Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa
File:                     1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa (raw, json)
Hash identifier:          Pimh4z85zKxC7DX6QDEzV5BvVtq5IdMwfB1ZfTI7+/s=
Subject key identifier:   DF:97:FC:D0:B5:69:26:DB:81:8C:87:FB:C6:C3:20:7E:47:9B:EB:03
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858459A6350EB6D176AB130AE7A40
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     397601
IP address blocks:        2001:418:1456:b20::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:50:eb:6d:17:6a:b1:30:ae:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=9239a4d6-4cc7-41cc-a645-802f7b6f33bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:bf:16:a3:a3:c0:39:97:5d:76:5d:c9:1e:
                    54:0a:9e:83:ac:6a:40:f6:ea:70:d9:9e:dc:16:fa:
                    87:86:bb:25:71:c9:8b:0e:91:dc:2f:58:c4:34:f0:
                    a2:90:55:ac:44:df:6d:a8:75:7d:c9:c7:51:bf:a1:
                    5f:30:9e:d3:08:23:cb:f5:ff:ed:8d:61:30:6d:cd:
                    56:67:2f:bf:4b:e8:3c:b4:2e:08:e2:0e:28:f5:82:
                    83:c7:40:53:47:fd:84:c2:08:86:f9:33:a6:fb:c1:
                    34:68:3f:51:ab:68:ff:a6:ee:e9:4f:7a:85:8a:79:
                    1c:65:88:ed:7b:01:f9:fd:a8:c7:61:b2:6c:c3:29:
                    12:6a:35:43:5d:2d:34:69:c3:11:a2:ce:ba:30:6f:
                    af:fd:d1:0d:07:44:ee:28:7e:1a:1d:1e:0b:4b:3a:
                    c6:6a:7a:7a:6e:65:b4:33:d6:5c:fd:f6:ef:90:cc:
                    db:c6:93:25:56:d3:7e:ed:77:61:01:4d:73:d6:00:
                    8d:ac:87:dc:40:ba:26:0e:ee:69:4b:1a:27:6e:ea:
                    9f:73:f3:2e:b9:31:bb:d3:5b:a7:8b:da:c1:c3:ca:
                    2e:78:35:ff:06:54:14:d7:07:c3:ce:f3:16:1b:92:
                    86:42:48:1c:d5:ed:1a:fb:d7:1d:07:30:44:26:5f:
                    d9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:97:FC:D0:B5:69:26:DB:81:8C:87:FB:C6:C3:20:7E:47:9B:EB:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b20::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c6:69:37:29:f9:cc:d2:b4:3a:7e:2d:0f:ad:47:4c:cb:2d:
         8f:d4:0d:ea:8c:c4:e6:2a:4e:3c:ea:70:99:5c:1b:7d:95:fa:
         50:58:f2:fe:54:61:98:91:53:99:9c:af:61:a7:46:0a:7a:93:
         bb:65:ac:02:c9:16:51:fe:66:15:e5:1a:e1:23:f4:28:3e:75:
         b2:a7:be:ce:5f:42:d1:c7:ca:36:1a:b0:c8:a2:e3:9a:ff:bf:
         05:c5:65:4e:ac:e2:ad:a3:db:c6:f1:1b:da:40:5e:96:1f:e1:
         18:53:a9:05:94:ca:2b:16:a5:83:62:6a:4a:1f:aa:76:11:08:
         ee:f3:85:cd:af:dc:04:73:10:ff:4a:66:7d:8b:4f:7a:ca:9f:
         2a:a2:11:06:b7:5a:c7:cd:f3:c4:6a:a1:16:5e:cf:d1:9f:cc:
         fe:05:82:9e:fd:0b:ea:c8:f9:cb:60:07:31:ab:85:4f:08:e5:
         ef:4a:f9:e0:f2:d1:16:d4:50:52:6e:c8:83:cc:53:30:b1:43:
         d4:25:18:c5:b8:b6:0a:a2:1e:e3:8c:d1:0f:de:f7:f6:bd:0c:
         eb:a0:eb:b1:6a:8a:0f:80:a7:de:29:0c:20:55:4e:cd:70:24:
         06:f9:e9:59:b2:01:08:51:bf:58:37:2e:47:fb:ea:24:43:b3:
         ef:3c:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:48:33 2024 by rpki-client on console-fra.rpki-client.org