Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9226ae08-c759-3a7a-b17b-4d72f55ed057.roa
File:                     9226ae08-c759-3a7a-b17b-4d72f55ed057.roa (raw, json)
Hash identifier:          w+ism8iGczIvo6m6FB2hZ0z/3MPvE31Rv4FWmoT4a4o=
Subject key identifier:   5D:2F:CF:98:7B:49:2A:45:C2:CD:81:C9:B0:BF:C6:4D:BD:B0:C6:CB
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584598FE00BC19BF30B957AF3180
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9226ae08-c759-3a7a-b17b-4d72f55ed057.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     1225
IP address blocks:        2001:418:1456:b15::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:00:bc:19:bf:30:b9:57:af:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=195ab519-3137-4ceb-aee8-df857597d9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d0:dd:f3:d0:cc:67:8f:fe:fc:78:7a:de:3b:
                    11:0f:fd:57:ee:12:03:ae:4c:ac:36:a9:ab:f7:a8:
                    28:7b:b0:07:57:9e:b4:71:60:23:9c:1d:90:5d:dc:
                    88:e5:98:5b:15:19:3a:66:1f:92:d2:c9:4d:07:c7:
                    78:56:52:85:47:4f:9f:46:bc:86:c6:41:75:53:be:
                    1e:e9:9e:ad:d9:39:4d:5a:89:35:75:ec:62:78:89:
                    9b:aa:d6:58:70:5b:53:64:0c:c2:31:8d:67:dc:60:
                    7d:1a:32:00:c0:69:c5:f4:42:29:de:11:c3:f8:b6:
                    5f:9d:52:ec:ad:ab:6d:c8:50:00:85:1f:58:6d:7a:
                    f2:2d:76:e8:68:05:91:97:8d:e0:95:5b:7d:3e:d2:
                    76:42:06:5f:6b:6d:5e:08:8f:b2:7b:2b:9b:80:e1:
                    bf:31:d6:b2:70:ac:f7:a6:1c:ab:fe:ab:b6:4d:37:
                    5a:71:34:f5:cc:65:9a:26:69:1b:7d:2c:a4:46:65:
                    c7:29:31:99:ae:fc:23:5f:6f:b1:3b:0f:1e:bc:cd:
                    64:9f:a7:57:63:ca:03:15:fb:1b:e7:d3:14:a4:ab:
                    c6:ec:42:e8:bd:10:02:88:bc:d6:32:ba:68:fa:0f:
                    5b:96:c9:22:dc:54:16:08:38:2b:82:2d:c9:f6:61:
                    19:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2F:CF:98:7B:49:2A:45:C2:CD:81:C9:B0:BF:C6:4D:BD:B0:C6:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9226ae08-c759-3a7a-b17b-4d72f55ed057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b15::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e5:45:29:c3:31:cd:97:4b:57:ed:67:d1:74:7e:1d:28:bb:
         99:f2:98:38:a5:cd:2b:0d:8b:0a:cf:2e:d6:a5:61:0a:2d:25:
         4a:67:9e:e2:06:6b:cd:fe:9f:22:ad:aa:25:16:b6:48:c1:9c:
         ad:3b:af:a5:55:cd:51:d3:e4:f3:c3:8c:65:15:54:a2:d7:b9:
         d9:e1:7f:21:7e:67:99:2e:ba:11:ff:82:46:4c:84:55:b4:43:
         22:61:37:81:9d:85:a0:0d:2d:06:e3:cf:da:64:1f:61:db:71:
         55:fb:c0:12:38:f6:27:55:21:d6:8f:c2:c7:b8:bc:66:b1:16:
         d3:59:fb:79:9b:93:a2:0b:96:88:eb:d0:f6:47:fd:6a:35:f5:
         3b:79:5c:40:5f:6d:7c:a7:ad:0e:12:a8:f5:14:d5:d0:74:32:
         ff:1c:92:7d:75:89:cf:53:e3:60:8f:28:75:69:81:e1:37:59:
         9f:fa:dc:44:5d:4a:5b:61:c6:a1:ae:cb:f7:54:be:98:5c:6f:
         75:41:31:a0:f0:9e:8b:6d:4c:3a:e2:b6:83:c1:2c:e5:2a:34:
         57:fc:fc:ef:8a:79:36:15:82:de:92:e6:33:81:8c:51:41:1e:
         97:02:bf:88:c1:d8:f7:cb:68:6f:aa:e2:a6:ca:22:ea:e1:10:
         49:7c:7e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:12:51 2024 by rpki-client on console-ams.rpki-client.org