Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa
File:                     ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa (raw, json)
Hash identifier:          o70TJVLvSmjovMpTpBBHBpbFZNNyU8ipW86CVTBexZU=
Subject key identifier:   C1:35:E4:47:6A:A6:50:98:55:06:5B:C4:D5:4C:AF:78:E1:00:6C:A6
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F4328584546A2B40CB7B2BA53A4E69140
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa
Signing time:             Thu 21 Mar 2024 01:00:25 +0000
ROA not before:           Thu 21 Mar 2024 01:00:25 +0000
ROA not after:            Wed 19 Jun 2024 01:00:25 +0000
asID:                     62494
IP address blocks:        2604:9440:2300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:a2:b4:0c:b7:b2:ba:53:a4:e6:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Mar 21 01:00:25 2024 GMT
            Not After : Jun 19 01:00:25 2024 GMT
        Subject: CN=4da9c2d5-c105-49e4-b2a5-6de4a49bbda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c8:df:ab:12:6d:1f:bd:e3:20:fb:3b:ca:d2:
                    21:f2:46:1e:95:ce:60:fb:b8:fd:0e:a9:69:b3:79:
                    e7:bf:79:f5:bf:e2:e6:7c:e1:1a:8c:2f:2f:85:6f:
                    64:5b:15:07:3b:8d:0d:45:ed:ab:3b:2b:be:28:86:
                    09:04:0f:4c:f3:3c:18:15:9a:3e:09:4a:29:93:03:
                    5f:3f:b4:06:73:bf:2a:4d:03:c2:b4:af:43:34:4e:
                    cb:89:d7:83:7c:cd:f1:1c:dd:a7:68:61:fb:59:09:
                    17:cd:f3:f9:c8:af:65:df:5e:8d:1c:28:0c:bd:3d:
                    b2:8b:67:7b:de:67:16:5f:f3:ad:de:f2:14:df:43:
                    67:f6:36:c4:8b:9d:87:1d:1c:fd:55:ba:d6:14:3f:
                    a5:33:91:84:81:52:56:17:51:a5:a8:5e:ad:2a:d6:
                    75:02:4a:56:bc:32:8f:24:b5:7a:b9:b1:76:a1:da:
                    a0:24:81:63:b8:1b:17:a2:48:00:e0:54:10:1d:ce:
                    6e:3b:9c:6b:e7:f4:de:c3:dd:af:19:ae:20:63:f9:
                    9b:bd:f0:1d:68:09:91:d3:9c:1b:89:7d:f0:7b:46:
                    51:f8:e6:ee:61:fe:25:8b:d0:44:cf:7c:a3:4e:81:
                    eb:10:42:7e:84:bc:15:b3:e2:25:9f:9c:7f:1d:7f:
                    07:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:35:E4:47:6A:A6:50:98:55:06:5B:C4:D5:4C:AF:78:E1:00:6C:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9440:2300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:76:fe:cd:59:3e:10:80:ea:68:9d:f2:c3:ca:f7:25:c2:07:
         03:b5:e2:ba:a9:cf:65:9e:f8:60:a6:33:b9:20:f2:bf:a3:69:
         51:52:b2:49:2b:a5:72:e1:4e:12:16:92:ef:8b:04:60:97:ac:
         f3:a8:0d:ac:96:35:9f:aa:1c:48:74:7d:99:b8:0b:02:8b:6e:
         8a:ac:2d:c1:e9:e5:73:44:e2:41:ac:82:2a:ef:c8:fb:14:6f:
         79:e3:d6:11:a5:ba:f5:20:80:a5:17:f7:83:85:b3:3a:46:1c:
         45:ef:82:b4:14:37:5a:73:ba:38:f4:96:1f:4c:98:40:d3:3d:
         9c:96:42:fa:52:c2:ba:44:e7:99:a0:cf:a1:60:bc:6f:48:98:
         a5:9f:76:6c:51:a5:13:df:d2:41:e9:2f:02:dd:b9:99:eb:bc:
         c1:55:40:cb:df:1e:13:47:14:56:9d:5c:58:29:8d:b9:6b:5a:
         a2:f0:be:a8:66:46:2a:5e:31:a2:58:be:1c:c7:60:34:e5:43:
         07:fb:d3:59:c7:4b:06:10:0b:6a:ae:e0:40:03:1f:a9:1b:e3:
         da:39:6a:23:e0:4e:1d:c4:96:b7:ca:c5:af:26:57:29:f2:ba:
         0a:de:d1:2a:3c:2e:68:9c:0a:d8:85:d3:e2:7d:06:bf:a3:cf:
         77:d1:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:05:45 2024 by rpki-client on console-fra.rpki-client.org