Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa
File:                     4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa (raw, json)
Hash identifier:          x3+Ih5HgPMIQj3qejyuCQw/vvs0H2rVTDhnnfhQZLRI=
Subject key identifier:   CF:39:0A:1C:2E:68:63:7E:52:BB:00:9F:99:53:98:D6:48:D2:AC:77
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F432858452275A0DB693918F6F992FCC0
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     399612
IP address blocks:        2604:7e00:31::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:a0:db:69:39:18:f6:f9:92:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=281e3fb5-0e25-4a05-8894-c9f6af02ba0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:55:5e:79:6c:d5:6c:b9:66:bd:c6:73:3c:f1:
                    92:98:07:0c:17:70:de:bb:9a:3f:e6:de:5c:38:35:
                    ee:a8:99:69:dd:ac:91:96:ba:74:f5:9d:12:d1:16:
                    7e:36:0a:d8:22:13:14:56:c5:4f:76:45:2f:9e:27:
                    e4:31:cd:42:c4:94:cc:0d:6c:77:a3:58:18:bf:75:
                    79:b8:24:27:a0:60:a8:6c:b9:fa:2a:9f:dc:63:d7:
                    c5:af:0a:ab:60:2b:9e:48:6d:02:db:42:83:dd:53:
                    f9:c8:c5:b8:7a:ef:d8:cf:0e:f6:fd:d3:8b:ad:fb:
                    d2:fa:91:02:49:a9:a0:8c:34:a5:83:54:b7:9d:c8:
                    28:10:c0:a5:1b:0a:0c:62:6c:9d:d3:4e:22:1b:b5:
                    d3:14:5d:49:fc:f0:4a:a8:6b:39:f1:63:4a:0c:6d:
                    74:42:98:16:c0:98:fb:26:17:c4:78:ae:1f:da:93:
                    01:dc:a9:13:cb:bc:82:26:02:e2:c1:62:d8:0a:86:
                    68:65:dd:85:21:fb:75:c8:20:6e:d7:c3:2c:04:e3:
                    2e:b2:3c:dc:a0:46:9b:67:0f:4d:03:5a:c9:5a:7d:
                    e5:6b:1a:aa:a6:0e:1e:f2:8d:66:1c:41:e1:93:9b:
                    57:a6:27:df:7a:81:21:5a:7d:b9:88:65:52:a9:47:
                    19:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:39:0A:1C:2E:68:63:7E:52:BB:00:9F:99:53:98:D6:48:D2:AC:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7e00:31::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:8e:29:21:9e:ae:09:a2:f2:21:a7:30:35:b0:88:92:15:53:
         ba:02:c4:96:9a:75:80:41:58:b8:26:2e:6a:56:1c:e6:73:40:
         b5:f4:1b:4b:69:0c:97:e6:74:ee:11:30:3e:c0:19:33:3b:d6:
         d0:35:84:d7:c3:08:67:70:d1:69:9d:97:7b:32:d9:7a:f6:14:
         dd:fd:4c:66:65:06:32:59:94:f9:5e:cd:b0:83:48:19:33:83:
         c6:71:ef:a5:96:e3:ac:2c:8e:32:05:63:72:30:03:72:07:d9:
         71:ed:ac:c2:15:af:08:d8:fe:1c:fa:03:1d:b0:c7:26:88:69:
         38:21:d6:d9:e5:49:12:e0:ad:ec:e9:c3:02:07:1a:77:97:f7:
         d4:eb:9a:29:07:97:54:ec:99:ca:11:20:ca:c0:6d:26:d1:e3:
         a7:63:bf:47:68:be:10:0e:dc:db:8e:83:d2:df:b4:c8:1d:58:
         c5:5d:14:c7:fb:5b:2d:59:2a:ef:ef:c0:78:05:33:16:13:63:
         f5:37:9c:ed:8f:a4:89:39:94:e2:93:28:9c:ae:a3:9b:df:85:
         d4:e7:31:12:c2:be:f8:1e:8c:e0:69:cb:ab:6b:1c:36:8a:8b:
         3e:58:5a:9f:ae:2c:0c:a6:32:cf:f2:42:b8:56:7d:61:b7:3e:
         e6:e2:49:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:04 2024 by rpki-client on console-ams.rpki-client.org