Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa
File:                     244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa (raw, json)
Hash identifier:          ta1BLy8yiWBfifE7fnupt90SCL/hmTqb79tHz0Yblus=
Subject key identifier:   FB:A3:98:EB:63:37:06:E2:7C:EF:65:F1:48:B3:20:AF:70:21:C9:65
Certificate issuer:       /CN=7e61fabb-95c6-4ab3-a1ec-b077e850f010
Certificate serial:       010D0C9F43285845C17918E2D0082D79E679CC10
Authority key identifier: E8:97:9D:55:E3:53:AB:EF:00:F2:13:00:A9:2D:D2:DA:F3:14:93:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     1638
IP address blocks:        2620:114:5000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:18:e2:d0:08:2d:79:e6:79:cc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e61fabb-95c6-4ab3-a1ec-b077e850f010
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=144e7716-63e3-4a1a-a919-f00f6b03f725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:e3:0f:b7:93:d7:75:af:89:bf:d6:70:3f:
                    e1:17:9a:86:6b:76:85:0c:7f:2c:05:50:df:d0:ac:
                    13:d4:b5:f2:a0:21:ca:7a:f7:ad:c5:7c:89:b2:e4:
                    11:57:fa:13:65:1e:ff:31:01:8d:53:2e:ff:e4:8f:
                    84:2e:3e:80:fe:4a:f8:c7:58:f8:6c:a0:85:b8:69:
                    c8:e6:dd:07:24:52:7b:e8:50:16:d4:6b:4f:1e:bd:
                    42:6b:48:8c:37:20:14:68:ff:22:b0:c2:20:bf:87:
                    c9:8a:49:94:07:13:1d:2d:b0:67:f4:be:1c:89:8f:
                    80:aa:10:a7:9f:00:e7:d4:03:32:7f:57:8d:24:06:
                    66:c7:af:e9:cf:21:50:dc:52:b5:36:ce:8e:08:52:
                    37:f8:0c:76:fc:27:eb:5e:46:5a:c7:ab:f2:f7:9d:
                    14:f5:f9:f5:58:5d:9d:a2:89:a1:ac:84:a4:4c:0e:
                    7f:44:9f:3e:51:d8:00:12:18:2d:a1:0c:43:7d:52:
                    a6:52:55:78:0f:18:b5:69:5c:92:38:3f:26:15:ab:
                    0a:b7:33:47:82:39:8b:f5:43:ed:95:af:33:29:0d:
                    2e:2c:d2:03:45:61:a5:93:f7:3d:bb:0f:7e:2e:ea:
                    e4:72:9a:b6:d2:64:25:f5:64:d1:b8:88:ff:56:fd:
                    42:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A3:98:EB:63:37:06:E2:7C:EF:65:F1:48:B3:20:AF:70:21:C9:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.crl

            X509v3 Authority Key Identifier:
                keyid:E8:97:9D:55:E3:53:AB:EF:00:F2:13:00:A9:2D:D2:DA:F3:14:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:114:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e4:d2:c1:00:a7:26:c7:99:a0:ad:57:65:0b:a8:f2:d6:6d:
         bd:56:4b:0f:3e:fd:5a:58:e5:13:f4:69:93:33:18:c2:e8:7c:
         21:00:f3:63:ca:42:4f:cd:7a:14:44:ab:48:21:01:29:aa:ed:
         35:6d:df:a0:ee:0a:ed:4f:1d:0d:c6:16:62:78:bf:d0:8d:07:
         5f:2b:44:11:ef:43:f9:16:4d:0c:51:6e:1c:13:1c:b4:bc:01:
         59:19:cc:86:7c:ba:87:ef:b6:8e:bf:0c:69:c3:b4:ae:5a:2d:
         89:f5:c3:28:8a:a7:33:95:4f:f2:14:72:61:70:9f:bd:c8:df:
         db:eb:92:c2:4e:32:8e:6d:21:d8:89:64:1e:ed:21:fa:d0:fb:
         18:cc:56:57:c9:60:e8:21:70:64:cb:ef:2d:60:c9:b1:38:ea:
         7c:fc:26:81:8c:75:35:44:13:a8:da:5b:71:40:fc:58:44:ad:
         25:3e:4a:e9:6e:18:ae:ee:08:67:40:ca:ea:fe:85:01:25:76:
         19:93:7e:86:36:00:dc:ac:1c:03:c4:d0:54:87:08:0a:92:b5:
         e5:25:28:f7:11:42:3d:75:90:d9:89:91:fb:8c:81:40:ca:7e:
         8c:70:1f:f3:e4:a0:f1:38:29:01:d5:dc:e9:ab:8c:d8:ea:23:
         71:d9:d1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:13:02 2024 by rpki-client on console-ams.rpki-client.org