Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa
File:                     d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa (raw, json)
Hash identifier:          ClRDAIh2/rjU2zIYYkJmTLSmMtKVVtWwon/LK+82FlY=
Subject key identifier:   8C:FD:5D:47:E6:87:86:06:5C:67:A3:E7:9F:ED:55:64:3D:31:70:DA
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285845C873A9C648D4AAF5D0E71F00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     20253
IP address blocks:        2606:bc40:f15::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:a9:c6:48:d4:aa:f5:d0:e7:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=736cb0e3-7828-4bf9-956d-0506862d1a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d0:d8:84:03:f8:d5:80:e7:fe:cf:5c:10:7b:
                    ca:98:75:03:6c:66:05:80:ca:77:c5:bf:34:df:48:
                    40:65:a1:58:83:4a:36:d3:87:0e:18:50:c9:47:d7:
                    a5:f5:51:d8:7b:b5:e7:2c:53:f1:98:46:d8:37:82:
                    ed:ce:8f:13:12:f5:40:e6:c6:f7:66:32:b9:47:4c:
                    01:40:1b:1c:5c:63:e6:49:cc:59:97:ec:b3:99:dc:
                    b2:dd:0c:a9:88:83:c3:8f:63:f6:a2:21:d9:ba:bc:
                    fd:3f:8d:fa:c8:d7:49:7e:2a:a8:37:5a:ea:a7:8e:
                    8e:1a:51:7a:99:ab:39:3f:20:fd:a1:8a:a6:7f:a8:
                    e8:3c:c5:41:c4:79:a0:05:02:38:da:88:b1:1b:eb:
                    95:54:1c:24:90:1b:06:38:3b:07:10:ed:49:49:90:
                    87:f7:52:44:4a:2b:c3:bf:32:a3:cc:a3:68:56:00:
                    d8:fb:b3:06:00:70:2f:43:3c:c2:f3:54:f6:c2:71:
                    f1:33:03:19:12:f8:37:09:af:c0:e8:33:54:9e:0f:
                    5d:3c:af:13:e6:ca:5c:18:00:49:7d:85:ea:a8:38:
                    f4:32:7a:9e:6a:13:97:ff:fd:e6:04:44:c1:59:a8:
                    f7:3f:0a:f5:af:15:f6:fb:41:02:63:4b:3c:69:f1:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FD:5D:47:E6:87:86:06:5C:67:A3:E7:9F:ED:55:64:3D:31:70:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f15::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d9:4a:a3:8c:32:d4:d7:37:15:2f:bf:60:4f:42:4e:70:aa:
         d5:4d:28:fd:5c:7b:5f:25:a6:88:fc:59:4b:0e:93:bb:fb:3e:
         fa:36:bc:19:7c:15:33:f3:da:30:3c:e1:88:ad:9b:ed:a6:92:
         58:7d:9e:15:d2:c7:69:7c:75:19:24:44:9d:92:60:c2:0e:f1:
         fa:f4:03:35:e4:e0:b6:15:91:b8:a2:ed:6a:ff:34:6b:e0:cf:
         11:a9:d6:65:84:43:64:86:17:25:fb:f3:cd:f2:34:ca:51:e4:
         1d:b1:96:e0:7d:51:21:fa:4f:70:78:6e:32:94:1c:a6:06:a8:
         b5:56:2d:36:ea:06:04:20:57:1b:7f:7b:b0:9e:6e:94:3f:a9:
         72:af:6c:d3:99:d8:2c:44:24:f4:e7:14:bf:7c:e2:3c:74:b5:
         84:51:0a:ad:49:a4:be:0c:6e:e5:78:6b:bf:4a:2e:18:d5:f3:
         d1:62:42:d2:59:e5:05:21:12:f4:22:f2:5e:60:f4:15:7b:88:
         3c:59:5d:da:96:75:fc:04:4c:0f:16:59:82:92:61:01:58:03:
         2c:d0:8b:dc:22:59:b3:f7:51:88:4f:a4:79:86:54:e5:ed:d4:
         93:8c:fc:1a:9a:28:51:1f:2d:1e:23:46:28:cf:71:2e:10:dd:
         53:f0:38:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:40 2024 by rpki-client on console-fra.rpki-client.org