Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e165d621-9060-3e34-b9e8-9129d9c6f607.roa
File:                     e165d621-9060-3e34-b9e8-9129d9c6f607.roa (raw, json)
Hash identifier:          84Mkh0m4W3m9QxVYObD+tjrDs/+lFAfThVmEfNIVdGI=
Subject key identifier:   F0:04:80:F8:99:5C:0C:A6:FD:0B:EF:E8:EA:1E:0B:53:99:67:1B:98
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845462FB589403EE2CFE0670B00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e165d621-9060-3e34-b9e8-9129d9c6f607.roa
Signing time:             Wed 20 Mar 2024 21:08:47 +0000
ROA not before:           Wed 20 Mar 2024 21:08:47 +0000
ROA not after:            Tue 18 Jun 2024 21:08:47 +0000
asID:                     36492
IP address blocks:        2604:ca00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2f:b5:89:40:3e:e2:cf:e0:67:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 21:08:47 2024 GMT
            Not After : Jun 18 21:08:47 2024 GMT
        Subject: CN=342ed7e2-5cc7-40b1-95fa-0e7924b87fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1c:f0:ef:71:64:4c:31:c8:43:f6:26:cd:25:
                    4c:30:e1:1a:ac:8c:e3:c7:08:4f:a0:dd:f4:8b:cd:
                    bb:43:91:6b:05:17:a3:76:3d:64:9e:79:3c:cd:59:
                    aa:5a:93:fb:15:bc:f7:8e:2f:e6:79:48:c5:40:4e:
                    0c:ba:b7:c5:a4:74:69:c5:85:19:5a:eb:2f:04:3d:
                    ba:09:7a:a4:8b:f8:a6:d3:c4:d3:70:06:f1:77:93:
                    67:bd:43:d8:7e:92:ac:ef:5e:89:4e:c2:36:c5:01:
                    1a:f3:6f:06:e4:77:aa:68:9e:85:b7:91:31:d1:0b:
                    41:43:70:4f:94:a5:08:65:4d:f9:77:b6:de:ed:e8:
                    89:32:61:80:91:d3:50:74:a4:54:ee:17:10:60:e3:
                    02:99:01:fd:8a:44:e8:80:d6:4b:e8:a8:5a:43:05:
                    4f:40:3e:06:ae:86:80:4c:e9:d7:85:52:43:24:f4:
                    23:c1:b8:cf:b7:d6:1b:a9:a5:e2:d5:cd:23:31:0c:
                    3d:a3:41:e5:d4:61:26:3f:4e:8c:ca:49:4b:b2:ca:
                    9e:b0:d1:c1:66:58:52:e0:c6:ba:f9:56:78:cd:05:
                    89:0d:8a:20:03:1a:05:87:dc:d6:ab:08:84:53:aa:
                    0f:8b:77:32:5f:66:c5:49:0a:a4:54:87:50:57:78:
                    07:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:04:80:F8:99:5C:0C:A6:FD:0B:EF:E8:EA:1E:0B:53:99:67:1B:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e165d621-9060-3e34-b9e8-9129d9c6f607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fa:e8:8d:ae:57:4d:c2:13:a4:d6:b0:7d:fd:06:df:5e:23:
         a0:01:71:6d:61:dc:c4:b9:e9:cb:b3:10:51:6a:ea:3e:af:7f:
         60:a6:47:6c:6d:15:43:38:6b:cb:2d:e0:39:e2:74:46:88:d7:
         48:45:8e:12:39:01:30:cd:98:bd:b2:5d:7b:3b:b6:02:54:58:
         e3:1b:23:2e:93:6c:6a:47:07:fe:9a:75:94:60:91:4c:90:0d:
         48:07:f8:c3:b4:10:aa:ad:39:be:fa:72:ef:a7:e6:d9:30:1e:
         b9:30:18:ae:4e:ed:38:38:92:c1:d1:62:bc:c0:c1:06:60:8b:
         d4:54:a0:6f:8d:2a:5a:63:94:a2:3e:84:24:a7:c7:23:f6:6f:
         52:94:22:ff:49:83:b9:06:5c:50:b4:a6:36:fc:5d:c0:b5:5f:
         ff:9e:c2:4b:d3:d8:52:23:cc:db:6f:be:fa:a9:80:4f:05:da:
         58:13:0f:90:c7:e5:81:20:6e:80:b7:43:b7:43:96:de:52:47:
         d8:ce:81:aa:8a:2f:92:fb:e8:3c:f5:07:36:d4:f1:4c:6e:b2:
         d0:f1:10:20:20:5c:13:0e:46:d6:79:04:47:e8:1c:f1:e8:05:
         31:c3:2b:23:52:4b:e8:95:f3:73:1a:20:db:1f:b6:55:98:30:
         f6:2e:a4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:57 2024 by rpki-client on console-ams.rpki-client.org