Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1b62cd67-aed1-3414-99ea-68b685db108e.roa
File:                     1b62cd67-aed1-3414-99ea-68b685db108e.roa (raw, json)
Hash identifier:          Z+5Nz4ZuNYwFCWF1NDsDB/RiQNZJaq+2+GEDYjG+NrA=
Subject key identifier:   CC:12:5D:73:7B:77:97:87:84:EB:77:B4:EC:C9:BB:C9:C1:9A:F7:7C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858459E935BAAAE12DF1930BD9C80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1b62cd67-aed1-3414-99ea-68b685db108e.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     22006
IP address blocks:        2001:418:1456:b01::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:5b:aa:ae:12:df:19:30:bd:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=00a05d25-cdba-416d-b816-19e091d17cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ec:3c:58:16:b5:34:17:f8:d9:06:82:6c:0d:
                    91:5d:b3:ed:22:78:c8:e0:96:58:0e:b7:af:4d:1c:
                    50:ab:ce:9a:97:1a:c3:8c:88:03:66:05:37:38:d9:
                    54:be:d6:0b:5b:51:17:7f:6f:0d:a0:16:f7:0e:2a:
                    52:8a:c0:05:b1:6e:1a:f7:3e:32:db:fa:e1:d8:97:
                    98:25:24:81:aa:ed:dd:b4:be:24:d8:e3:35:85:d5:
                    47:9b:85:83:c8:b2:b4:49:0c:cc:00:3f:f3:98:f0:
                    31:ca:fb:bf:f5:d9:75:32:00:86:de:03:de:60:bf:
                    f3:4f:eb:9d:26:3d:73:e1:8e:1c:89:f1:af:4c:d2:
                    48:46:d5:82:e4:a2:00:b5:e3:7e:41:67:3a:02:39:
                    9c:93:5d:87:5d:be:d8:97:41:ad:2a:5f:a7:fd:8a:
                    f5:ee:e3:31:b4:62:93:1f:86:4a:c5:b0:f7:72:f0:
                    95:db:25:24:b1:c8:2b:39:45:89:f8:be:d2:39:6f:
                    2b:5a:27:5d:71:5b:a6:fe:17:46:24:b0:f8:30:82:
                    96:b3:de:a4:99:1b:04:c4:2a:8b:19:c9:35:3f:df:
                    be:2c:de:be:c4:91:2c:c2:03:ae:d4:c6:1e:78:2c:
                    f7:48:00:c8:d3:5a:71:ea:0b:36:5d:13:02:8a:6c:
                    32:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:12:5D:73:7B:77:97:87:84:EB:77:B4:EC:C9:BB:C9:C1:9A:F7:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1b62cd67-aed1-3414-99ea-68b685db108e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b01::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0b:66:05:8c:89:c6:38:64:1e:9f:66:9f:e1:7d:7c:4d:27:
         fd:17:d6:cb:68:27:c5:b4:38:09:0d:9b:a7:48:25:df:e6:24:
         52:0d:b5:7e:de:4e:9a:90:c0:32:f6:47:57:b8:29:1a:4a:79:
         5b:2a:9d:f0:e6:4c:fb:f0:5a:cb:87:65:67:a2:ff:a3:ce:23:
         c8:76:30:10:2d:a4:e5:bd:32:0e:27:5d:cd:31:1d:84:c0:75:
         2a:0d:e6:4a:da:d2:a3:1b:1c:0a:79:f8:1c:2e:4e:89:0d:bf:
         18:64:d5:bc:8a:46:36:bc:a7:2a:cb:ac:d7:04:17:95:a0:29:
         7c:5b:53:f7:a6:24:e0:ce:79:81:ac:f0:13:56:7a:e1:a1:da:
         ec:4f:c2:04:a1:ce:e2:c9:fb:e3:ce:bf:d9:8c:01:f4:90:10:
         ed:23:31:15:62:fb:97:3f:e9:4a:70:ab:8c:fc:f5:4c:73:7f:
         d8:6d:4f:a7:3c:09:94:cb:59:d8:c5:cf:cc:82:ab:99:81:e7:
         1f:02:c5:52:16:67:df:0b:e9:c8:05:3f:ce:b3:fe:c6:10:85:
         4b:37:ab:40:96:ee:3c:cd:81:c5:16:cb:bc:66:8a:48:cf:15:
         85:81:5d:4d:0d:fd:fa:1c:48:c5:3d:e5:dd:59:3a:9b:bf:3f:
         a6:48:44:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:37:58 2024 by rpki-client on console-fra.rpki-client.org