Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/167df5e4-9539-35bd-83ee-39c1f78d4e32.roa
File:                     167df5e4-9539-35bd-83ee-39c1f78d4e32.roa (raw, json)
Hash identifier:          qCHJb+esg1748I4eZc1S/CzWrcK9Xbn0c+/y0nAQGo0=
Subject key identifier:   FA:AD:0B:C4:90:DF:21:4D:0D:BC:00:A4:AE:62:F0:4C:9C:9B:58:9E
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F43285845D39E5A2EF3A965C616AB4680
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/167df5e4-9539-35bd-83ee-39c1f78d4e32.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     7992
IP address blocks:        2001:1970::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:5a:2e:f3:a9:65:c6:16:ab:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=a70db83a-3d91-43a4-94f7-afe5d5cfa692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e6:f4:11:d2:47:5c:bc:f0:e7:b7:29:70:c8:
                    96:d9:fc:02:b1:81:28:34:d0:c2:69:b1:6d:a4:80:
                    2d:1b:27:90:c4:e7:4d:d9:d8:13:45:ed:4f:99:ed:
                    f3:88:6b:43:08:f2:59:25:33:40:a8:a2:53:e5:c6:
                    1f:01:81:34:f6:33:a5:08:df:d4:c8:62:f0:72:36:
                    10:a6:60:86:e5:ff:06:e2:5b:72:b4:16:aa:45:4d:
                    42:33:8f:f3:00:5a:c7:95:fd:93:77:0c:a7:09:d8:
                    4f:0e:d3:7e:57:be:bc:b7:85:9c:be:a1:0a:d2:79:
                    83:fb:be:0e:f3:58:33:36:fb:33:41:f0:22:40:64:
                    79:1a:dd:34:bf:99:c4:b7:2b:26:0c:3e:4b:d4:26:
                    0c:51:4d:da:8e:1a:1c:d2:3f:50:41:21:c7:77:af:
                    d7:d1:48:af:9e:3c:9e:55:ea:aa:94:1c:37:5a:20:
                    6e:9e:38:85:fa:aa:61:f3:08:ba:70:a0:72:aa:c1:
                    4a:fa:22:e6:3e:69:57:06:d8:e6:50:7b:8e:12:6c:
                    6a:83:9f:b7:3d:af:18:d6:9d:a4:fc:78:30:6f:83:
                    cf:47:3e:45:73:3b:8c:ec:d1:d3:b3:c9:c2:76:19:
                    18:aa:fc:2d:87:97:cf:1c:6d:86:c5:4f:9c:5f:91:
                    0f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AD:0B:C4:90:DF:21:4D:0D:BC:00:A4:AE:62:F0:4C:9C:9B:58:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/167df5e4-9539-35bd-83ee-39c1f78d4e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1970::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:cd:65:ea:4a:fb:2d:95:df:5d:8e:0e:e2:dc:21:8b:d9:65:
         62:b3:ac:3c:af:82:89:90:5e:80:9c:a4:e1:9b:18:7a:27:8b:
         bf:31:af:0d:1a:d2:a1:cb:3f:d3:05:45:4e:e2:cf:8f:2b:65:
         14:4f:a1:08:11:9f:28:5a:36:82:f8:dd:f5:08:d5:54:05:60:
         09:d0:e2:c6:53:eb:bd:2c:f9:0a:b2:42:f2:d1:ee:85:71:aa:
         56:97:5a:99:72:bc:e8:7c:ba:c6:7f:13:58:89:36:70:ee:34:
         88:15:ed:bc:a6:d0:71:43:8c:e8:26:f8:28:25:29:08:6d:c9:
         df:87:fa:25:9d:2d:97:35:76:d7:eb:bc:9e:2c:92:e2:61:39:
         84:b5:fe:1f:17:a8:86:52:a5:f7:f5:c8:d2:bb:d2:bf:0a:8a:
         3b:6a:94:6d:71:7e:99:f9:0e:87:13:87:1d:f7:17:3d:b4:ec:
         e0:29:0d:77:e4:a0:d1:e9:42:c3:cd:75:51:5e:1f:a1:66:0d:
         10:ef:c5:0d:ea:fe:1e:f6:b4:ba:a8:e0:9e:e2:5d:30:86:41:
         77:4f:95:6b:71:53:31:69:60:eb:82:2b:a6:d9:66:b5:a8:c7:
         2b:1b:31:0a:5f:e8:9b:ec:f2:5a:22:f5:57:ab:79:c6:a9:33:
         c4:34:bd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:21:33 2024 by rpki-client on console-fra.rpki-client.org