Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa
File:                     5bf9e334-dc7e-3b55-8aff-c525713a2347.roa (raw, json)
Hash identifier:          jmRj/0t02++X39tq6WMxvFifiB8vtQ56RZLoAJub8Po=
Subject key identifier:   E5:AA:07:B6:49:C2:9E:EF:4C:C4:5D:82:EA:E0:B3:97:1F:BB:D6:F9
Certificate issuer:       /CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7
Certificate serial:       010D0C9F43285845B21E217EDA319826FEB47240
Authority key identifier: B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     20388
IP address blocks:        2604:ce40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:21:7e:da:31:98:26:fe:b4:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=a9ad6ac5-efb1-4b9c-971e-6195bc6b4e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:ef:1e:73:af:93:0a:b5:06:03:a8:d9:34:
                    e1:c5:1c:ae:20:2a:b4:84:36:97:bc:76:20:ea:c0:
                    7e:0a:6d:46:5c:92:ea:7e:43:d3:e6:e6:2c:9b:0f:
                    15:c2:32:82:cd:e0:28:d2:d2:1e:57:12:43:ad:43:
                    10:3e:19:13:c4:b6:76:b0:a6:f5:7f:aa:f7:de:8d:
                    81:3d:da:0a:5a:c9:7c:7f:41:c6:c6:dc:a6:70:43:
                    5b:e7:95:22:95:86:f5:30:70:cb:9e:73:53:6f:87:
                    8c:ac:b3:91:92:0a:4e:a6:3b:e9:b3:34:be:0b:53:
                    dc:9f:92:73:c4:fc:36:8e:75:f9:7e:5f:01:95:b7:
                    9c:07:7e:93:c3:12:bf:9c:c3:c2:a0:4a:78:df:b1:
                    df:ad:0d:2f:b4:80:e1:b8:c9:43:ff:f8:7d:de:5c:
                    c4:0e:e2:1f:fa:8f:73:43:73:a3:dc:ec:a9:50:f0:
                    83:ee:ad:15:3f:d3:17:a6:37:6d:a1:a3:46:52:88:
                    11:38:8e:2d:1d:1d:9e:b1:6a:b3:f8:04:ad:ac:9e:
                    d3:0b:f9:34:7c:eb:5a:83:57:ce:6b:e8:46:09:04:
                    ce:63:2a:f6:94:aa:63:63:e4:07:36:f3:df:7a:07:
                    32:78:32:d0:c4:60:20:27:a2:db:78:7a:35:2f:6b:
                    97:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AA:07:B6:49:C2:9E:EF:4C:C4:5D:82:EA:E0:B3:97:1F:BB:D6:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl

            X509v3 Authority Key Identifier:
                keyid:B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ce40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:b9:05:d9:e6:88:f7:5e:3a:7a:06:06:39:43:7b:08:f7:bb:
         a0:a9:90:95:ef:af:3b:c4:0a:9f:96:d9:ca:24:f5:af:b4:08:
         8d:a0:00:c4:15:33:b4:5e:33:d1:1e:ff:6c:22:03:bf:91:9d:
         e5:f7:81:02:43:2c:6c:45:7c:ba:d6:d0:65:04:37:8f:01:c0:
         ae:c2:d3:bf:e6:57:9c:e6:c5:c1:fa:a6:48:41:54:74:69:3c:
         d7:7e:c4:2b:31:43:7f:39:12:d2:91:80:83:81:fc:32:54:39:
         c2:93:be:0c:8f:4c:fd:35:59:80:51:ac:f3:ee:2d:b1:d8:8f:
         84:f1:82:35:e2:9d:b6:78:6b:2b:ee:01:5c:96:17:5e:1a:31:
         19:56:36:56:f1:74:1e:7a:c2:2c:f6:8f:68:01:51:41:ef:81:
         0b:08:e9:e0:85:19:1a:3a:99:0c:a4:68:64:5d:71:51:d0:66:
         08:df:45:1f:6d:62:93:65:b6:7f:26:0c:d0:47:d5:f7:38:41:
         35:d0:87:ee:87:05:34:99:ea:34:12:ac:9d:0a:e8:3a:d1:cb:
         c7:95:c2:96:e0:8c:1c:e2:d4:75:7b:40:5b:b1:92:dd:05:24:
         88:1d:f3:5d:ea:09:f1:93:b5:bf:cd:7c:c4:ee:e0:67:e4:58:
         af:af:04:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:20 2024 by rpki-client on console-fra.rpki-client.org