Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa
File:                     7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa (raw, json)
Hash identifier:          9eeeZkJ4tO/ZrsQIijLz6D4s5nCtsMNC0QUguGqXuKY=
Subject key identifier:   C3:C4:91:4E:3D:C6:5E:39:F0:B1:69:60:12:80:86:C6:1C:0D:DE:74
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F432858453A12AD923964744313DACA00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa
Signing time:             Sat 16 Mar 2024 13:00:31 +0000
ROA not before:           Sat 16 Mar 2024 13:00:31 +0000
ROA not after:            Fri 14 Jun 2024 13:00:31 +0000
asID:                     11090
IP address blocks:        2607:f398::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3a:12:ad:92:39:64:74:43:13:da:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Mar 16 13:00:31 2024 GMT
            Not After : Jun 14 13:00:31 2024 GMT
        Subject: CN=d0042806-0808-4e5c-901a-5a42be054e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:18:cf:29:4c:ce:e6:d1:d1:b0:76:06:8c:78:
                    9f:fe:7d:38:41:3c:6c:9e:50:22:9a:c3:e3:d0:39:
                    db:7c:cb:89:6d:c0:43:79:86:ad:a3:25:cc:39:37:
                    c9:e7:d6:bc:9e:cf:ea:0a:92:12:69:bb:a4:42:5d:
                    75:2f:69:1d:b9:65:b9:0c:74:17:d7:40:93:72:ce:
                    5b:6c:aa:78:a9:4f:01:ff:09:99:4f:39:0e:b8:82:
                    a1:69:d0:77:2a:4a:7e:4d:e9:46:7a:26:d8:a6:c6:
                    70:0d:2a:ad:36:90:4c:75:25:8a:b1:9e:83:85:ca:
                    82:2d:59:b9:40:c6:66:29:98:9a:bc:5b:ae:6a:cd:
                    7c:d0:51:e4:87:0e:9a:b1:2e:ab:8c:8d:e9:57:17:
                    3b:75:31:2c:22:56:be:98:67:92:d0:2c:57:7b:3f:
                    f9:d3:f8:e1:c3:49:03:75:b0:70:00:13:9b:7e:5b:
                    b6:fd:3b:65:98:48:2b:f7:fd:ef:e1:77:6a:7d:f6:
                    ac:e0:00:00:8a:bd:33:bd:e9:3c:ac:96:ef:33:7e:
                    d6:95:f4:73:9b:51:50:fc:b2:96:b3:2b:98:ae:e2:
                    3d:e1:ef:e9:e8:fe:a5:01:b5:e1:23:cf:90:46:e1:
                    81:45:1b:ad:4d:d4:f7:32:8e:88:86:0e:3d:0a:f6:
                    c3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C4:91:4E:3D:C6:5E:39:F0:B1:69:60:12:80:86:C6:1C:0D:DE:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f398::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:04:6b:53:b5:4f:32:56:59:a3:b6:0a:cf:41:1f:61:40:af:
         c2:fd:0f:40:cc:ed:52:a9:5a:45:40:39:0d:a9:88:15:29:67:
         76:fa:78:85:fb:0b:56:78:c1:cc:39:6c:19:e7:0b:6f:4f:f8:
         6b:48:f9:ab:5f:8c:b2:0e:aa:b5:ef:dc:2c:bf:51:cf:ec:c3:
         78:f4:e1:e5:a5:2c:00:9a:f3:bb:7a:3a:43:ef:be:6e:91:35:
         ae:df:0b:36:4a:e1:fb:7a:dd:2b:16:56:4d:c4:8e:c2:6a:e4:
         e5:f3:6d:9a:53:e6:03:ee:c4:15:03:8f:06:3d:0a:04:03:93:
         18:ea:6b:e7:2b:ab:9c:73:cb:fe:63:38:3a:a1:83:ef:f4:87:
         67:bb:2c:22:f1:18:ff:18:d1:c7:c5:6f:3d:16:60:f7:98:08:
         27:62:54:98:dd:8b:61:c2:6e:45:73:2e:13:11:1f:a4:e2:bf:
         44:57:c4:3d:2c:ef:b6:0f:cd:76:a8:2a:cb:c8:ee:98:e5:c6:
         64:d5:e8:cc:3d:02:d9:06:5e:0c:a9:06:fd:3d:d7:e8:ff:8f:
         9c:01:a3:d6:d4:7e:e2:af:47:f5:99:4a:b5:17:73:a6:52:96:
         d0:f1:d7:e5:0d:d6:11:b1:35:e6:1d:d7:8e:df:22:b6:7c:92:
         bc:67:85:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:36 2024 by rpki-client on console-fra.rpki-client.org