Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa
File:                     970b7e04-01f1-3927-90a0-79d7a904fce7.roa (raw, json)
Hash identifier:          wzVVrhmSQiaUVFUXXqo/5QbqPuReEYSRjab6OHZcWno=
Subject key identifier:   FE:77:1C:24:11:9E:AC:5C:AD:51:CC:A5:16:67:F7:E3:1E:70:2E:B4
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F432858454AD2CFC572DD26559A4D7680
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     10390
IP address blocks:        2620:10f:400e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:cf:c5:72:dd:26:55:9a:4d:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=344f7511-1fff-40be-9189-206fcff173b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:af:26:ff:3f:88:6f:64:3e:ff:3e:75:25:65:
                    2f:dd:da:6d:ba:4b:ce:e6:fd:52:ff:81:c1:9f:40:
                    6b:f4:7b:75:78:d1:f8:29:5d:36:f3:d3:a0:1f:a2:
                    b0:be:ac:c7:4b:fe:49:f9:32:ef:cf:09:e9:c5:1e:
                    53:bb:8c:a0:75:26:ad:a6:3f:7f:81:30:dc:06:2f:
                    b4:62:86:2e:93:01:34:78:e2:51:0a:a5:06:08:8a:
                    d9:81:a9:e5:b9:fc:f0:7e:ee:41:ff:8e:c1:07:27:
                    92:78:0f:ba:20:47:2c:9d:c6:fc:61:d5:27:44:7a:
                    73:0c:a9:8a:66:98:db:c2:2b:12:18:0e:c8:2d:d1:
                    f1:a6:ca:c0:41:e6:7f:2d:36:74:4c:ab:9d:c8:b2:
                    c2:0e:1e:7b:72:fc:15:a9:4a:c4:25:dd:6f:d9:b9:
                    07:4d:79:a6:71:b7:dd:91:9d:2b:86:42:2a:a0:0f:
                    fb:82:fd:d3:e6:a0:18:f3:f7:5d:4e:d6:a0:a8:4c:
                    57:18:98:38:d3:94:55:37:05:b3:0b:cc:81:af:38:
                    c5:d8:c1:a9:49:3f:12:57:fa:13:82:19:3e:3b:46:
                    c6:9d:b3:85:37:f5:b9:ba:a7:1c:89:0d:49:27:14:
                    19:b9:7b:4e:5f:44:4d:51:5e:f8:70:b2:ca:6d:d9:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:77:1C:24:11:9E:AC:5C:AD:51:CC:A5:16:67:F7:E3:1E:70:2E:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:400e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:8e:9c:1f:ef:20:90:60:c4:fa:b2:0e:94:42:3d:ca:a9:d3:
         59:0a:8a:88:fc:34:e1:b3:ba:2e:e7:d5:4e:a0:da:18:ec:eb:
         6d:90:4d:0f:b1:47:0f:9b:6f:31:c1:cc:95:5e:f8:2b:17:f0:
         4d:37:4e:4c:2b:ef:e9:6f:25:93:36:fa:b1:3b:9f:e5:90:98:
         84:65:a2:69:8d:68:4a:fb:79:77:74:72:28:17:fa:84:6d:8f:
         1f:12:02:12:f9:8a:41:0c:70:f3:63:9b:5a:2b:b3:23:6e:a9:
         3c:13:24:5a:66:d6:09:78:9c:d6:ea:39:e0:2b:6e:38:3d:db:
         12:e3:ee:43:d1:d1:49:1c:55:98:65:17:e1:b0:29:6f:ed:ba:
         4d:4f:42:62:b5:a9:67:c1:7c:b2:4e:11:94:ec:70:37:f2:7e:
         d2:3e:65:5c:d8:9a:0a:48:49:c9:f5:58:cf:af:ad:59:1f:2d:
         99:fc:b9:e3:cc:2d:dd:6b:15:5d:5b:7a:b9:79:18:8a:1e:5d:
         6b:cd:64:df:90:40:13:7e:8a:79:6f:8c:9a:5c:fb:24:ba:80:
         94:a1:53:ae:ab:24:fe:31:d4:ba:86:2f:9f:e4:2c:af:10:1d:
         37:58:e5:27:04:50:fc:f8:4a:fa:e6:70:7b:36:5d:a0:3f:8f:
         43:8b:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 06:58:12 2024 by rpki-client on console-fra.rpki-client.org