Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/945ae9e7-bab7-38eb-ac3b-3300c1bd27ef.roa
File:                     945ae9e7-bab7-38eb-ac3b-3300c1bd27ef.roa (raw, json)
Hash identifier:          f5GIHTscc9Ukv4BWswKlx1aAEHnJD4/dh3yygfs4QwA=
Subject key identifier:   A8:36:41:15:2D:9A:CE:30:2A:1E:64:FB:AC:75:5B:07:3A:73:D9:3D
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285845CBCE30DDF8590C420B684A80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/945ae9e7-bab7-38eb-ac3b-3300c1bd27ef.roa
Signing time:             Tue 07 May 2024 17:50:37 +0000
ROA not before:           Tue 07 May 2024 17:50:37 +0000
ROA not after:            Mon 05 Aug 2024 17:50:37 +0000
asID:                     11232
IP address blocks:        2605:4a80::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:ce:30:dd:f8:59:0c:42:0b:68:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May  7 17:50:37 2024 GMT
            Not After : Aug  5 17:50:37 2024 GMT
        Subject: CN=7fba0ea6-6564-4e78-9597-52dd00ab1b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fa:a8:82:10:59:34:88:b0:14:08:6f:ed:2b:
                    46:87:59:31:eb:14:1d:86:f0:5f:6b:74:84:cf:27:
                    fe:e0:6b:dd:bf:33:ab:42:20:b0:c0:92:e2:94:8a:
                    30:83:1f:c0:bb:2c:f2:16:1f:94:4d:d3:fc:d3:4c:
                    a0:91:5a:9d:63:16:0c:e6:40:f4:05:09:64:7a:6b:
                    7a:b9:ce:eb:e8:22:ca:f6:b6:48:04:0c:40:4c:84:
                    c4:65:e6:dd:34:20:59:29:11:11:1a:24:28:91:34:
                    86:9e:f4:04:ef:43:8a:4c:19:dd:da:0a:a4:5f:86:
                    b9:33:66:47:f6:64:e6:23:97:df:12:1f:95:69:cd:
                    43:7a:21:4d:f6:f9:5e:d5:54:04:c5:58:80:5c:47:
                    89:aa:04:8c:9d:0f:8e:ea:32:44:53:d2:ea:35:2b:
                    b2:3c:33:2a:43:b1:51:0d:fa:d3:5d:66:b8:4b:e3:
                    c2:c0:e7:f4:34:66:3d:66:74:3d:8b:03:25:6a:2d:
                    ff:8b:d4:76:88:eb:24:16:bb:9d:85:29:85:cc:b1:
                    8d:a5:b8:f9:30:1f:dc:0f:50:29:70:cf:24:a8:e4:
                    c4:52:35:6d:e4:4f:dd:30:4b:a5:7f:32:f8:8f:ea:
                    e8:b6:40:0b:6e:85:df:7a:bd:a2:e5:6b:8f:71:5b:
                    ca:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:36:41:15:2D:9A:CE:30:2A:1E:64:FB:AC:75:5B:07:3A:73:D9:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/945ae9e7-bab7-38eb-ac3b-3300c1bd27ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8d:c0:24:25:1d:63:c0:da:88:92:16:01:b8:6c:44:e0:90:
         a7:e6:bb:84:56:9d:f2:cb:00:4b:bc:7b:67:b8:eb:c7:d0:65:
         b5:27:d0:8b:8a:64:b4:8e:26:0b:d1:60:a8:5a:c8:13:c4:07:
         91:db:4b:07:53:d9:36:70:a3:4b:e8:6e:d0:5f:83:50:a0:0b:
         c6:e1:e2:94:d3:97:a2:81:de:43:8f:08:9b:7a:bf:47:63:55:
         eb:ad:aa:ba:f3:1e:ea:0f:a6:96:c5:70:32:08:05:f1:aa:1a:
         9f:48:06:35:f1:5c:9b:84:55:50:58:78:5c:f2:d5:d6:e3:33:
         b0:4a:6a:b3:61:b7:25:48:38:c0:f9:13:ed:59:40:33:76:bd:
         01:43:7e:bd:61:04:59:0e:91:73:39:2a:a7:ba:d2:f2:c0:84:
         d2:28:13:b4:85:ab:14:f6:23:34:06:43:dc:d8:39:b5:f3:bf:
         4b:c1:5e:7d:32:01:49:fc:2e:42:a0:45:90:d2:9c:8a:8e:13:
         79:f0:b8:ad:9a:f4:ae:12:d6:5c:48:2d:19:ed:9e:ea:8f:e0:
         f7:5f:54:df:95:77:dc:73:9f:8e:9e:e1:8e:2a:00:b6:75:c9:
         45:4b:35:35:30:fd:62:fb:e0:2c:b7:d6:9b:37:85:3b:7c:ce:
         ab:c1:97:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:35:17 2024 by rpki-client on console-fra.rpki-client.org