Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/4403792f-9018-36c7-a916-9dc7939d23a6.roa
File:                     4403792f-9018-36c7-a916-9dc7939d23a6.roa (raw, json)
Hash identifier:          dv3Wjq0CS+aoCYVlR8AWG624bqzkE8y91k5yDZu4k3k=
Subject key identifier:   AF:83:30:8B:F7:CA:ED:A2:37:94:7E:E7:DB:AB:9E:6F:99:05:74:50
Certificate issuer:       /CN=b433860d-ab5d-45f4-a11e-f313b584710a
Certificate serial:       010D0C9F43285845E729165B2BB7E8CDBA9B3900
Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/4403792f-9018-36c7-a916-9dc7939d23a6.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     399516
IP address blocks:        2606:2a40:5::/48 maxlen: 48
                          2606:2a40:4::/48 maxlen: 48
                          2606:2a40:7::/48 maxlen: 48
                          2606:2a40:6::/48 maxlen: 48
                          2606:2a40:1::/48 maxlen: 48
                          2606:2a40:3::/48 maxlen: 48
                          2606:2a40:2::/48 maxlen: 48
                          2606:2a40::/48 maxlen: 48
                          2606:2a40:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:16:5b:2b:b7:e8:cd:ba:9b:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=d8fdc3e2-bd18-4f99-9106-a8aa072d2277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5a:24:d7:1f:b5:38:bc:b7:19:5b:f7:53:79:
                    2e:c4:89:b1:1f:7b:fa:57:4f:6b:e4:1f:7b:cf:73:
                    39:7e:c1:74:50:fe:a8:bb:86:98:ef:4c:52:3a:60:
                    8a:ae:ff:ae:aa:12:a9:9f:e9:dc:17:60:0f:77:0c:
                    c0:cb:37:57:87:a4:4a:2b:04:9e:a7:53:a2:7c:3b:
                    fb:c4:b3:a4:6e:9d:8c:f1:40:e4:9e:a1:40:94:7f:
                    2a:73:ba:c9:e3:eb:43:0e:37:7e:8f:9d:8a:49:1c:
                    6e:68:f3:5c:04:fe:80:0f:9d:77:d1:03:19:4e:ee:
                    9d:1c:2b:d3:33:13:4d:2e:1a:f3:41:cc:ea:e2:48:
                    27:6e:3e:cc:a7:98:c2:95:6d:94:44:01:42:26:ff:
                    be:c2:87:66:56:a9:10:9d:dc:f4:df:6b:70:08:82:
                    df:ad:1f:b4:68:e7:75:2f:4b:94:71:9b:14:ca:1c:
                    88:a2:78:bd:93:64:e5:7d:73:bb:3b:5e:df:ff:15:
                    5b:56:a5:c6:2f:00:3d:b7:18:a4:84:5c:ba:ba:08:
                    9c:69:ce:26:7f:b2:a4:9a:4d:38:08:be:92:4a:ff:
                    73:9e:f4:74:f0:6e:ac:90:fb:16:e1:a1:b1:42:be:
                    92:cf:05:ab:20:1f:0c:77:de:ef:6e:a5:6b:26:db:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:83:30:8B:F7:CA:ED:A2:37:94:7E:E7:DB:AB:9E:6F:99:05:74:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/4403792f-9018-36c7-a916-9dc7939d23a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl

            X509v3 Authority Key Identifier:
                keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2a40::-2606:2a40:8:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:a3:98:2f:2d:14:6b:f0:c9:bf:25:f3:ad:9e:69:a6:a8:3d:
         8a:01:c4:32:41:68:aa:92:44:28:5b:1f:d5:d6:34:51:dd:3e:
         bc:ae:de:84:4c:c0:06:23:93:56:58:03:eb:5e:a2:35:1f:2f:
         c9:b3:a2:a8:5b:df:da:a4:45:6b:a5:45:69:12:9c:86:3c:cc:
         71:11:53:86:16:04:60:cd:d3:db:aa:c8:c1:d3:06:6b:aa:e0:
         5c:b4:0c:0c:87:4c:5c:58:cb:a8:00:ba:e6:09:7c:05:2c:cd:
         6b:f2:3a:ca:54:ce:8a:c7:7a:6b:82:44:91:54:35:6e:b3:7b:
         ae:4f:b1:7e:d2:b9:c9:ee:70:12:67:a8:63:64:43:b3:b8:55:
         b1:28:89:31:b5:2f:e7:90:b7:3b:57:29:c1:9c:80:a4:c8:5a:
         90:2a:a9:2b:f6:76:14:f8:70:09:6a:25:1a:bb:d3:ee:dc:f9:
         b2:ba:5e:60:fc:2e:66:b9:87:3e:c4:b3:07:b9:35:fb:bc:1b:
         03:5f:7b:a8:22:4a:5e:fa:d3:b5:69:ad:ba:2b:64:9e:78:29:
         40:39:2e:78:17:9a:4f:55:9e:0a:a4:c6:6f:3a:3c:72:88:98:
         df:39:d5:2e:1f:30:0d:59:47:4c:79:a7:9b:2e:c8:e3:3c:6a:
         ff:8b:ee:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:25 2024 by rpki-client on console-fra.rpki-client.org