Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/749531b8-0ce1-306d-ab5b-80cb73f44b2e.roa
File:                     749531b8-0ce1-306d-ab5b-80cb73f44b2e.roa (raw, json)
Hash identifier:          TnEDUB8vxi0QERbS/yh1/osc1c37izgtC+UN2Ol/aeM=
Subject key identifier:   47:EF:F5:01:19:06:C0:2F:DF:38:5C:91:8E:A5:4F:B1:29:27:1B:6D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285845462FAF4C2FD135667A054440
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/749531b8-0ce1-306d-ab5b-80cb73f44b2e.roa
Signing time:             Wed 20 Mar 2024 21:08:44 +0000
ROA not before:           Wed 20 Mar 2024 21:08:44 +0000
ROA not after:            Tue 18 Jun 2024 21:08:44 +0000
asID:                     45566
IP address blocks:        2620:0:1000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2f:af:4c:2f:d1:35:66:7a:05:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 20 21:08:44 2024 GMT
            Not After : Jun 18 21:08:44 2024 GMT
        Subject: CN=99753fe8-5bfb-4619-87c1-6c588ce09229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1d:88:d1:7a:a6:5a:bd:d8:64:ae:56:39:73:
                    d3:09:5a:4f:42:64:59:a9:88:b7:1e:62:b7:8b:2c:
                    a6:b9:00:46:75:bb:24:22:0d:04:59:a0:c8:a3:9d:
                    cd:c9:b1:f9:ae:87:8f:0c:94:d6:8e:85:39:0a:e7:
                    7d:ab:63:53:c5:b0:1f:1c:83:9e:af:f8:4a:db:3c:
                    ad:06:9f:b9:2e:eb:8c:76:2c:f1:cb:46:de:c8:60:
                    3e:fb:7d:0b:8f:7c:18:63:a2:4c:63:4c:11:94:11:
                    1e:61:b4:41:8b:39:23:ff:01:fb:4e:8f:d3:5a:ac:
                    bc:6c:e4:c5:ab:70:f4:6f:10:16:c8:fa:76:ad:ed:
                    f8:49:07:87:80:0f:c4:65:c4:2b:04:13:bd:fb:c7:
                    ef:13:5b:8c:f1:3e:6b:8a:cb:2d:9d:8c:1d:c1:5d:
                    9d:f2:3c:26:31:17:93:be:62:f9:ed:87:2d:65:6e:
                    48:3c:0b:0f:64:c1:50:19:5b:7f:70:f4:73:a4:07:
                    4e:3a:6b:43:8e:05:6a:3c:ba:14:07:07:d9:e1:c1:
                    ac:5c:c1:f4:8f:d5:f7:ff:69:23:5a:e5:91:da:c8:
                    5e:b6:8e:73:61:77:1b:a6:d1:19:5f:ab:09:ad:7a:
                    81:9e:21:e6:8b:01:c0:a5:7a:ae:4a:63:22:1f:7e:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EF:F5:01:19:06:C0:2F:DF:38:5C:91:8E:A5:4F:B1:29:27:1B:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/749531b8-0ce1-306d-ab5b-80cb73f44b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ac:35:50:a6:95:a6:3c:1f:dc:a1:e6:ce:8e:34:fd:36:82:
         5d:94:75:9e:16:e7:13:92:ea:e8:b7:82:c4:58:bb:bd:83:1a:
         3f:80:a7:51:dc:d0:8b:a2:19:51:ca:ca:cc:9b:98:93:20:79:
         10:3e:59:67:8b:98:de:26:17:42:89:e2:e2:35:2e:f2:80:3b:
         a3:08:a5:57:6f:76:1f:58:94:8e:39:b0:ff:38:02:1b:fd:fd:
         e6:90:fc:ba:3e:27:df:3d:72:b3:87:f9:41:54:d6:7c:30:5f:
         0c:ac:e1:f4:87:a7:9a:c5:69:10:a8:7d:48:00:cd:3c:7a:b1:
         8c:9f:cb:1e:bd:ff:de:3d:ca:f4:fe:79:95:46:67:9f:a1:9f:
         95:1c:8f:29:e5:1e:ae:ef:61:e1:62:47:07:81:01:26:22:45:
         e3:89:ed:d3:0e:5d:01:9c:e6:7e:cf:c3:3d:47:28:a6:f1:1b:
         e7:52:98:7a:26:d2:a4:70:3a:eb:39:17:8e:b9:e9:fc:20:78:
         ed:91:a7:18:c5:38:fb:1d:41:c8:99:d2:50:56:cc:e8:1a:82:
         67:de:57:75:9b:86:3d:0b:ca:62:d4:d5:3f:5a:6b:19:4c:cf:
         36:43:f0:b3:dd:c6:46:af:9a:4a:fa:84:ab:a5:66:ab:aa:e9:
         22:b1:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:32:24 2024 by rpki-client on console-fra.rpki-client.org