Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a02237c8-ae50-3044-82bb-f2b03181c5b1.roa
File:                     a02237c8-ae50-3044-82bb-f2b03181c5b1.roa (raw, json)
Hash identifier:          MdRBx1ywo5nSAKWsi3WDubmO2voKV1MrFDu5gSZHzhI=
Subject key identifier:   73:28:F8:43:0A:23:69:23:04:5A:3D:96:C6:EB:6A:41:B6:1B:23:64
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F43285845B21E2FB5F8B365FD8B916100
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a02237c8-ae50-3044-82bb-f2b03181c5b1.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     22192
IP address blocks:        2607:2240:800::/37 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:2f:b5:f8:b3:65:fd:8b:91:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=c5ce2dff-7d3d-4b10-9d6c-e9eb11101f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:c1:08:4d:46:df:c1:cd:1d:d4:96:73:f0:
                    d3:b6:47:4d:6b:fa:7a:89:45:b2:02:85:e5:0a:3d:
                    cd:f7:8e:d9:87:f6:96:c4:cf:f1:46:25:69:5a:ea:
                    45:a6:72:1b:e5:c2:a4:2c:93:02:69:6f:27:ab:e9:
                    38:af:fe:e7:35:8c:33:73:5a:ae:14:6d:fa:a7:8b:
                    ec:ad:19:3c:7e:be:b7:a1:0c:75:80:39:f9:5c:a2:
                    85:d3:4e:54:ab:ee:43:a4:b2:e1:d8:87:cf:1c:b4:
                    ef:5f:a7:f0:ef:e3:eb:61:12:2c:a5:17:f7:49:75:
                    d9:7b:fc:ac:46:71:c0:f4:1e:84:f1:bf:58:42:2f:
                    23:43:8f:6d:fb:5f:31:79:da:cb:88:95:e9:4f:60:
                    7e:f7:12:fa:a3:4e:ae:3d:7c:78:5a:b0:df:88:b0:
                    41:50:a6:f4:98:5d:5b:43:bf:47:4c:bb:e5:0c:38:
                    8d:2d:8c:2f:69:42:9e:61:e0:b6:11:6a:66:4f:14:
                    4e:86:36:50:e2:6a:cb:1d:8b:fd:e4:1e:41:51:33:
                    89:a5:21:56:b0:ef:56:58:06:86:3c:d1:b2:62:f0:
                    6c:49:92:66:bd:ec:81:18:3b:4c:91:6f:d1:3f:38:
                    80:65:95:0b:81:b6:fd:d1:49:cf:81:3e:32:16:a7:
                    b6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:28:F8:43:0A:23:69:23:04:5A:3D:96:C6:EB:6A:41:B6:1B:23:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a02237c8-ae50-3044-82bb-f2b03181c5b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:fd:ee:7e:0e:d2:c3:ac:a2:ce:e3:b9:06:8d:69:27:df:22:
         d2:cf:92:a6:c1:b2:bf:7a:47:1a:c6:1f:aa:c1:a5:d9:05:f7:
         76:8d:49:27:6c:89:1e:8a:c8:5d:d5:2c:2c:9c:01:62:7c:26:
         a9:c7:52:ad:f7:0f:f5:93:b7:1b:34:00:0f:53:cf:7b:ac:6e:
         07:7d:f4:49:71:a6:53:00:2c:b6:a2:7c:95:63:22:4a:4d:15:
         36:3b:ee:d2:98:3e:01:d1:9d:82:ec:ed:71:85:8e:f5:34:f5:
         42:89:4d:9f:8e:b0:4f:ba:f8:3d:31:70:42:77:fc:cd:02:ec:
         45:1d:02:36:4a:89:f9:34:71:bb:f3:44:86:9b:ba:e8:8f:fa:
         4f:7c:49:dc:90:04:e8:0d:83:2d:aa:f0:66:c6:46:68:65:9a:
         4a:83:1f:93:bb:a3:88:58:95:37:68:2a:ee:b7:2c:71:72:67:
         9f:6c:64:8c:d1:a2:07:85:26:ed:0d:c8:2e:d2:4e:1a:c8:a0:
         df:9c:f7:6c:0d:df:ed:ad:56:68:6d:e6:59:7d:ad:0a:29:2b:
         a8:79:b7:60:61:e1:8d:45:1e:7c:5c:d4:c0:4f:e5:82:c3:79:
         c5:b4:f2:58:a4:de:fe:ba:49:a2:35:c5:fa:9c:53:55:cf:dc:
         bb:13:db:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:44 2024 by rpki-client on console-fra.rpki-client.org