Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/d1624420-1704-380a-89ed-788419271657.roa
File:                     d1624420-1704-380a-89ed-788419271657.roa (raw, json)
Hash identifier:          Koyc2tkWvhSdW4h8JlQ/oLtsJu5Gg6P97mawRCujZ7g=
Subject key identifier:   8C:6B:FE:29:B2:39:2A:93:CA:87:40:F9:07:E1:35:A0:65:81:D9:A3
Certificate issuer:       /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Certificate serial:       010D0C9F432858454AD2D01DCDD9CC5FC2F7C8C0
Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/d1624420-1704-380a-89ed-788419271657.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     10996
IP address blocks:        2607:f530::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:d0:1d:cd:d9:cc:5f:c2:f7:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=d84fac8c-73b5-4e4a-a99e-c5f352ae1e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:1e:6c:1b:75:23:4e:35:99:e5:47:7b:df:
                    3b:03:9d:34:b6:d6:df:d4:24:55:58:fd:40:46:71:
                    f2:7b:aa:cb:eb:57:04:1e:19:bf:41:f6:0c:f6:1d:
                    d9:37:54:d4:e5:bd:05:80:a6:4c:98:2e:9f:7f:25:
                    9d:7b:c5:40:a8:20:80:fe:06:d6:71:57:d1:fe:2a:
                    7e:fb:80:e2:4d:d2:9b:38:26:04:c1:9a:58:1f:66:
                    4d:99:47:bd:30:80:39:74:c6:09:21:d5:1e:e1:ea:
                    ac:47:02:28:1c:8b:a7:18:c8:f8:f8:2f:e1:c6:78:
                    a9:ac:67:57:b9:3d:08:3f:38:f9:f5:7b:bc:82:53:
                    84:41:b3:4f:78:bd:c3:7d:48:2c:bc:cd:44:56:f9:
                    c1:cf:95:4a:2b:1a:e7:15:f7:37:3e:83:1b:30:ec:
                    5f:f7:15:c7:98:b5:71:73:4f:ba:b9:ff:0e:dc:c4:
                    8a:3f:36:1a:3c:70:2a:51:df:4e:3b:b2:ee:2b:93:
                    8b:cc:87:53:d1:d7:7c:17:84:54:3a:39:fb:b2:5e:
                    9c:49:58:25:de:77:c5:3f:e4:99:7d:e6:19:39:0a:
                    ee:c2:37:5a:96:52:8c:10:a8:18:a5:a8:24:41:82:
                    b7:e8:bd:f6:ff:34:fd:a2:46:bb:f9:f8:4f:14:c7:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6B:FE:29:B2:39:2A:93:CA:87:40:F9:07:E1:35:A0:65:81:D9:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/d1624420-1704-380a-89ed-788419271657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl

            X509v3 Authority Key Identifier:
                keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f530::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:4e:db:a2:2e:32:64:04:5d:f7:ab:75:dd:31:23:62:e1:a0:
         95:e8:91:0c:fc:06:89:b6:e4:44:9e:7b:7c:fb:f0:1e:08:03:
         da:c3:93:c7:ad:a9:a8:36:79:fd:e7:4f:5d:c4:f1:48:10:03:
         c0:17:4b:0d:7e:80:60:f2:4c:18:87:be:41:3a:89:97:4b:c6:
         4d:1c:c9:e1:c7:ef:ed:11:53:14:7f:1e:4a:90:5d:36:80:e4:
         7a:c9:c7:8b:02:09:3f:ee:9c:9a:a9:1f:d5:4a:be:fd:75:3a:
         70:64:97:c8:f5:5f:70:04:1f:16:d9:a1:0c:54:c3:76:1f:ba:
         ca:8e:3a:b6:ec:ac:81:45:ef:28:f6:b4:3c:03:c2:75:ff:bf:
         8b:23:a0:f1:5b:0e:e8:92:f5:54:23:96:72:19:05:d4:33:9c:
         7f:80:7d:46:7f:52:bb:3f:d0:5f:4d:cf:61:fe:e5:ce:b6:ac:
         6e:b0:2f:13:8c:16:5c:92:1b:02:cb:ef:80:33:5e:cc:b6:e0:
         15:49:48:ad:b1:f7:89:df:93:2e:5b:9b:03:03:82:1b:25:60:
         64:ee:b3:23:02:04:cb:f5:f7:58:94:3d:ea:97:a5:0b:cc:1e:
         8c:bb:c0:58:a4:14:6d:4f:03:a0:f8:dd:59:6e:f6:8f:be:31:
         ad:be:8f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:11 2024 by rpki-client on console-ams.rpki-client.org