Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa
File:                     7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa (raw, json)
Hash identifier:          A6vawXoOHfXLCV/RE1EBc0ZKp1iW1Nlfil9jjPSzMuI=
Subject key identifier:   B3:F4:C4:8A:21:F9:20:C2:4D:C1:D8:63:2F:E0:A1:FD:31:06:A1:F2
Certificate issuer:       /CN=4091c99f-9cd5-4db2-8733-67e22036ebb5
Certificate serial:       010D0C9F43285845131AE2958771DC59A09ECD00
Authority key identifier: 9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa
Signing time:             Sat 02 Mar 2024 14:00:31 +0000
ROA not before:           Sat 02 Mar 2024 14:00:31 +0000
ROA not after:            Fri 31 May 2024 13:00:31 +0000
asID:                     32274
IP address blocks:        2620:11b:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:13:1a:e2:95:87:71:dc:59:a0:9e:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4091c99f-9cd5-4db2-8733-67e22036ebb5
        Validity
            Not Before: Mar  2 14:00:31 2024 GMT
            Not After : May 31 13:00:31 2024 GMT
        Subject: CN=06ecd44e-b4f9-4314-99d1-2e77aaa56fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:d9:58:0b:4e:71:f4:dd:fd:ec:09:64:1d:
                    c6:72:88:dd:a5:b5:82:8e:76:38:b9:18:11:79:99:
                    5f:54:ee:e0:4e:56:dc:0a:7e:93:99:35:b4:39:db:
                    a2:82:fe:8f:a4:a2:d2:78:16:1e:18:45:d1:86:ec:
                    4e:38:0d:69:32:3d:4e:f5:7a:fa:92:2e:a3:4c:e8:
                    0c:1e:6c:72:c7:aa:b3:86:dd:00:55:6b:ed:e9:68:
                    7f:de:d5:6f:e1:ed:57:1b:3e:59:75:47:26:ce:bf:
                    bf:ff:5a:e7:e5:fc:7c:5f:42:e2:0a:ff:be:28:45:
                    84:de:43:46:c3:5a:79:fe:68:19:a8:f4:5e:28:f3:
                    5b:5a:11:c5:fd:57:18:77:f8:c0:e3:bd:b9:5f:d2:
                    ff:55:a0:cb:c7:54:e4:88:55:b8:94:bf:e0:70:4c:
                    47:dd:0e:09:e5:0b:25:cc:1c:fe:d5:27:1e:26:8c:
                    b8:17:b7:b6:b4:b0:67:6d:db:93:fe:ff:5f:77:a0:
                    c3:1a:29:db:d8:f5:74:59:79:f5:08:89:83:85:25:
                    b0:a1:1c:be:0c:13:1e:b8:95:4a:1f:c8:e5:32:b4:
                    c3:bc:f3:b3:5e:d3:2f:f4:0e:1f:0b:eb:f7:66:98:
                    a0:88:7a:d5:43:e4:47:0b:c3:63:d1:77:dd:54:2f:
                    ac:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F4:C4:8A:21:F9:20:C2:4D:C1:D8:63:2F:E0:A1:FD:31:06:A1:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl

            X509v3 Authority Key Identifier:
                keyid:9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11b:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:31:11:b2:c8:0d:02:fa:af:30:13:de:81:2c:a0:a5:37:2b:
         14:0b:44:fb:52:d1:9d:dd:53:41:dd:75:4f:40:d1:ac:6f:b4:
         b8:d5:68:ef:39:68:15:a0:fb:d6:28:e3:f8:e0:13:85:0d:44:
         37:a1:6a:c8:51:d6:b9:21:4c:4c:d3:7a:97:56:97:7c:d6:ef:
         22:8d:cb:4d:5f:a0:1b:97:80:10:ba:f0:5a:a4:a3:9f:b3:5a:
         cd:e8:10:c7:73:e2:0b:94:d8:43:5c:74:4f:ef:34:99:4a:a5:
         2c:a4:e4:2a:d4:8c:bd:c9:5c:85:63:24:66:9a:fe:bb:43:32:
         16:9c:e8:14:fb:6a:10:b7:fd:f8:91:a3:06:f5:e7:d8:5f:a4:
         6a:1b:75:b4:0f:07:d1:8d:46:51:e7:73:5b:d2:a5:17:92:cd:
         a3:57:8f:b1:5a:68:55:41:6f:93:48:75:37:06:23:02:a5:c8:
         2b:9f:2b:37:97:5c:e2:f4:62:2d:1c:6b:b8:d0:6f:39:7a:80:
         b7:3e:a9:72:8d:af:8b:5e:6b:6b:49:8c:98:ab:15:ab:09:8f:
         74:1e:78:47:e5:7e:1c:d6:bf:2f:28:48:69:8e:5f:ae:5e:2a:
         66:bf:c6:88:35:7a:30:66:de:d9:ec:11:fe:d4:da:46:4f:35:
         42:94:50:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:06 2024 by rpki-client on console-ams.rpki-client.org