Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa
File:                     d5585992-e680-3e2a-90c5-f5452de158cb.roa (raw, json)
Hash identifier:          xn+aySA48XmzbMv74aYSalm2E9u8FYwkJDxmzVF+Wvs=
Subject key identifier:   3A:0D:7E:AB:5E:13:A6:25:9C:73:4D:B0:41:F9:4D:73:A4:F1:FE:B8
Certificate issuer:       /CN=b76a56d7-e03c-4adc-a642-166acb54d72b
Certificate serial:       010D0C9F4328584551CD6D1ACB4434EA994CFD40
Authority key identifier: 67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa
Signing time:             Mon 25 Mar 2024 01:00:25 +0000
ROA not before:           Mon 25 Mar 2024 01:00:25 +0000
ROA not after:            Sun 23 Jun 2024 01:00:25 +0000
asID:                     32277
IP address blocks:        2605:ab00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:51:cd:6d:1a:cb:44:34:ea:99:4c:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76a56d7-e03c-4adc-a642-166acb54d72b
        Validity
            Not Before: Mar 25 01:00:25 2024 GMT
            Not After : Jun 23 01:00:25 2024 GMT
        Subject: CN=9a4e423c-6dc6-4625-96f5-6a1682f34449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cb:db:ca:20:ad:34:f2:ce:f4:e8:1f:67:a7:
                    25:2e:6f:9b:9a:b6:10:e0:b6:2c:9e:0d:72:0d:5d:
                    85:b8:22:a9:83:20:e0:84:ba:09:f1:ea:c3:84:bb:
                    d1:47:3a:83:ad:96:aa:c1:7e:ae:51:b1:c1:34:1c:
                    c1:c6:0a:99:17:55:f6:af:cd:09:de:1e:25:28:4d:
                    ce:d8:b6:60:89:54:22:fe:8e:d9:37:3f:48:6e:ec:
                    5c:92:73:05:f2:2f:1d:ed:c2:4e:9a:84:16:98:36:
                    43:3a:fe:63:26:d3:24:1a:77:ba:37:7b:61:fb:45:
                    63:90:6b:8b:d9:5d:61:aa:ee:a9:f7:d3:40:8c:56:
                    34:cb:29:a4:64:57:6f:93:bf:c9:91:9d:88:07:f7:
                    f1:32:08:fe:b1:c0:27:bd:20:90:08:22:7a:6c:91:
                    0c:93:1b:8f:2e:f3:cd:e4:71:a1:21:17:00:1a:32:
                    c1:8f:6c:21:f9:73:22:80:35:99:4c:47:4a:29:bb:
                    51:75:73:83:bb:8e:87:f3:05:59:e4:f7:e9:9f:e9:
                    a1:73:c1:ac:4c:80:dd:7f:d6:4f:64:b9:13:60:5e:
                    f1:79:7e:06:63:39:05:98:a2:74:f2:58:4c:6f:a4:
                    14:fe:10:a2:32:b9:ef:64:2b:2f:7f:d9:e3:2c:08:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0D:7E:AB:5E:13:A6:25:9C:73:4D:B0:41:F9:4D:73:A4:F1:FE:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl

            X509v3 Authority Key Identifier:
                keyid:67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ab00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:16:8e:ea:b1:51:5d:10:98:e3:e6:6b:71:bf:ec:07:0c:d1:
         e3:d5:35:b3:86:41:19:28:69:05:12:06:f9:46:5c:76:d8:32:
         fa:4f:90:2f:e6:66:d5:db:53:bd:86:42:48:25:19:02:3d:fb:
         f6:be:1f:1a:a1:c0:67:03:de:1a:23:7b:3f:85:aa:da:5a:fe:
         81:b0:c3:46:e3:66:a1:cf:a2:b1:b4:10:29:93:a6:10:6b:9d:
         28:25:0f:48:f7:5e:44:33:93:ca:24:e2:01:ca:25:ed:42:5d:
         ae:a2:c6:3d:5f:c9:d3:ae:9f:c2:7f:7e:31:a2:b5:5b:58:d2:
         c3:43:dd:16:8d:a8:d5:6c:7c:4f:b3:10:8d:d7:00:04:39:ac:
         1c:de:52:08:cb:6e:67:21:d5:49:f8:2e:86:53:77:96:7c:5c:
         1a:45:dd:ea:40:fd:fc:1f:14:c0:08:d4:f0:d8:18:97:ad:cd:
         3c:68:aa:8e:1d:ca:12:7c:44:a0:a2:06:8a:86:13:85:29:4b:
         91:89:87:a4:cb:7c:cf:4d:d0:01:64:e1:61:57:bc:47:77:93:
         be:6e:04:d3:a7:ad:45:6f:55:78:2e:78:9b:f9:e5:39:83:d5:
         f1:6a:87:08:1a:13:b3:80:08:e4:1f:ee:03:3c:ea:c6:17:fe:
         0e:f5:9c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 20:01:49 2024 by rpki-client on console-fra.rpki-client.org