Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/740c2fe1-87eb-3c13-86b3-e821960404e9.roa
File:                     740c2fe1-87eb-3c13-86b3-e821960404e9.roa (raw, json)
Hash identifier:          O4rb/3Zi4VgDPU9pPcfZYB1RW7f6Uc2B1mjrkFVk1vc=
Subject key identifier:   B0:52:6C:61:D7:25:96:C3:A1:B2:B1:AE:B1:7B:02:EE:F9:A1:C3:F4
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F432858459A63444BF74AD820FF6495C0
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/740c2fe1-87eb-3c13-86b3-e821960404e9.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     14929
IP address blocks:        2605:6d80::/32 maxlen: 48
                          2604:d380::/32 maxlen: 48
                          2604:3000::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:44:4b:f7:4a:d8:20:ff:64:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=bf995449-8cba-4afe-8627-2189d61d462d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:94:02:57:7f:a4:5f:6b:df:02:b8:ee:ef:
                    cd:43:1e:78:fb:69:72:79:63:48:0d:51:04:35:be:
                    8a:c6:bb:65:db:69:6c:95:ef:7f:1c:ca:99:af:55:
                    ad:9e:75:86:ef:9f:fe:db:0f:00:e9:77:74:c9:4d:
                    1a:f7:99:28:67:9e:99:ea:58:ba:4f:e6:eb:ed:65:
                    15:a5:be:8b:ec:cb:6f:d5:64:8a:3c:26:9a:ea:33:
                    58:1e:df:f3:75:71:f5:07:24:aa:ea:f3:74:20:ea:
                    2d:6d:32:5a:5f:d9:05:16:16:6f:7a:92:28:d1:2d:
                    23:67:44:06:c9:4b:87:5b:cd:4d:44:6d:49:e9:b5:
                    ff:cc:34:1f:cc:1b:2d:5e:e2:5c:a4:53:b4:64:79:
                    36:ce:32:7a:31:19:67:fb:81:7d:20:f5:87:fb:92:
                    06:0e:7b:73:dc:64:89:e1:14:67:37:03:b8:26:73:
                    9c:8a:9d:a3:10:aa:f9:bc:b8:40:6d:63:10:f4:2b:
                    1d:e2:9d:22:89:ca:bf:bf:64:f6:70:a1:7c:d9:ba:
                    10:f5:95:6d:73:ac:2c:5c:e9:18:a6:6d:a2:ed:45:
                    b5:09:3d:e4:98:2d:af:21:3b:3c:8d:5b:a6:b2:56:
                    97:d0:d6:a0:26:e7:8b:ef:4e:42:bb:5b:90:2b:95:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:52:6C:61:D7:25:96:C3:A1:B2:B1:AE:B1:7B:02:EE:F9:A1:C3:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/740c2fe1-87eb-3c13-86b3-e821960404e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3000::/32
                  2604:d380::/32
                  2605:6d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:30:a2:48:27:c8:ea:83:ce:3a:a8:23:86:cd:d6:44:c7:09:
         37:4b:f0:86:93:1b:1d:7f:0c:42:47:dd:28:7f:59:7b:51:be:
         9b:59:2e:6c:80:79:5d:fc:bd:d7:c4:ce:cf:b6:5e:f8:fe:db:
         f9:03:ba:89:be:a6:83:b3:fa:5c:28:f7:f0:ac:1b:ee:74:aa:
         cb:6e:3c:e0:e3:56:dc:c0:ac:cb:87:1d:95:9a:a6:0f:da:b7:
         4e:07:d3:5a:7c:22:46:79:67:e3:56:b5:be:9e:ce:73:0d:3f:
         61:e0:a1:26:ef:16:fa:96:94:f2:70:81:d9:06:1f:8e:fe:55:
         bc:6f:05:96:86:ae:93:ee:53:be:3e:63:f8:3b:e2:82:7f:91:
         1a:05:eb:19:40:8e:4c:36:b7:6c:e0:08:19:b2:1e:be:d3:f9:
         d4:b7:52:e3:22:24:a6:84:1c:d8:9e:38:46:75:34:36:02:16:
         0a:5a:7e:a7:66:fc:0b:31:86:cd:fb:ba:79:77:01:1a:03:5a:
         f0:f1:51:f2:b6:f9:fe:3c:b6:fb:e8:da:18:53:ff:6e:d7:28:
         66:77:53:98:88:2d:25:17:cf:7b:87:78:9a:a2:74:ed:f5:37:
         37:35:f5:43:aa:fa:5e:6d:90:0e:90:5b:1a:3f:3a:6c:26:48:
         fd:92:42:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 06:01:09 2024 by rpki-client on console-ams.rpki-client.org