Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa
File:                     a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa (raw, json)
Hash identifier:          6fWb9vyH7tuMGaRfSQQl0whyBxv5ZpSuEf54sK9ck7Y=
Subject key identifier:   70:86:B6:C6:C7:C1:C4:F2:E1:02:68:1C:BC:25:DC:E8:E8:C6:F6:CD
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F432858452275A0C52A2B0BCAE7F61F90
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     17378
IP address blocks:        2604:7e00::/32 maxlen: 48
                          2600:2c00::/30 maxlen: 48
                          2001:4970::/32 maxlen: 48
                          2001:19b8::/32 maxlen: 48
                          2607:f3f8::/32 maxlen: 48
                          2607:f1d0::/32 maxlen: 48
                          2606:a700::/32 maxlen: 48
                          2604:7f80::/32 maxlen: 48
                          2607:fdb8::/32 maxlen: 48
                          2607:fc38::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:a0:c5:2a:2b:0b:ca:e7:f6:1f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=95ae4a3f-ca9e-4079-907a-2d694ea91411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:37:db:2d:5b:fa:bd:98:07:93:12:bc:ae:
                    94:74:f7:ea:bd:c4:2d:31:3e:69:ce:47:1f:51:76:
                    f5:00:76:fb:58:77:e3:ea:a1:4b:ae:26:4c:39:50:
                    94:6d:74:89:d4:3b:c7:72:81:a9:26:c7:53:60:03:
                    2a:99:e3:f1:f5:bf:54:d8:e5:6e:dd:cc:ac:d9:96:
                    63:f0:cf:11:01:6c:f0:fc:65:72:01:c7:8f:fc:0e:
                    33:bf:2e:96:d9:f7:da:0a:23:4b:a6:b5:ce:60:6b:
                    47:e5:f4:09:61:23:4f:20:e0:ee:36:37:f3:c8:1d:
                    5e:7e:23:98:db:32:11:9b:63:ed:9b:1a:9c:b7:a1:
                    d5:1f:05:10:ef:82:88:fd:cd:ce:df:c9:06:f1:67:
                    a9:4c:b3:0e:99:60:2d:3e:0a:33:12:81:c3:40:ce:
                    c0:9d:07:5d:44:00:a4:d1:53:b9:bc:3d:df:f4:08:
                    e8:1d:45:bb:16:d8:14:f5:57:85:4b:f7:46:84:d5:
                    49:dd:41:ed:fa:94:12:61:dc:ce:ab:d6:9a:75:74:
                    8f:08:18:39:54:b5:05:6d:34:9b:15:56:c7:47:15:
                    fb:3e:36:b6:88:16:09:63:06:24:e2:23:82:0e:15:
                    a0:5a:6e:46:6a:3c:55:fa:c5:f0:ae:da:26:ad:df:
                    50:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:86:B6:C6:C7:C1:C4:F2:E1:02:68:1C:BC:25:DC:E8:E8:C6:F6:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b8::/32
                  2001:4970::/32
                  2600:2c00::/30
                  2604:7e00::/32
                  2604:7f80::/32
                  2606:a700::/32
                  2607:f1d0::/32
                  2607:f3f8::/32
                  2607:fc38::/32
                  2607:fdb8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c0:56:16:1e:e6:53:a8:51:3f:7c:85:fb:6e:29:ba:d2:ea:
         87:c2:5f:65:e4:6d:1a:87:b5:dc:19:3f:53:e2:02:b1:c1:b9:
         d4:2e:4d:62:e9:c5:87:6d:da:96:d0:5c:03:a6:d9:2f:e2:53:
         ac:7f:56:97:9a:17:cc:c4:d0:61:79:7a:c5:80:d8:70:22:b8:
         86:aa:9d:7a:94:ae:fd:f2:c1:25:1f:6e:6c:78:ee:b5:b1:8f:
         52:d6:ed:ef:85:c4:a8:4b:27:11:bf:63:cb:4f:46:ff:c8:03:
         18:4f:96:fd:b5:72:99:8c:26:d0:d8:01:fa:95:da:87:76:c5:
         b2:36:e6:7f:2d:94:9c:9a:7e:db:f5:79:82:1e:5e:4f:9c:8f:
         8e:bd:c7:f7:08:24:27:b0:60:e8:e0:d9:5c:76:69:1e:89:1d:
         1e:c8:5e:5b:ef:fd:65:0c:c7:e1:dc:b8:6e:d2:ef:6d:d3:74:
         4e:36:e8:71:aa:bf:4e:12:27:b8:00:1a:ae:05:8f:b1:44:b1:
         22:79:12:85:25:ab:9c:d0:47:b3:bb:ec:ea:34:4c:38:7d:74:
         82:05:3f:86:21:fe:3d:f5:30:e1:71:06:2a:a2:a0:08:e0:ef:
         e4:60:58:be:77:93:dd:86:7c:08:9d:2b:ea:ec:81:e4:2f:b9:
         a7:06:95:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 01:22:38 2024 by rpki-client on console-ams.rpki-client.org