Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa
File:                     df6816a7-143c-392b-bc92-0828868a384a.roa (raw, json)
Hash identifier:          J7FKm9RIA/kMmH4tPBfRrLF0tZ/KVx0MGpC7bqpu1Lg=
Subject key identifier:   27:BC:DC:80:9D:DD:4B:4E:8D:38:69:7C:DA:89:8D:AE:72:4D:90:5F
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D6690595F5CDEB86B91703C0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        2001:18c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:69:05:95:f5:cd:eb:86:b9:17:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=fd4c66fc-7ef3-4c57-bdca-95b2dc79a771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:5f:ee:19:26:78:7a:92:7a:13:f9:7c:9d:
                    f7:8c:fa:db:0d:62:f9:f6:c3:9f:87:90:65:02:01:
                    64:74:b8:78:68:b0:cf:84:34:c5:dc:62:af:45:32:
                    28:68:63:9b:b6:c2:23:65:89:b1:8e:18:f3:64:f4:
                    d8:24:04:0f:de:e0:f1:43:8a:e2:29:08:71:96:d2:
                    a4:f0:ec:00:e3:26:07:aa:e0:92:30:1b:65:d3:ef:
                    b5:aa:7d:33:e8:fa:10:89:89:64:8b:c1:a6:f1:8a:
                    66:30:7c:aa:16:cd:0e:b3:d6:01:1f:52:5b:57:38:
                    1c:cf:8d:2c:74:ee:58:e7:d6:f5:31:70:2e:dc:69:
                    45:c1:ce:cb:c4:0b:a0:99:7a:dd:7e:d1:57:39:4a:
                    2b:d2:e3:d6:86:5a:44:21:c8:75:70:ea:c8:f7:48:
                    67:e0:43:3f:77:eb:87:80:2c:f9:fd:0c:c7:75:18:
                    0d:ae:47:56:85:38:47:3a:b1:78:b2:09:08:ea:7f:
                    84:ba:61:fe:5d:e4:63:b7:79:92:34:46:c1:03:08:
                    40:eb:e2:7d:e9:28:98:37:5c:aa:ad:62:64:7e:dc:
                    85:a1:91:36:8b:ce:7b:b1:1f:70:9f:80:28:c8:b0:
                    17:b7:a9:c4:bd:f2:98:55:20:16:4e:05:98:0c:89:
                    89:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BC:DC:80:9D:DD:4B:4E:8D:38:69:7C:DA:89:8D:AE:72:4D:90:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:18c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:1e:d2:8b:44:bd:f2:dc:61:82:cb:08:c5:ea:10:83:b8:25:
         39:bc:ea:30:3b:a4:4f:5a:e0:ed:3c:cf:1d:5b:98:8b:33:57:
         6f:58:a8:19:c5:90:50:75:eb:93:69:2e:ae:f7:f9:b6:2f:49:
         a1:58:6b:0c:ee:30:9b:c5:8f:f5:78:28:1e:21:d3:54:c1:22:
         fb:1c:d6:cc:59:4d:97:e7:ee:ec:06:91:04:fa:b0:28:de:0a:
         3a:56:84:02:24:ea:59:7a:25:f8:15:3e:06:8e:af:31:59:fc:
         e3:b3:42:53:cf:76:f0:a3:cb:02:75:38:b0:cc:12:a7:4c:ae:
         76:db:7d:f7:ba:ab:c5:2a:54:83:ff:a0:31:fd:92:56:9b:47:
         c1:2d:a1:c5:07:55:b2:57:31:a6:84:bd:42:c4:0b:79:7f:33:
         10:e5:d5:83:13:88:5c:80:e2:82:00:7c:24:01:cc:a8:98:ec:
         fc:51:ab:0b:23:90:d8:38:08:1b:4d:87:88:68:88:bc:9c:82:
         7c:5d:3f:10:1a:72:15:24:58:d2:f1:d4:9d:7a:8e:de:93:9e:
         ca:c4:f5:a5:09:2b:ad:16:99:fc:2a:3d:92:ef:f8:ae:68:0b:
         d2:6c:8f:be:3f:87:04:6c:3d:cf:eb:e5:6d:aa:7c:dd:35:9a:
         24:32:69:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:03:00 2024 by rpki-client on console-ams.rpki-client.org