Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa
File:                     6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa (raw, json)
Hash identifier:          6d5KNlI9jBdmkcBVSrCQ3juwTMy1TC8mNVBrbdydU04=
Subject key identifier:   F3:A1:8B:19:A6:17:77:3A:3A:6F:03:29:2F:E3:1C:3E:87:A3:30:73
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F43285845EF892E3EBD7CFBCE7AB67C80
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     25697
IP address blocks:        2604:ed40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:2e:3e:bd:7c:fb:ce:7a:b6:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=dd9f90af-2ae8-4b13-9564-2a5b198737df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:96:f2:07:c8:b4:de:20:97:67:12:31:b1:
                    e3:4f:30:fa:65:80:c5:46:1f:9c:af:df:01:de:99:
                    ca:8e:e2:27:eb:4b:0c:0d:88:e2:23:1e:80:06:5e:
                    e6:26:21:65:af:bc:e9:ce:c1:6b:0d:2b:2d:6b:6e:
                    40:1f:25:6c:22:f4:24:17:f1:4c:df:21:c4:56:e9:
                    32:5a:a4:b0:48:4c:3a:96:b3:3c:3d:56:5c:de:da:
                    6a:29:d4:47:d5:d8:aa:ee:74:e6:b3:87:59:52:d3:
                    67:b4:54:80:2d:cb:6c:d9:8d:af:34:e6:a1:e2:ad:
                    a3:55:6a:6f:10:d2:17:34:09:2d:61:e1:04:18:c8:
                    7f:69:94:37:f1:3d:6c:77:cb:bd:b5:79:6e:e9:cb:
                    65:c8:ce:52:56:5a:66:e4:11:24:52:5b:41:98:14:
                    1a:0b:a3:cd:ec:02:8f:5e:8f:7a:5e:e3:db:47:03:
                    fd:31:12:0a:9f:52:d0:0a:e5:b3:10:ce:fe:5a:23:
                    41:2e:7c:78:90:71:84:d5:a0:78:d8:72:68:79:0a:
                    87:e8:aa:74:b4:f1:4b:67:fd:3a:14:60:bd:1d:e9:
                    a7:ea:9a:45:ca:68:37:f2:89:70:7b:df:2e:ab:38:
                    9b:c3:f9:74:1f:c2:fb:fb:85:c1:fa:50:e3:79:68:
                    61:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A1:8B:19:A6:17:77:3A:3A:6F:03:29:2F:E3:1C:3E:87:A3:30:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ed40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c1:3e:08:8e:29:df:87:37:ee:91:d7:58:5e:4c:f2:ed:7e:
         25:7b:8d:4f:2a:6e:58:63:a8:72:0a:57:ab:4b:a8:07:4c:ef:
         18:37:cb:bb:a5:04:eb:70:5b:f0:90:c1:9f:f1:8f:7d:83:4e:
         cf:5f:4a:c1:72:99:b1:21:6c:b7:a1:43:7d:24:75:b0:ec:00:
         2a:8b:c0:30:41:23:3b:65:0a:c2:99:78:55:95:3f:99:a8:67:
         45:8c:e7:fb:19:e1:53:e2:de:81:7c:a1:19:57:e6:05:19:32:
         aa:a3:33:40:ce:f4:b4:c1:98:af:47:1e:12:1d:e1:42:f2:d1:
         84:14:38:9d:23:4d:9a:ad:4c:8e:c8:1a:4d:72:f5:51:f6:20:
         e6:bc:59:45:9a:c9:93:25:36:42:7f:38:45:e8:e8:b9:54:a8:
         1f:96:ea:92:42:4b:06:28:86:f0:4a:ae:37:d2:3d:0a:48:ff:
         d4:87:2e:3d:3e:45:87:b1:6c:f6:41:1e:4e:2e:81:8f:42:42:
         ae:7d:53:e0:6d:e4:3a:6f:f9:70:52:d4:0a:44:84:00:8b:78:
         4e:79:cf:c8:cc:74:7c:52:6f:28:c2:92:a3:f7:8a:82:a6:99:
         3b:9e:c4:d6:8a:d5:89:72:13:61:52:b8:e0:6c:a8:1d:e2:b9:
         5d:7a:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:29 2024 by rpki-client on console-ams.rpki-client.org