Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/924543b0-4b76-32f7-87ad-08f7cbb2517b.roa
File:                     924543b0-4b76-32f7-87ad-08f7cbb2517b.roa (raw, json)
Hash identifier:          IYZMKka6CR90ulY3z05tpYQTygME8xvDVgpu/MCROiA=
Subject key identifier:   27:68:D4:86:2D:2A:72:36:FC:61:E3:71:45:8C:D4:E2:00:34:5B:65
Certificate issuer:       /CN=9b1ca75e-4539-4223-b200-925398eb3409
Certificate serial:       010D0C9F432858458E9876D38A8F57A586A15BC0
Authority key identifier: DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/924543b0-4b76-32f7-87ad-08f7cbb2517b.roa
Signing time:             Mon 15 Apr 2024 19:38:03 +0000
ROA not before:           Mon 15 Apr 2024 19:38:03 +0000
ROA not after:            Sun 14 Jul 2024 19:38:03 +0000
asID:                     400989
IP address blocks:        2607:a940::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8e:98:76:d3:8a:8f:57:a5:86:a1:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1ca75e-4539-4223-b200-925398eb3409
        Validity
            Not Before: Apr 15 19:38:03 2024 GMT
            Not After : Jul 14 19:38:03 2024 GMT
        Subject: CN=d10b97f9-85f3-49a4-a5d4-859698a8b12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:07:fe:dd:ab:12:22:cf:3f:27:2e:c5:ef:
                    57:af:08:b3:b3:c9:a9:02:8f:0f:01:f0:21:6c:a6:
                    41:c9:b1:4f:3c:a8:26:d2:1b:4d:04:14:eb:94:5d:
                    a2:71:14:db:0e:37:2f:87:7c:c9:a1:4e:7e:69:3e:
                    bd:22:91:3b:ff:57:36:4b:16:f2:06:f3:a8:ea:22:
                    7a:33:bc:85:92:89:3e:3b:11:f9:90:a5:1b:45:56:
                    44:01:6c:ef:d9:56:5f:12:97:5e:8a:4f:a8:67:0d:
                    c2:c1:26:18:28:46:d3:c8:41:ff:a9:2f:c9:0b:2a:
                    b3:9d:25:46:70:11:64:13:86:3b:4f:5a:c2:d3:55:
                    7c:cf:4f:ce:6b:e1:67:ad:ab:e6:14:ea:ec:f2:9e:
                    90:e3:ec:f8:df:b0:f2:55:78:cf:23:26:62:d9:f7:
                    ee:ff:83:09:f9:b0:c5:cb:9c:88:13:bb:98:36:3b:
                    b4:c9:9d:e0:d6:64:8b:4b:48:6a:ce:e3:40:be:38:
                    0a:08:37:9d:ad:ba:f1:3b:68:d2:47:a5:41:62:7f:
                    51:8d:37:c7:1c:5e:10:27:b8:2f:ef:87:23:26:0c:
                    8f:cf:9a:07:20:66:64:b0:a8:31:f2:0a:82:99:ec:
                    75:88:90:49:e7:17:fe:1d:38:96:a2:fe:8d:0c:17:
                    80:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:68:D4:86:2D:2A:72:36:FC:61:E3:71:45:8C:D4:E2:00:34:5B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/924543b0-4b76-32f7-87ad-08f7cbb2517b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl

            X509v3 Authority Key Identifier:
                keyid:DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:a1:cb:86:fb:59:3a:4d:3c:41:3f:22:7f:ee:30:23:f8:e5:
         56:5f:d2:a4:ea:d3:9f:33:98:84:3d:91:0d:f0:a7:e4:0c:02:
         5b:b0:07:bb:32:6e:d0:ec:cc:a7:f0:b0:37:b7:80:7d:8a:c0:
         f1:7e:70:20:6b:ad:f5:9e:f6:51:72:0b:fd:d2:9c:b1:bc:f7:
         b9:50:65:05:99:e2:b7:63:33:b2:e4:30:81:e2:bd:31:f6:bb:
         bf:30:65:90:d1:44:ed:e8:b5:88:c1:80:03:7b:f9:93:78:e7:
         6c:96:58:73:d2:dc:19:c7:ce:0f:c1:90:b9:9c:fb:c5:04:96:
         24:f7:0d:cc:f0:d2:1b:3b:5d:c6:3e:ba:dc:9d:0b:44:41:b3:
         0a:e3:15:fc:b7:81:f8:37:e3:c8:4c:dc:64:9c:43:0c:bc:97:
         5f:30:e0:2b:b9:e4:f5:cb:01:83:26:eb:20:8a:cd:49:49:97:
         d0:08:b8:52:49:5a:a0:1e:1e:04:e4:c7:eb:54:e5:2d:f4:1f:
         98:ff:71:42:14:53:30:7b:d3:9e:ef:8a:57:46:02:a7:28:ef:
         d0:03:09:6e:e3:49:a1:fd:8a:49:c0:0e:4b:99:64:d2:6b:b6:
         ac:8f:fa:50:ea:74:3a:7a:34:b4:74:65:13:6f:86:b4:67:1d:
         6f:1b:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:42:17 2024 by rpki-client on console-fra.rpki-client.org