Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/7bcfb844-8373-30d1-b332-b6503cf8d4fc.roa
File:                     7bcfb844-8373-30d1-b332-b6503cf8d4fc.roa (raw, json)
Hash identifier:          IgLeD85TnKWeH2fd0xAohQoyLJB/N5JvqdzGbNfk7DA=
Subject key identifier:   65:29:17:C8:14:6D:7F:8E:A7:F7:1F:AA:3F:6E:68:1F:AE:BF:7E:98
Certificate issuer:       /CN=31423667-ebcc-4a10-8150-8758941bb075
Certificate serial:       010D0C9F432858457DA025BB3FCC5C25B0F893F0
Authority key identifier: 91:01:2E:B2:A1:51:5C:89:B5:03:AC:13:75:4D:37:A4:51:26:03:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/7bcfb844-8373-30d1-b332-b6503cf8d4fc.roa
Signing time:             Tue 09 Apr 2024 17:44:48 +0000
ROA not before:           Tue 09 Apr 2024 17:44:48 +0000
ROA not after:            Mon 08 Jul 2024 17:44:48 +0000
asID:                     19218
IP address blocks:        2604:fd00:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:a0:25:bb:3f:cc:5c:25:b0:f8:93:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31423667-ebcc-4a10-8150-8758941bb075
        Validity
            Not Before: Apr  9 17:44:48 2024 GMT
            Not After : Jul  8 17:44:48 2024 GMT
        Subject: CN=cb4c9e33-a14d-4dfe-a616-dcbcc5e9d164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:37:ba:da:6d:be:ec:45:73:c4:36:f9:12:af:
                    24:72:5c:b2:01:94:14:c2:79:a9:33:b3:fd:b3:1c:
                    90:32:a4:49:bf:18:72:4d:48:34:c4:9f:4b:69:2c:
                    49:77:7c:0c:86:1c:d2:4f:e4:51:d0:5d:20:59:28:
                    fb:70:b8:3e:ad:7f:23:17:86:dc:71:a7:ab:44:ec:
                    7d:ad:dc:6c:b4:16:e0:0b:13:7d:b6:21:c7:69:b5:
                    9b:bf:64:1f:2b:e6:fa:d6:45:fc:75:6c:f0:99:5c:
                    fb:ea:29:04:6b:3f:a9:62:e2:31:d2:1f:9e:ce:c8:
                    9b:19:f2:c7:63:45:75:a3:c5:6a:0c:03:18:05:e5:
                    75:fd:54:c0:78:e6:ca:26:25:a5:2f:5d:97:a6:74:
                    16:6e:30:f2:bf:4c:7a:f8:42:b9:a4:ed:59:08:07:
                    16:9f:54:8e:fa:49:89:d7:bb:d2:b5:78:68:1f:93:
                    13:f5:27:52:bc:5c:c1:a2:4f:bc:d3:cb:bc:b2:22:
                    35:0d:03:62:12:5d:ed:f2:f1:b8:98:b3:bb:e0:af:
                    99:e0:d0:57:84:e5:ed:3b:ec:d2:5b:b3:ac:3c:20:
                    0e:e6:c5:f3:80:d3:7f:d0:0e:14:8c:44:6c:78:98:
                    51:30:3b:df:35:f7:e6:c7:32:0a:5c:ba:50:2b:3a:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:29:17:C8:14:6D:7F:8E:A7:F7:1F:AA:3F:6E:68:1F:AE:BF:7E:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/7bcfb844-8373-30d1-b332-b6503cf8d4fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.crl

            X509v3 Authority Key Identifier:
                keyid:91:01:2E:B2:A1:51:5C:89:B5:03:AC:13:75:4D:37:A4:51:26:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fd00:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:e8:a2:c8:86:aa:9c:86:e7:b7:be:aa:9c:b1:cd:2f:66:3d:
         06:9a:a2:09:2a:71:13:3b:83:15:b1:dc:a0:c9:db:34:b3:ef:
         73:3e:59:5b:8f:de:e6:1c:af:ad:c1:8e:6c:32:fc:f7:99:04:
         7b:5a:a6:4e:02:91:36:e7:56:51:f2:00:26:47:6d:39:45:dc:
         ac:9c:1a:aa:46:d5:3d:43:40:52:ea:5b:06:87:af:fd:c5:82:
         fa:32:8b:94:06:43:11:98:8d:b0:2a:d4:70:3d:87:51:ef:a8:
         0b:70:59:1f:2c:dc:02:2f:5a:66:0f:12:0e:8c:e2:08:1b:fa:
         62:4e:9c:8d:0f:f8:1b:99:8c:00:41:d0:01:50:a4:2a:25:36:
         20:05:14:50:79:ee:0e:3a:92:91:b1:6b:ce:e9:5d:7d:26:e0:
         12:fe:9f:5d:92:aa:68:c2:e1:e7:69:15:3d:56:32:fe:ff:20:
         f2:52:e0:90:b6:71:6e:c6:8d:3d:3c:3f:27:5d:23:0e:cd:65:
         45:d3:54:a8:86:9c:28:00:5b:7f:be:3d:ed:82:b7:7a:da:59:
         a0:be:65:6d:c2:ba:c4:e8:58:f1:bc:66:38:2b:b6:bd:62:a6:
         51:7d:45:db:3a:cc:53:31:8f:d4:d5:db:aa:bc:bc:56:79:a8:
         7d:e4:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 15:56:40 2024 by rpki-client on console-ams.rpki-client.org