34:86:
                    23:35:a0:7f:68:8a:3d:6e:ad:a3:7e:42:59:95:0d:
                    7c:61:85:f5:34:6d:fc:99:cc:31:90:b4:cd:33:9c:
                    32:54:4c:d9:98:28:68:ea:c7:95:a1:16:84:e6:c8:
                    54:1d:ed:9a:a0:47:69:e4:87:bb:b9:2e:f9:a6:fb:
                    56:3a:3a:28:4e:e3:f5:a5:df:f4:11:96:95:6a:2c:
                    d1:77:a1:25:28:f4:03:e3:0a:db:a2:74:41:a6:51:
                    3a:ab:84:13:3b:c3:0a:8b:c6:dd:63:ec:3a:7c:37:
                    93:ae:c1:73:39:a0:86:0e:ec:26:ea:0f:7d:31:19:
                    f2:8b:ca:8c:8c:8c:cd:b9:c3:cf:d2:2f:03:52:62:
                    ce:c6:4d:ed:5a:47:78:9f:4c:c7:6a:5e:eb:5e:c7:
                    17:99:6a:fe:49:f0:b0:2b:b9:a7:5e:56:2d:4a:63:
                    29:13:7d:aa:fd:f9:4e:fa:78:41:c8:e7:aa:a8:a1:
                    1b:3e:26:0a:7b:44:7c:2d:47:06:a8:bd:0c:3c:02:
                    46:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:51:BD:4D:07:AB:A4:10:A6:AC:B5:15:77:79:3F:29:BB:76:2F:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/66671d8e-d946-3018-a32d-f3a3d3c928dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40:35::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3b:49:5f:2c:d9:22:86:a8:b5:10:78:c6:53:71:a5:8a:ee:
         60:b6:84:31:48:7c:ae:f1:51:f9:05:5f:50:49:f8:7d:28:62:
         38:b8:0f:d1:e0:b4:cd:3b:76:53:0b:9e:a7:69:5a:fe:f1:ea:
         f9:d4:ba:d8:13:90:a1:3e:07:82:d3:7e:54:ad:90:7e:f1:58:
         50:fb:e6:5c:ce:55:af:62:78:68:c6:08:32:7b:ec:1d:3c:00:
         bd:31:95:3a:0d:ee:43:cb:51:c5:4a:84:7a:b4:2e:fd:b5:e1:
         67:42:43:c6:dd:4b:4b:e0:4f:16:99:11:ff:da:a5:87:84:97:
         22:99:64:e1:6f:f9:f6:d5:ea:a4:8d:0a:f1:17:94:91:90:3f:
         5a:50:01:09:04:68:cb:66:df:d1:4c:54:93:3f:08:a3:e8:67:
         92:13:c4:76:33:22:3b:f0:ea:07:59:da:22:6d:a8:36:e9:54:
         c9:ef:28:7c:3c:b3:20:b9:19:39:d7:49:58:f4:66:e1:68:da:
         cb:80:18:2c:6c:e4:5b:42:2b:dc:3e:c0:40:cd:ed:05:f2:8d:
         04:9f:e6:38:6b:1b:ba:01:69:7c:e1:53:4c:bf:1f:35:b8:b4:
         c4:0d:33:d4:bc:e9:c9:56:84:b6:58:43:a8:9d:48:c4:2a:bb:
         24:16:5d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:12:27 2024 by rpki-client on console-fra.rpki-client.org