Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa
File:                     885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa (raw, json)
Hash identifier:          Z3Vb6hYHQGbc01GynZv68V0QheaPOmjhpuqSOw5cZcw=
Subject key identifier:   09:DA:D5:82:8E:31:A4:95:BB:0F:36:72:5D:8D:A7:63:CC:AF:DB:3F
Certificate issuer:       /CN=acd38b39-740a-4881-b923-26d1a20ffbfe
Certificate serial:       010D0C9F4328584523DAF8ED81B5D794DA092A00
Authority key identifier: E9:0D:0F:ED:47:FD:7A:07:EE:45:AF:63:02:94:4A:39:11:B5:BB:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     33724
IP address blocks:        2604:240::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:f8:ed:81:b5:d7:94:da:09:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acd38b39-740a-4881-b923-26d1a20ffbfe
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=f437142d-70c0-4cf1-8b5b-a1689faa4868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cc:6f:3d:9d:1a:70:8c:a8:20:41:bc:1c:50:
                    0b:a2:3a:85:ee:57:44:38:85:b6:44:be:9c:00:0e:
                    4d:39:98:5f:24:07:e4:44:fe:a7:70:2c:95:72:fd:
                    1c:e1:f9:69:a8:03:1f:1a:76:9e:f9:21:c6:79:fc:
                    a8:59:d8:0b:58:d9:0c:b7:c1:0c:25:2b:33:df:6e:
                    35:b1:ce:d3:7e:9a:bf:7f:1f:d0:9c:2c:29:63:f1:
                    1c:cf:c1:85:76:b1:81:b2:01:a1:de:8f:5d:e1:cc:
                    bd:1a:be:5b:d2:98:0a:e1:0d:c5:c1:d3:30:6e:d6:
                    1a:69:f7:dc:5a:c7:cc:85:6c:47:92:f4:7e:ef:6b:
                    f7:d1:fe:86:0e:73:71:ae:d5:b3:f0:65:99:44:ff:
                    65:d3:c0:2f:15:70:74:2f:48:be:20:1a:de:74:30:
                    f9:87:c8:53:bb:21:d2:f5:e4:67:9d:cb:e0:02:e6:
                    ca:20:d3:88:fd:c5:ab:09:00:fe:dc:3e:bc:af:25:
                    ba:97:48:e3:5c:5d:c2:51:c0:15:e4:4c:72:57:0f:
                    ad:02:54:87:d3:bb:f2:17:4f:89:fb:1a:1b:f3:22:
                    d6:32:6e:d1:d8:d6:73:72:45:ee:4c:44:6c:af:f6:
                    af:9a:fc:f7:d9:4f:63:1e:aa:14:9e:da:b7:2a:eb:
                    3e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DA:D5:82:8E:31:A4:95:BB:0F:36:72:5D:8D:A7:63:CC:AF:DB:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.crl

            X509v3 Authority Key Identifier:
                keyid:E9:0D:0F:ED:47:FD:7A:07:EE:45:AF:63:02:94:4A:39:11:B5:BB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:a1:96:ec:4c:86:44:0a:98:b0:93:78:29:96:73:15:d3:a3:
         0e:a5:5b:dd:fa:fd:96:7c:10:41:3d:e1:e3:64:bd:4b:4c:9c:
         c0:33:7e:e0:d3:9c:2f:69:60:35:6b:d2:c7:45:f0:40:cf:35:
         09:23:51:e5:fb:a7:6a:3d:34:07:54:2b:ab:1c:46:1f:9a:f8:
         91:2f:82:75:08:3f:6b:92:fa:e8:42:7f:ed:83:23:77:13:2c:
         d2:58:99:34:3d:86:9b:d3:ef:ab:b1:93:51:e6:e6:69:8d:bd:
         25:21:c8:30:70:b3:fe:a4:be:6b:82:35:3c:38:87:14:77:4b:
         d6:97:af:94:25:2c:b5:a3:c0:c9:45:d7:93:ae:99:23:1c:54:
         a9:26:8c:7f:23:97:2d:2a:00:16:c0:fe:c1:a8:0d:c6:a4:9d:
         61:bf:51:6b:0a:f1:01:ab:e3:41:04:d0:1a:8f:7f:33:a6:2f:
         9f:96:13:7b:e9:ab:3d:8a:95:ad:10:df:68:fa:21:f4:fd:fc:
         7b:02:38:14:e2:75:3d:6c:2d:11:f0:12:20:e1:ca:8e:8f:5c:
         e8:ab:52:e3:80:00:b7:11:fd:88:40:e5:18:f6:a4:65:cf:70:
         0c:e0:d7:a8:d4:d2:85:f7:f0:ba:a0:c6:b2:29:a7:62:b0:24:
         9d:07:bb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:10:56 2024 by rpki-client on console-ams.rpki-client.org