Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa
File:                     bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa (raw, json)
Hash identifier:          QlRl5c8WcYZkEFQ+rQtom2B0Ho4Ht/SAaArLDqDgMlY=
Subject key identifier:   FF:BE:7F:F9:F3:5A:EB:8C:4B:4C:36:ED:D6:E6:95:8A:BC:F7:98:37
Certificate issuer:       /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9
Certificate serial:       010D0C9F43285845883DDE00D415B9204FB7CF00
Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     14159
IP address blocks:        2604:aa00::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:de:00:d4:15:b9:20:4f:b7:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=5a0af3d8-0e7a-4c2c-b004-ea132c3d224b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:35:66:b6:25:55:19:04:ad:82:0e:91:2c:
                    06:1c:fe:84:ad:25:da:ed:f3:b6:6b:69:70:84:9a:
                    4a:ab:f8:bd:08:ad:ac:c3:8d:45:b4:0c:e1:ce:b9:
                    11:68:fd:a5:8f:d9:f4:f4:1c:d0:7d:d3:35:fa:58:
                    79:8f:fd:2f:3f:59:6b:d8:3b:c8:de:77:30:38:fd:
                    af:97:e5:dc:29:45:8b:42:18:ca:29:b7:18:3e:e1:
                    3e:63:f9:f7:b1:57:f0:63:cc:ea:cf:9d:22:34:ec:
                    89:fd:cb:1c:d4:57:e4:d2:f6:15:3a:40:f0:21:99:
                    09:28:ad:ed:b7:59:55:95:5b:7f:6b:92:8c:25:16:
                    a7:28:c2:aa:a3:6f:7f:c7:aa:ea:b2:51:24:4d:8f:
                    47:0c:fa:f5:6b:b6:91:47:8c:79:1d:ae:98:c6:78:
                    d0:46:e0:74:68:dc:1b:42:74:5d:89:99:60:86:3b:
                    21:68:07:c5:d1:aa:44:6f:c5:48:9d:74:0e:42:3c:
                    40:ab:af:ab:a5:2b:f2:c2:55:ba:c1:57:2d:ab:58:
                    e6:2c:51:aa:3b:e4:62:23:88:01:32:f3:f6:60:75:
                    e7:c4:80:b1:6f:58:2a:9a:80:29:b7:66:d6:17:bb:
                    b9:1c:c3:6b:01:22:97:70:76:84:af:44:f3:84:aa:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BE:7F:F9:F3:5A:EB:8C:4B:4C:36:ED:D6:E6:95:8A:BC:F7:98:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl

            X509v3 Authority Key Identifier:
                keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:aa00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:fe:83:52:65:9e:eb:b7:ab:57:e9:7f:13:5b:12:56:35:bd:
         22:a4:36:c7:3f:05:68:da:c1:0d:da:ee:37:c5:28:1e:9f:48:
         25:0b:5d:7b:f0:c9:25:f6:d7:7e:3c:54:dc:c1:23:23:54:67:
         32:88:f6:70:ab:f4:38:7d:95:18:a2:4c:fd:33:26:23:75:54:
         7f:81:ae:a5:9a:75:39:24:cb:4f:25:5e:c4:a5:67:2f:e5:8c:
         48:30:42:d8:f4:47:e0:c1:b8:87:2c:11:54:64:3e:90:1b:23:
         9c:17:f5:76:0b:2e:75:dd:f2:91:3d:07:9a:4d:fe:7e:ee:4b:
         cc:a3:52:79:6d:47:39:96:8d:33:f6:16:43:05:c4:d3:9a:a0:
         97:38:85:5b:ea:d0:c7:5a:c1:aa:53:4c:81:26:b9:57:6f:f8:
         da:21:3f:fb:fc:44:89:2e:9d:44:e8:81:61:4d:12:1d:65:2c:
         0a:10:f3:17:44:a0:fe:7e:1e:35:e9:4b:6d:23:1f:57:84:2e:
         22:c3:1b:0f:ff:94:e0:4b:ca:29:6d:d0:46:07:21:eb:b3:d9:
         e1:1a:9e:de:65:d9:e2:94:7d:62:c9:95:b9:47:0c:d0:c6:78:
         82:49:c6:66:ba:22:59:c4:09:94:0a:34:25:cd:4f:93:c3:e1:
         10:cc:fa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:16 2024 by rpki-client on console-fra.rpki-client.org