Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/1ff99750-2852-34a4-8b88-c6334be24b2c.roa
File:                     1ff99750-2852-34a4-8b88-c6334be24b2c.roa (raw, json)
Hash identifier:          vT2oeFR11ojbLe11YxUPgRkpmbY2twYx2SZJ3Op+3HA=
Subject key identifier:   E5:35:B6:CC:C5:3A:48:9D:4B:28:FC:31:65:45:AF:54:A8:5B:A4:48
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F432858450ABAD4FD9AA430599F8CB840
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/1ff99750-2852-34a4-8b88-c6334be24b2c.roa
Signing time:             Wed 28 Feb 2024 14:00:31 +0000
ROA not before:           Wed 28 Feb 2024 14:00:31 +0000
ROA not after:            Tue 28 May 2024 13:00:31 +0000
asID:                     32133
IP address blocks:        2604:4000:2800::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:ba:d4:fd:9a:a4:30:59:9f:8c:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Feb 28 14:00:31 2024 GMT
            Not After : May 28 13:00:31 2024 GMT
        Subject: CN=fb6b45a1-79bd-41d6-a4c4-c14365fbc04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:65:98:d2:8f:6e:dc:be:f6:83:d0:ac:87:
                    2a:a1:78:b4:a0:15:00:d6:77:4e:a3:1d:3e:94:04:
                    84:1f:d1:89:e2:81:85:7e:68:ea:58:46:e1:b3:3f:
                    15:ab:c3:b9:86:ef:be:fa:db:26:6a:1d:8c:06:05:
                    25:0f:b4:dd:c6:fe:df:6e:9b:76:0a:52:b8:4e:f9:
                    ff:73:3d:b4:61:7a:ec:c5:72:d5:76:5a:27:e5:e6:
                    c1:a9:45:82:6a:63:85:cc:3e:93:9e:55:c6:e7:3f:
                    49:ac:a9:e5:15:17:38:d4:7d:2b:c5:bf:93:d6:72:
                    75:52:da:fd:25:53:5d:e3:75:39:e0:d5:63:ec:4a:
                    be:b8:fb:0a:46:ed:c5:ab:36:dd:a6:4e:d5:d2:fb:
                    f1:57:56:05:2e:bf:d9:35:fc:75:e8:2a:14:71:f8:
                    c5:c8:9d:33:82:f4:62:d1:c7:4c:5f:5e:b4:ef:f4:
                    44:cd:18:7d:fd:1e:19:c2:b1:c9:0e:6e:48:ec:e5:
                    f4:2c:cc:35:64:3c:9e:84:6c:02:5a:e5:1c:f5:b3:
                    83:b3:25:9b:d9:98:b0:9f:58:fd:76:e2:cc:3b:e5:
                    62:ce:c8:ed:ed:1d:b0:34:5b:69:f1:a9:87:a2:90:
                    ce:1b:02:06:23:a9:6d:18:d6:86:c2:8b:16:b5:2d:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:35:B6:CC:C5:3A:48:9D:4B:28:FC:31:65:45:AF:54:A8:5B:A4:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/1ff99750-2852-34a4-8b88-c6334be24b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4000:2800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:6c:e4:e3:68:b1:83:0a:17:0d:f3:11:a8:3f:13:1c:e5:88:
         dd:6d:ed:61:e2:30:2e:97:49:00:91:8c:e7:e8:a2:3f:e0:4e:
         89:77:c2:7c:05:1f:5a:f8:a1:b5:cd:a7:ec:3f:94:32:f4:af:
         69:8a:d6:b7:8a:3b:57:53:90:6f:a6:d4:da:d5:ec:d4:c2:17:
         e5:5b:ed:39:a2:19:19:18:2b:b9:51:81:cf:8f:0d:3f:6d:64:
         3d:56:57:a1:93:ce:6e:d3:76:a4:bd:00:39:00:82:bc:71:71:
         aa:f5:08:62:7d:43:b8:c5:2e:56:fe:b6:04:40:e8:4e:22:fe:
         af:ef:f9:1f:80:94:0b:54:94:ed:41:b8:3a:57:36:39:3a:e5:
         5e:5a:d7:85:80:6e:02:51:4e:ce:6f:46:61:09:9a:90:8a:42:
         ea:2d:c0:4b:9a:ed:e0:48:8a:eb:51:d1:4e:6b:93:75:1e:44:
         97:c0:5e:ba:dd:f2:27:3d:62:39:81:c7:aa:59:ec:82:53:70:
         84:04:b8:92:a8:ec:c4:86:01:fc:b2:bc:e7:df:14:56:2b:89:
         30:e2:96:19:21:df:85:c0:8c:dd:98:12:17:03:3b:f7:73:27:
         4a:f4:29:a5:52:2e:c7:41:45:f9:34:00:85:8d:e7:ab:ae:d6:
         7b:0e:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:19 2024 by rpki-client on console-ams.rpki-client.org