Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ee5e6bc7-e933-3011-ab89-2c7e76441156.roa
File:                     ee5e6bc7-e933-3011-ab89-2c7e76441156.roa (raw, json)
Hash identifier:          lRTY+9aCoYxivRZJp3HTnYJEb6A5swnNOElI04hLL94=
Subject key identifier:   87:A5:EE:62:42:53:4C:27:1C:B5:5F:F5:3A:82:EE:BA:F9:5E:29:2E
Certificate issuer:       /CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
Certificate serial:       010D0C9F43285845E9F3D3817B6CC938B2C6B748
Authority key identifier: 0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ee5e6bc7-e933-3011-ab89-2c7e76441156.roa
Signing time:             Sat 18 May 2024 13:00:35 +0000
ROA not before:           Sat 18 May 2024 13:00:35 +0000
ROA not after:            Fri 16 Aug 2024 13:00:35 +0000
asID:                     32024
IP address blocks:        2607:69c0:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e9:f3:d3:81:7b:6c:c9:38:b2:c6:b7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
        Validity
            Not Before: May 18 13:00:35 2024 GMT
            Not After : Aug 16 13:00:35 2024 GMT
        Subject: CN=1b7b280c-e4d4-4c77-ae81-c800a4f30229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:44:e6:93:ad:36:35:02:51:34:9d:c3:bd:8b:
                    05:f2:a3:6e:d6:1a:39:c5:4a:a4:ad:31:1b:c9:20:
                    d6:3a:52:ad:6c:0e:ae:0e:bf:43:e6:98:4c:ed:8e:
                    e7:4d:2c:36:c7:9d:66:de:e3:3b:31:84:c9:ff:14:
                    3d:30:4f:e5:db:5a:14:39:4a:fe:94:5e:2b:67:1a:
                    32:e4:19:65:03:81:9c:9a:01:62:bf:97:49:7f:9f:
                    a4:4e:eb:99:5a:ff:e6:96:55:16:41:78:a2:9e:f3:
                    f8:32:20:3b:67:49:ab:75:26:e2:84:0a:6c:cb:76:
                    2c:c4:02:ab:a3:2d:27:c3:fe:58:2f:df:03:aa:a6:
                    be:67:2a:b4:33:a6:1f:98:4d:32:dc:08:6b:a8:d8:
                    1c:fa:80:9c:f4:7b:66:35:83:68:0e:84:30:db:5d:
                    db:44:18:af:f8:39:6f:25:86:d5:b4:91:2d:06:58:
                    ca:4f:2f:0e:45:91:f0:13:ff:d1:3b:11:9b:fa:ae:
                    8a:5a:4f:9e:0b:2d:26:33:20:73:2e:08:12:71:85:
                    12:e4:67:a0:e8:dd:44:2e:ab:9d:63:bb:93:81:90:
                    98:6f:08:c5:16:70:ad:1b:12:46:d3:6c:64:b6:0f:
                    32:28:bf:ea:3a:17:a8:61:94:b3:8d:c4:44:fb:74:
                    bd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A5:EE:62:42:53:4C:27:1C:B5:5F:F5:3A:82:EE:BA:F9:5E:29:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ee5e6bc7-e933-3011-ab89-2c7e76441156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl

            X509v3 Authority Key Identifier:
                keyid:0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:69c0:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:1b:95:cb:ba:7a:ea:41:c7:5a:26:ec:68:18:61:88:05:b6:
         cd:96:ce:a0:16:75:f0:39:9a:11:27:45:1d:8c:68:0c:65:16:
         a5:0a:16:6e:79:9d:6a:93:ff:da:30:d8:8b:04:1c:0c:66:d0:
         56:83:12:2c:d0:e3:be:f1:99:99:31:48:31:11:ae:23:06:29:
         3f:af:98:6a:16:91:36:b9:f7:4d:67:21:a6:e1:e9:31:dc:79:
         c4:8a:7f:df:79:2f:d2:24:ad:4b:6b:b7:73:f9:98:fb:60:23:
         88:64:fc:f9:6f:3d:6f:3b:4a:23:4a:11:d6:46:b0:ef:40:5f:
         58:2b:64:5b:ab:de:37:16:f1:b1:d1:69:8f:b3:41:2d:e3:8b:
         1a:ec:fa:20:2f:e0:83:e5:a2:c6:66:30:f3:02:df:79:b7:b6:
         86:58:7a:17:ab:e8:aa:88:5c:fd:bc:f5:88:84:7a:fa:57:3b:
         96:8d:3c:91:2f:55:46:c8:d1:6d:ea:58:05:06:23:73:68:db:
         6b:3c:69:5b:7c:70:03:32:28:89:5f:d2:07:4e:31:17:55:7e:
         0e:2f:5f:90:b6:31:26:91:16:80:91:e2:6d:1c:2b:36:25:60:
         90:eb:ca:cf:e7:b3:c2:e7:3a:a0:c6:66:82:be:01:7d:58:02:
         1a:9b:b5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:45 2024 by rpki-client on console-fra.rpki-client.org