Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/4ca1a533-c342-3a84-84f9-2df80cda1c94.roa
File:                     4ca1a533-c342-3a84-84f9-2df80cda1c94.roa (raw, json)
Hash identifier:          P3mjxsdIKqpzwFSzXYCvfk73qreob/4FB+tBhSmyDUU=
Subject key identifier:   58:F4:B9:88:B0:77:AE:37:96:06:E1:01:E0:2D:93:50:9D:DF:53:CB
Certificate issuer:       /CN=5701ab54-077b-43a9-8b22-67e8fe12ded7
Certificate serial:       010D0C9F432858452AB7DF2E655040B052CA2A80
Authority key identifier: 19:19:13:1D:36:B4:5E:A5:05:6F:9C:D3:2A:28:08:29:01:C6:0F:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/4ca1a533-c342-3a84-84f9-2df80cda1c94.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     397797
IP address blocks:        2605:6640::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:df:2e:65:50:40:b0:52:ca:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5701ab54-077b-43a9-8b22-67e8fe12ded7
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=7e8712b6-7250-4333-b380-601de5d7c8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d7:02:63:94:2a:47:6c:96:00:bd:b5:58:39:
                    51:fe:98:73:95:f7:76:c4:fe:d9:67:4a:12:e3:e1:
                    64:c9:ea:97:e7:e8:be:15:f1:81:ce:bc:fa:38:19:
                    7b:c7:cf:b3:b5:c3:64:01:cf:fe:6a:f5:f1:4f:21:
                    7f:78:d3:a5:7e:dc:b9:21:fd:9e:c7:a1:60:11:bf:
                    20:68:3e:2b:ca:68:d0:87:2e:46:58:5d:d1:db:14:
                    df:fc:d5:a3:63:16:71:7c:03:12:8b:eb:8c:59:b5:
                    82:08:83:dd:0b:88:e9:35:d8:0b:4f:fd:c0:2d:f6:
                    b4:00:b5:c8:b2:d5:f6:a9:76:8b:d2:fa:18:04:d7:
                    60:8e:bf:00:3d:5e:7e:1b:d3:11:c6:d3:84:f0:f6:
                    e1:80:f2:e8:f8:0f:e1:97:d2:b0:c5:aa:b6:79:29:
                    00:5d:3e:ce:0f:be:60:86:27:41:97:13:93:73:92:
                    df:e9:56:0d:77:b3:18:2a:a4:2d:6b:d7:0d:b2:0d:
                    df:51:bc:5b:8f:7f:da:4e:a2:6f:f8:d3:df:0c:00:
                    36:6e:8a:79:1c:60:42:4c:32:08:13:c2:21:ce:06:
                    d3:99:4f:4a:66:0d:5d:8c:3f:2a:2b:89:22:7d:d5:
                    01:95:5c:28:1a:0a:28:2e:bd:86:13:2d:8b:d1:cf:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F4:B9:88:B0:77:AE:37:96:06:E1:01:E0:2D:93:50:9D:DF:53:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/4ca1a533-c342-3a84-84f9-2df80cda1c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.crl

            X509v3 Authority Key Identifier:
                keyid:19:19:13:1D:36:B4:5E:A5:05:6F:9C:D3:2A:28:08:29:01:C6:0F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:fb:10:4c:e6:c1:af:b5:b2:1f:91:98:de:91:15:11:3b:17:
         fc:44:7b:b5:10:27:c2:1e:e8:7e:d6:3d:ff:63:24:e3:75:0d:
         5b:5a:b7:89:b7:bf:60:d1:ac:fe:1f:93:e7:54:cc:b3:3a:44:
         32:25:a7:df:cc:4e:f0:a9:ff:af:5b:cc:b2:37:8b:c6:4b:ba:
         9a:16:f6:7b:45:ec:3a:38:47:e8:44:f4:42:e2:76:9c:3b:fa:
         56:63:df:a4:c4:80:d1:59:5d:2b:57:ce:3c:5c:71:15:05:51:
         49:34:02:a2:e5:a8:6f:ed:e2:7f:b3:28:d8:c0:de:16:ac:67:
         4b:8e:bf:2b:33:82:f3:87:15:87:df:bc:ec:00:ef:39:8e:56:
         d2:e7:b7:22:7f:10:5e:4f:a1:eb:a6:fa:38:ab:a7:b3:2d:46:
         50:60:74:6c:d8:da:57:bf:29:47:48:1b:cf:11:a4:02:c6:75:
         38:3b:c6:d8:39:6f:01:c7:e8:4b:30:6b:d8:cc:4f:e7:99:1e:
         3f:9e:c6:e6:3d:44:7f:62:d8:d8:fa:d4:b7:2b:34:df:7d:60:
         f8:51:86:a1:e2:b5:dc:ae:e2:35:19:cf:76:17:94:d4:86:67:
         cf:59:ba:38:ae:d8:bf:5c:0d:9a:d8:a6:0d:d8:47:e8:d4:df:
         5f:4c:4e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:02:40 2024 by rpki-client on console-fra.rpki-client.org