Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f96cc407-22ca-36c2-bc49-8e9bdc260e55.roa
File:                     f96cc407-22ca-36c2-bc49-8e9bdc260e55.roa (raw, json)
Hash identifier:          C8RPWeqPcMVNohJXH9SpvAizMWGFCwk0f//X5Xl8xRY=
Subject key identifier:   64:76:CC:3B:B1:91:12:1E:3D:8C:3C:C3:20:FD:CB:38:1A:E3:CE:1C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16AB8516A5C
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f96cc407-22ca-36c2-bc49-8e9bdc260e55.roa
Signing time:             Tue 14 May 2019 21:48:24 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     3927
IP address blocks:        2001:418:8006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6a:b8:51:6a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=f9c273d6-1230-45cf-944c-b239637908f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:ed:89:54:3f:88:13:5c:f4:0e:21:d7:82:
                    bf:6f:1d:f6:88:e2:14:ce:8b:71:ca:86:ab:ae:3d:
                    f2:64:89:fc:c8:00:42:3d:6f:e2:59:48:0d:dc:18:
                    94:de:71:28:34:e5:23:56:08:87:2e:51:cc:17:74:
                    94:14:5e:b7:a4:4e:ea:15:1f:45:98:62:30:94:59:
                    9b:10:c6:01:c5:56:e7:f6:c2:55:30:b8:46:56:65:
                    83:ba:84:78:9a:80:59:2e:53:01:40:79:60:37:00:
                    62:37:ce:7d:7c:c9:bb:1d:b5:95:08:db:e8:2e:1c:
                    b8:5c:48:41:cf:be:c1:dd:1a:58:ce:27:96:8b:81:
                    6b:a7:b3:ce:a0:1f:d4:ed:34:e5:33:6b:68:8d:83:
                    4e:49:00:41:a7:5a:23:14:fb:34:d9:94:20:11:5a:
                    1e:cb:11:ec:40:02:27:66:a8:e7:73:40:f5:e7:b8:
                    aa:60:6f:fe:ad:04:0f:6e:81:a6:10:ad:de:b6:c5:
                    98:b8:c5:b5:bc:78:cb:d8:55:ea:6d:d8:4f:b0:0b:
                    18:cd:48:86:91:44:3c:9e:09:9d:56:40:3d:da:11:
                    d6:ba:20:b0:ee:1d:16:36:47:f4:73:e9:73:14:bc:
                    13:d1:d1:1c:e7:c9:ac:73:f8:8b:ae:87:72:ef:b5:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:76:CC:3B:B1:91:12:1E:3D:8C:3C:C3:20:FD:CB:38:1A:E3:CE:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f96cc407-22ca-36c2-bc49-8e9bdc260e55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:8006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:bb:84:9b:ed:80:46:49:37:67:93:b8:44:58:08:b6:68:60:
         05:39:2e:03:80:b7:a5:b4:50:69:10:46:e0:65:b8:5e:68:64:
         3b:c7:48:ce:b6:27:d1:5e:59:4b:4d:55:f7:8a:c6:7b:87:22:
         4b:2a:0a:8a:11:09:a1:64:c0:b5:93:c1:8d:18:da:9b:b4:90:
         e3:c5:7b:5e:cb:03:a8:b7:a4:79:75:19:f0:01:5b:69:06:64:
         67:d7:65:21:2d:7e:53:05:ae:55:04:21:38:c2:6e:db:2d:e2:
         48:a7:9f:7c:e0:cb:10:37:8c:d4:75:7f:cd:83:a2:75:71:f6:
         2a:7b:cd:a3:2b:7a:11:66:39:eb:ff:8a:82:c7:7f:18:e9:8e:
         76:2f:ca:7d:d6:f2:17:14:08:a0:53:b7:5a:ba:45:49:10:35:
         00:ae:be:31:c0:cb:75:d7:45:09:92:b8:38:15:85:86:b0:ac:
         99:72:45:c3:99:a6:ed:89:9b:14:cd:13:f9:0a:3c:ed:f8:1b:
         3f:31:f7:14:3b:f0:99:60:70:b5:27:c3:87:d6:34:6f:2a:c0:
         65:49:d5:96:60:b8:8b:45:f0:40:e9:bc:4b:47:1c:19:ec:b3:
         0b:07:76:ab:e0:48:5c:06:69:67:0a:71:dc:8d:1b:43:ea:6c:
         78:f7:80:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:20 2024 by rpki-client on console-ams.rpki-client.org