Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/b8fd8cac-f337-3458-a1f3-7f6a78f636f7.roa
File:                     b8fd8cac-f337-3458-a1f3-7f6a78f636f7.roa (raw, json)
Hash identifier:          7XZ9jW5yOcy8hu5yd4L905BaKq8ut9MEv5HjucVsDAQ=
Subject key identifier:   F7:80:69:4B:BE:D2:7D:D2:93:0A:36:55:77:9E:C7:8B:C5:8A:9B:9E
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584582A88508C9765BC861D25C00
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/b8fd8cac-f337-3458-a1f3-7f6a78f636f7.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     39618
IP address blocks:        2602:fd92:a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:85:08:c9:76:5b:c8:61:d2:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=2914b027-8d9c-4d89-a747-b18032bdcef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:c4:99:2e:e8:a7:e0:f2:c4:38:24:2e:42:
                    af:b2:5c:cc:17:27:b7:11:85:49:e1:b6:71:95:7f:
                    a7:9e:3c:5a:06:32:88:56:a6:89:42:ab:c5:eb:94:
                    49:48:11:21:c0:2d:32:12:05:b2:2b:b6:5d:e4:b0:
                    b6:7d:9c:24:3e:a9:1a:53:a6:2e:d9:27:bb:87:58:
                    89:89:fe:19:4f:a5:74:10:f0:53:a5:62:64:b9:97:
                    13:37:78:d3:73:41:41:84:b7:17:17:fe:df:0e:d3:
                    91:17:90:85:84:d2:12:e6:af:b7:0c:b3:0e:31:7c:
                    38:04:a7:0e:b4:30:d4:a6:a0:53:f5:74:1c:b4:bc:
                    23:45:48:41:2c:11:6f:44:bf:fc:42:a7:bb:bf:23:
                    b0:e3:0b:80:7f:ee:6c:73:28:2c:5a:f7:64:56:20:
                    b0:55:fe:df:41:f4:d6:ea:cd:19:45:dc:61:67:4c:
                    a8:90:75:88:6b:73:7f:5a:0f:4d:15:c9:4c:3f:18:
                    79:ca:9c:26:9e:b0:3d:d1:c4:d4:61:3f:65:d5:5e:
                    02:83:95:dc:2e:c7:09:24:7c:74:a5:76:ae:1d:51:
                    2f:ed:1c:11:53:88:1d:0e:86:eb:7f:f9:97:86:12:
                    5b:9f:ae:d2:2a:29:47:f5:33:5e:3e:4a:7c:65:87:
                    93:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:80:69:4B:BE:D2:7D:D2:93:0A:36:55:77:9E:C7:8B:C5:8A:9B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/b8fd8cac-f337-3458-a1f3-7f6a78f636f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a4:65:9c:d0:60:69:ae:7c:d4:9e:a7:71:a9:3a:b8:36:e9:
         bc:05:27:a9:3c:a8:09:4f:b5:a5:12:be:e2:80:5f:59:62:32:
         8a:45:82:cd:3a:f2:9d:5a:65:28:8c:04:33:1a:d1:a2:f5:2a:
         05:dd:26:25:45:48:51:3d:8e:0e:48:9d:ba:af:02:fd:bb:d2:
         41:5e:e3:e7:f7:55:90:0e:53:6a:ad:ea:88:89:5f:e7:ba:5f:
         27:dd:86:3f:3f:e4:9d:aa:7d:b3:3f:0a:1c:14:d3:50:6e:fd:
         54:87:e8:9d:1c:ea:75:b6:cc:9e:10:09:7c:ec:20:f5:58:fa:
         5f:6c:64:22:9e:b9:b7:6d:ff:42:a1:15:14:43:57:d3:ed:71:
         ae:78:ca:7b:3b:c0:b8:16:02:15:1a:ae:1c:56:81:d8:91:6b:
         7e:bc:aa:9c:70:c3:d3:9a:6f:08:66:1c:bb:e6:a7:e8:b4:73:
         b3:e4:d0:07:68:aa:87:61:6c:9d:d2:71:c0:18:9f:9d:ad:ec:
         26:2c:8a:e0:6f:17:91:a4:f7:a7:f4:9c:4d:82:08:39:47:10:
         51:63:68:06:a5:1b:32:a5:64:2b:1c:c3:c8:01:02:eb:a0:15:
         a8:77:76:5f:10:af:55:e6:5a:9f:18:62:b8:e7:0a:38:8a:3c:
         37:e1:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:27 2024 by rpki-client on console-fra.rpki-client.org