Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/abea905a-d67f-3530-8fca-432ad26ceb4f.roa
File:                     abea905a-d67f-3530-8fca-432ad26ceb4f.roa (raw, json)
Hash identifier:          z4D4vcPke7kK0VGeDAaJ9Fb34YQRfGEW+jdHqpGVPuQ=
Subject key identifier:   87:58:BE:E7:EC:6F:67:78:FD:56:D9:7F:D2:13:27:0F:3C:80:13:C6
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F43285845ECBE8001DA5799EA819A80C0
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/abea905a-d67f-3530-8fca-432ad26ceb4f.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     109
IP address blocks:        2001:420::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:80:01:da:57:99:ea:81:9a:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=a3d40813-84ef-43ce-90aa-a9ec5293ca1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:8f:41:f1:5e:50:a0:65:47:6e:b3:c0:66:
                    74:65:61:06:24:1b:cd:94:40:7d:97:18:31:9a:35:
                    80:21:59:23:cb:8d:09:85:8b:ab:a5:2b:44:49:29:
                    e8:0d:ce:02:19:da:d6:4a:ba:ad:1a:ce:6c:df:d7:
                    b4:61:ef:36:2c:72:6a:2a:3d:54:c8:8f:10:67:d7:
                    c1:44:c8:c0:e1:e5:43:68:fa:17:1d:cc:9a:9e:34:
                    5d:74:5b:4f:23:28:0d:71:a8:8a:12:e1:99:5c:28:
                    c8:0e:14:23:10:d6:0a:c1:a9:a8:f6:85:71:29:4d:
                    8a:91:d3:4a:15:c4:b3:89:55:51:8a:f1:d6:34:74:
                    e1:09:04:4b:d2:a3:33:5d:4b:a2:98:07:b5:15:bd:
                    71:78:56:19:b6:88:f8:12:e2:98:17:1a:bc:f2:e0:
                    2f:ff:c4:0e:5d:47:3b:25:95:65:86:61:b2:54:22:
                    36:16:68:7b:64:5c:1c:88:5d:ec:f9:d9:d4:97:3e:
                    5c:9f:64:ec:ac:57:bb:7b:82:50:a7:8b:f9:07:8b:
                    5f:2d:ea:f8:c2:40:63:16:6c:fe:fe:cf:41:df:da:
                    9b:f4:9e:14:dc:a8:34:eb:39:b6:5f:67:f6:38:a8:
                    b7:a1:a2:62:5e:9d:2e:35:cd:a6:af:64:96:2c:c8:
                    33:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:58:BE:E7:EC:6F:67:78:FD:56:D9:7F:D2:13:27:0F:3C:80:13:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/abea905a-d67f-3530-8fca-432ad26ceb4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:420::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e8:2c:a0:c2:23:50:47:0b:f3:53:2e:c2:ce:47:22:8b:61:
         9b:ed:5c:14:5e:ad:83:6a:bb:47:5e:3c:f1:a6:6f:89:a5:ee:
         d3:1c:a6:28:92:44:08:0e:da:9f:81:87:ad:88:88:d6:c5:23:
         a9:f9:d0:ea:aa:19:1c:51:4b:88:02:08:77:5f:97:c6:57:58:
         ad:86:8e:ab:34:56:73:0e:a7:28:ac:c6:6f:b8:2a:cd:54:3f:
         63:9c:a7:32:54:2a:b0:50:9f:b6:62:d1:5d:93:ea:3b:6a:af:
         44:48:d1:45:0f:81:c0:c7:dc:7c:67:56:df:21:b6:f9:56:a2:
         c3:f0:50:54:2a:6d:21:2a:9a:da:1f:01:96:d9:2f:3d:2c:c8:
         f0:68:6b:e2:61:a6:4b:61:1e:0a:71:05:36:81:8e:aa:9a:2e:
         0a:33:a3:4d:8d:af:8d:4a:d2:95:44:3b:9f:4d:b2:31:11:a7:
         94:a8:6f:82:84:3d:ad:f8:e6:02:bb:24:6f:10:55:65:2e:6b:
         b3:3a:ba:8b:ff:5d:fd:fd:30:99:7d:c2:1c:38:2b:f4:1b:b6:
         25:83:c5:ce:03:08:e8:d5:db:0f:1e:43:6f:e1:3f:b8:8c:61:
         26:91:23:ad:2a:54:ee:ca:1f:1e:cd:f5:3f:47:1e:fe:df:c0:
         d5:d2:2b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:46 2024 by rpki-client on console-fra.rpki-client.org