Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa
File:                     0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa (raw, json)
Hash identifier:          gPqaKrEu4inHtAKoaanyCHJD3N4HReigtw3PtWBiE1I=
Subject key identifier:   14:E2:49:66:B1:B1:51:76:FB:BD:E3:F2:DE:0B:E2:0E:97:1B:C2:EB
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F432858453528AAC73D2ACA2697493A00
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa
Signing time:             Thu 14 Mar 2024 18:45:51 +0000
ROA not before:           Thu 14 Mar 2024 18:45:51 +0000
ROA not after:            Wed 12 Jun 2024 18:45:51 +0000
asID:                     4213
IP address blocks:        2604:4040::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:28:aa:c7:3d:2a:ca:26:97:49:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Mar 14 18:45:51 2024 GMT
            Not After : Jun 12 18:45:51 2024 GMT
        Subject: CN=b2e684db-132f-4ed9-b330-218675c4ad28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:4b:2e:4a:ec:ef:e6:c9:2f:74:fa:ff:d8:
                    2b:33:df:5f:2f:dc:cd:de:a2:b0:28:1a:75:79:61:
                    4d:77:4f:d1:cd:c6:36:85:e8:3b:c1:71:c9:87:18:
                    64:d7:ef:78:3f:da:58:47:14:cf:89:38:6e:b6:10:
                    6e:5c:d3:97:20:a2:a9:a8:aa:75:cc:b5:15:ba:00:
                    9d:d6:e1:82:83:6c:a3:ad:1b:d8:55:14:17:83:2c:
                    d8:30:8e:ed:6e:f7:33:89:57:97:00:a7:12:28:bb:
                    4f:32:57:c5:26:84:93:35:d2:22:8d:fc:e5:1b:4d:
                    02:56:44:20:ce:54:01:a7:e9:dd:2c:51:d3:04:ce:
                    0b:6e:41:e2:85:73:78:7a:13:c0:f5:11:19:c3:f7:
                    5d:28:77:39:13:b1:8d:1b:89:fa:d5:eb:a1:46:3a:
                    fd:65:51:19:a5:1c:62:aa:75:86:58:af:bd:19:a7:
                    90:45:8b:8b:bc:c8:b6:3c:1a:5c:59:77:35:91:17:
                    8f:17:e7:79:8c:57:b0:da:54:53:de:ec:6d:e0:6c:
                    bb:01:09:15:d6:f6:57:64:9c:09:7b:e8:36:39:c3:
                    8e:21:d7:8a:21:55:5a:29:0d:1f:de:82:14:35:75:
                    5b:89:b3:af:2f:61:cd:1e:f0:3c:bc:0e:66:ca:6a:
                    87:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E2:49:66:B1:B1:51:76:FB:BD:E3:F2:DE:0B:E2:0E:97:1B:C2:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:50:73:7e:6b:e2:c2:81:56:46:26:2f:b1:90:19:23:c2:27:
         34:e5:e5:b4:df:fe:77:1d:5d:11:32:80:c1:8d:44:6b:a1:de:
         77:a5:5b:5f:35:46:30:3e:92:e7:2a:b5:13:bc:25:e8:af:63:
         0c:be:0e:94:56:3f:5b:a2:c6:71:cd:27:5e:d5:67:05:ad:8d:
         e0:75:55:e8:66:3e:83:53:d4:69:b7:9a:58:c8:2c:29:fa:03:
         c9:f0:0b:6b:29:7b:89:83:24:aa:d4:3c:0b:a6:00:e3:28:88:
         5d:a5:ec:be:85:aa:55:cf:0f:64:cb:2b:cc:0a:84:cd:07:53:
         a0:2b:ab:73:31:2c:3d:1e:fd:5f:87:d8:72:66:3a:69:42:67:
         ac:51:d3:08:4e:bf:e5:80:62:c5:59:80:61:cd:2d:12:53:23:
         14:8b:37:da:ae:c3:e5:ba:b7:87:94:e1:f4:9f:96:e4:91:4f:
         69:68:88:69:8e:ad:0b:65:84:80:64:dd:1d:89:a0:81:10:72:
         6e:70:d5:a0:56:a5:af:76:9a:14:c9:f3:a7:0d:63:e6:8c:17:
         2f:f6:6f:c5:98:e5:f5:f7:37:02:e2:91:c6:05:0c:1e:11:6a:
         f8:3d:a2:3b:37:46:13:b7:53:3e:5c:27:36:a4:93:f4:12:6e:
         d5:6a:d4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:18:42 2024 by rpki-client on console-fra.rpki-client.org