Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa
File:                     fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa (raw, json)
Hash identifier:          FjGurlqflNLh2p4yBLWANd18bv702nAJchMu/XuPfcs=
Subject key identifier:   3E:33:A8:12:A8:9D:90:C9:A0:96:97:D6:02:08:B5:29:54:68:D3:6B
Certificate issuer:       /CN=6f206706-c108-40c1-8f2d-14fbbf92d951
Certificate serial:       010D0C9F432858453B77F881A9BEED86F78D2F00
Authority key identifier: 1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa
Signing time:             Sun 17 Mar 2024 01:00:26 +0000
ROA not before:           Sun 17 Mar 2024 01:00:26 +0000
ROA not after:            Sat 15 Jun 2024 01:00:26 +0000
asID:                     32484
IP address blocks:        2607:2ac0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:77:f8:81:a9:be:ed:86:f7:8d:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f206706-c108-40c1-8f2d-14fbbf92d951
        Validity
            Not Before: Mar 17 01:00:26 2024 GMT
            Not After : Jun 15 01:00:26 2024 GMT
        Subject: CN=f01b4306-680b-4a4f-b129-9fdc39c88e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d7:8a:b2:38:dd:4a:19:06:00:f4:1c:3e:14:
                    41:af:91:29:89:b5:1e:ae:f1:af:4d:aa:f8:62:fa:
                    ce:50:b9:c7:96:56:4d:a7:3f:21:25:3f:36:03:40:
                    01:61:f3:69:48:80:ee:43:35:84:bc:a0:14:cd:6f:
                    9c:b6:02:d9:c7:28:1b:4d:e8:11:ef:d7:9c:24:2a:
                    75:c4:a3:61:fd:c2:ad:88:d3:f4:7a:3a:c3:4b:3d:
                    19:9b:d9:81:50:41:4a:d0:d0:1c:90:ee:4f:7f:b2:
                    93:77:c2:4d:68:04:90:12:a2:c2:5d:a2:ba:95:84:
                    9c:90:0c:bd:e1:8b:18:4e:97:72:3e:49:7e:31:db:
                    1c:4a:38:8b:7f:5f:bc:10:d1:9a:d6:1a:15:8a:61:
                    de:5e:28:97:bd:1f:d5:a5:55:23:9e:98:41:5b:aa:
                    25:90:0c:c7:a9:f1:45:42:5a:5b:ff:b1:4b:5f:f4:
                    0a:3c:5b:09:09:55:69:19:09:df:ed:39:40:9b:27:
                    d0:5a:b4:ab:e6:c8:70:af:25:fd:cc:93:e6:73:4e:
                    07:94:8d:0a:94:8b:d7:80:80:aa:6b:76:19:3e:09:
                    f9:5e:75:f7:b6:2a:2b:e9:5b:3a:f1:7b:9b:e0:46:
                    42:de:13:0f:95:64:ca:f8:60:fb:b8:fd:b1:32:21:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:33:A8:12:A8:9D:90:C9:A0:96:97:D6:02:08:B5:29:54:68:D3:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl

            X509v3 Authority Key Identifier:
                keyid:1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e6:b3:db:bd:0e:17:00:f2:c1:65:6d:8e:1d:c8:06:05:69:
         79:24:5e:d3:99:fd:0b:ae:8b:c5:6f:bf:6b:04:68:76:e5:c5:
         9c:66:59:ff:39:a9:dc:d8:a5:20:3e:b3:4f:be:04:bd:02:65:
         e4:59:32:71:aa:62:00:ad:37:d0:76:93:33:5f:16:be:c7:bc:
         7b:ef:0b:ab:e4:fa:4b:22:e6:e9:dc:62:36:83:d1:c9:8f:14:
         e7:73:22:27:13:fb:1e:0d:96:2f:86:20:04:88:19:8c:01:1d:
         f1:c8:f2:24:4a:e7:60:6f:66:77:68:03:ce:d4:79:33:82:23:
         06:6c:26:00:8f:c3:6d:b6:fc:15:28:64:ce:30:1f:5f:48:55:
         cb:36:35:ab:4a:d9:7e:8b:22:f3:c7:97:e2:fb:b3:f1:af:1e:
         d2:b3:fa:04:d8:b5:9a:c5:b8:88:95:c5:f7:63:5d:9f:bc:9e:
         6e:dd:a4:c6:ad:37:f6:3a:0c:41:ca:77:36:54:54:c0:e1:14:
         23:ce:cb:7d:81:1f:f1:4d:c6:74:65:2a:3c:f1:49:a0:42:dc:
         e6:97:73:c3:43:62:f1:a8:01:56:d7:10:4a:62:27:ab:9f:1b:
         9c:35:39:98:85:93:d4:7a:0c:80:32:69:d5:26:d4:fc:3c:9c:
         0b:e3:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:33 2024 by rpki-client on console-fra.rpki-client.org