Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa
File:                     c794535d-4f66-3ef7-abd2-35d8f1551d49.roa (raw, json)
Hash identifier:          7K9aOl8ZWWvn24amRosdSSkMF+BPkozZUuPvl6lYNPw=
Subject key identifier:   37:DB:A2:FD:28:91:7D:E4:44:E9:4A:26:95:C9:70:65:96:15:8A:12
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F43285845734DB675C0EB00B9A96CBE10
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     11650
IP address blocks:        2604:2e00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b6:75:c0:eb:00:b9:a9:6c:be:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=90511b21-7ca3-4f9c-bb55-600ebfa07398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:23:7a:0f:6b:6e:9d:f4:9e:29:6b:ae:14:29:
                    a3:59:14:97:2d:41:32:d0:5d:6b:b8:14:ed:2b:c8:
                    36:7c:4c:d3:7c:85:fa:6a:ee:4a:8a:fa:0a:a1:7b:
                    10:62:96:bb:4a:6e:32:ed:f9:68:c5:d4:ec:1f:1c:
                    c3:3f:6f:9c:0d:3f:60:e9:bb:2f:a9:f6:27:61:ea:
                    9d:0b:66:e8:5e:52:9f:a3:2b:53:6f:c6:4d:15:86:
                    f3:32:f4:c6:bc:0f:dd:b5:de:ca:20:af:fe:69:d1:
                    66:5d:a0:01:ee:2e:0f:f4:1d:ba:70:82:fa:1a:ab:
                    b3:33:cf:5a:33:b3:cd:b2:e7:17:d8:3d:05:0f:ea:
                    92:ff:0a:36:27:5f:eb:79:17:e4:bd:cf:3c:ca:ab:
                    9a:97:80:8d:88:0a:29:5a:f8:fd:38:46:f2:41:e2:
                    41:9d:cb:3b:ac:b3:7a:65:f8:5e:18:28:40:c9:eb:
                    0b:17:7c:6f:00:bb:b0:97:06:00:7a:ff:30:9a:54:
                    31:69:d0:04:fb:b1:29:00:73:48:1a:0b:ee:8b:b7:
                    67:e0:96:ff:75:90:cb:20:a8:5d:a8:21:61:bd:18:
                    a2:57:e2:91:38:bf:ec:01:1f:0d:7f:2a:24:eb:3e:
                    22:a4:a2:cd:e7:44:dd:3c:d7:5f:9b:c3:b1:01:eb:
                    ab:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DB:A2:FD:28:91:7D:E4:44:E9:4A:26:95:C9:70:65:96:15:8A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:28:e4:a6:fb:0c:8e:51:56:61:49:72:b5:8f:49:ac:52:09:
         dd:ff:a3:20:7c:04:5a:f4:fb:1c:1f:97:68:4e:fa:1c:29:3a:
         f5:87:f9:36:bf:7f:56:e7:d1:90:ff:72:78:fd:04:12:ad:81:
         db:6d:70:9b:64:9d:7f:c6:cc:eb:55:bc:e7:bd:bc:c5:7a:3f:
         b4:81:b7:34:a3:6e:29:d1:f8:a6:45:f8:79:14:f2:31:1f:96:
         e3:76:4d:a2:83:0e:6c:db:e9:4f:b1:2d:91:6e:89:8c:fb:62:
         3a:85:c6:9f:c8:de:4a:ec:a4:71:38:44:1b:84:e3:f1:89:e7:
         0e:a2:a2:c8:62:6f:34:01:01:f3:09:36:7c:cb:a8:00:bf:d6:
         33:b5:01:f4:1e:29:e8:f3:f7:97:17:30:67:82:17:c1:87:31:
         34:83:12:f1:29:c6:4d:66:72:d2:5c:2e:7f:0d:15:60:51:f8:
         49:e5:41:21:c7:a1:66:04:3d:3e:bb:ee:d3:ae:dd:db:5a:91:
         c8:1d:ab:bb:6d:a9:fd:11:4b:c1:d9:b7:16:00:d8:40:52:3b:
         19:87:c7:d6:2b:6f:6d:a1:b0:70:c5:e4:76:82:58:e1:2d:54:
         15:08:d9:b6:3a:51:16:1d:7f:87:2e:4b:fc:e4:33:da:cb:78:
         60:02:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:32 2024 by rpki-client on console-ams.rpki-client.org