Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/7750dbea-23be-30cb-a5c2-247a4b108e61.roa
File:                     7750dbea-23be-30cb-a5c2-247a4b108e61.roa (raw, json)
Hash identifier:          uCAifWCJj/YW3Dq11FsoPdxRpVIz1Cv7q1H2NTnJ2fw=
Subject key identifier:   CE:68:93:3D:60:9A:85:B9:AE:EB:BC:FA:97:00:98:2A:64:50:BB:46
Certificate issuer:       /CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Certificate serial:       010D0C9F43285844CEB50E5E9C2F2254B1CD3C40
Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/7750dbea-23be-30cb-a5c2-247a4b108e61.roa
Signing time:             Wed 07 Feb 2024 02:00:24 +0000
ROA not before:           Wed 07 Feb 2024 02:00:24 +0000
ROA not after:            Tue 07 May 2024 01:00:24 +0000
asID:                     398464
IP address blocks:        2606:8940::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ce:b5:0e:5e:9c:2f:22:54:b1:cd:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba
        Validity
            Not Before: Feb  7 02:00:24 2024 GMT
            Not After : May  7 01:00:24 2024 GMT
        Subject: CN=8f0eb5b3-6dcf-4763-9910-0441c7ed5100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cf:32:f8:ec:6c:a6:4a:37:1d:82:de:3b:44:
                    d7:9b:03:37:54:50:14:f0:ca:34:24:72:d6:8b:28:
                    04:fe:fc:a7:7d:fc:7d:26:b6:a8:fb:f9:70:2c:d2:
                    a2:1d:08:89:f3:74:04:50:15:65:bb:9f:e7:6f:58:
                    dd:8d:14:30:6b:3d:15:2d:82:58:ad:57:13:76:81:
                    a1:0b:da:67:88:53:40:e3:67:45:be:25:0f:31:d1:
                    d9:c8:c3:fc:05:44:0e:70:2c:97:ae:c2:33:a3:79:
                    f3:fe:a2:e8:7c:db:f4:cf:72:9a:69:80:fe:ed:7f:
                    cb:2d:09:1a:b0:c5:bd:ad:86:3e:ad:70:3c:6c:9e:
                    92:16:86:c6:5e:f5:a0:1f:77:59:5c:2c:b4:3b:64:
                    58:4c:bf:a9:d6:03:ea:62:fa:9f:9f:d2:ba:16:0e:
                    6c:13:99:8b:b2:8b:42:9e:73:4d:12:c1:24:a4:69:
                    c7:8e:09:b6:ad:71:20:e5:df:ab:a4:ad:c9:d0:c6:
                    4f:a5:03:8e:b5:7e:7e:ba:77:dc:ab:a7:8e:8c:7d:
                    ef:11:6a:30:7c:b7:a9:9a:81:56:b9:c6:b2:4d:97:
                    77:f7:9e:5a:2e:05:ab:db:c9:c4:d3:5e:80:f5:7b:
                    c1:17:77:37:78:15:23:11:26:1b:68:8b:57:71:4e:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:68:93:3D:60:9A:85:B9:AE:EB:BC:FA:97:00:98:2A:64:50:BB:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/7750dbea-23be-30cb-a5c2-247a4b108e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl

            X509v3 Authority Key Identifier:
                keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:75:75:7f:54:5f:ab:15:6e:17:ea:6f:96:82:7c:c9:4b:35:
         34:a6:e5:88:10:18:b5:f9:fb:8b:9d:ea:93:6d:72:13:b8:ac:
         bd:ec:b8:3a:a5:6e:0d:1f:c4:70:18:0b:e0:33:3c:09:d6:05:
         e5:1e:00:a4:c3:c6:1a:0e:a8:ce:2a:f6:18:bd:42:30:ac:92:
         a8:5f:df:63:39:3f:0c:59:a4:93:5c:90:6c:f5:2c:52:f5:46:
         0c:ab:99:3e:e4:54:b1:60:72:23:ab:26:2d:07:6d:51:67:3b:
         f4:d1:31:74:7c:17:fa:e4:c1:08:64:fd:9a:8e:be:6b:c5:33:
         38:4b:bf:88:a8:4a:4d:8f:30:1c:d6:fb:28:c3:77:95:56:8f:
         03:5b:84:39:1e:7d:0e:f8:e9:c9:da:88:af:50:ec:e1:d4:a6:
         84:91:ce:8a:1b:b9:9b:e8:d1:8e:a0:ca:96:98:11:d3:8d:13:
         50:80:9f:e9:67:80:e4:7c:81:c4:37:07:20:c4:54:5f:c8:19:
         3f:ba:fc:6b:72:51:8f:24:c5:58:1f:e2:5f:bf:cd:0b:c8:db:
         dc:9f:43:13:19:c3:8a:4c:0f:2e:11:7d:e2:6d:42:29:0e:44:
         aa:01:cc:12:08:5d:7a:68:0e:95:6e:30:70:cc:cb:67:8a:71:
         03:57:fd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:47:49 2024 by rpki-client on console-ams.rpki-client.org