Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa
File:                     856571e3-0844-3aaf-b208-47df360ac0b7.roa (raw, json)
Hash identifier:          dR/jE8A4jr4cefppOXWYWpdHDmThnAFDf3xKCExNYRo=
Subject key identifier:   D7:82:C2:52:98:99:BD:70:5F:40:A3:15:DF:B2:D7:F4:59:F3:FD:3B
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584608A94D059039815CF9A28300
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa
Signing time:             Wed 29 May 2024 13:00:34 +0000
ROA not before:           Wed 29 May 2024 13:00:34 +0000
ROA not after:            Tue 27 Aug 2024 13:00:34 +0000
asID:                     54874
IP address blocks:        2605:f440::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:08:a9:4d:05:90:39:81:5c:f9:a2:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: May 29 13:00:34 2024 GMT
            Not After : Aug 27 13:00:34 2024 GMT
        Subject: CN=0a3be15b-4074-49ac-9ee1-2a099ee9813d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3e:a7:9c:6d:b2:72:9e:e5:65:af:6f:89:ae:
                    b8:f6:ef:d2:db:e1:db:fb:ca:ff:89:1b:ee:2d:0c:
                    90:b6:d8:65:07:be:1f:8d:43:5f:32:32:dd:5b:62:
                    2f:05:a8:c1:7e:89:5c:2e:81:8b:9f:09:27:65:d9:
                    39:11:e0:5f:f0:cd:d4:ee:5a:91:c6:34:5d:c6:e6:
                    ab:d0:fe:63:23:ab:bb:ac:0b:9b:01:ff:bb:92:9f:
                    ca:3a:af:3c:e9:e3:64:e9:d1:fa:90:db:e2:dc:9d:
                    30:82:db:a2:56:2b:ec:04:5c:6f:e5:98:80:68:90:
                    1c:2e:de:59:ea:73:2a:9d:e9:02:06:e2:f1:c2:a4:
                    d5:8b:ff:57:cc:55:1f:4b:77:f2:5c:c6:0d:e6:f9:
                    a2:1d:60:cc:4a:a2:8c:15:a6:2b:1b:63:7c:97:2f:
                    c5:66:c8:f3:f2:ea:ce:9d:47:cd:0c:92:7f:e9:d8:
                    28:48:c2:16:6e:0b:f4:81:41:6a:18:59:df:8f:7b:
                    f5:e5:77:cf:9c:93:ac:c2:19:b4:cb:7f:4f:6a:eb:
                    d1:61:c6:43:f5:7f:4b:1d:0b:bc:36:c4:57:8f:4e:
                    f2:32:82:07:8e:27:99:21:63:07:c3:ce:3b:65:8a:
                    12:fa:68:11:e7:64:c5:44:11:18:07:97:f7:9e:72:
                    2f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:82:C2:52:98:99:BD:70:5F:40:A3:15:DF:B2:D7:F4:59:F3:FD:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:33:c5:ac:0b:f1:8a:6c:da:b1:13:a1:31:ac:a4:bb:f1:56:
         6d:2a:d5:f7:0a:e3:e7:ca:4f:7f:8f:cd:d6:a0:0e:cc:de:4f:
         6f:1e:f9:de:d7:f7:2c:12:47:91:8e:f2:4f:9f:21:50:d4:fd:
         41:bb:a6:27:95:b8:5c:4c:56:64:92:47:dd:c2:97:0a:6c:dc:
         0a:5a:6a:ff:f4:15:2f:47:73:3b:79:91:fd:0e:aa:05:80:fc:
         d6:d7:9f:e4:e3:cb:83:20:aa:be:ba:ab:b5:8d:2c:1b:fa:3f:
         99:8b:1a:4e:7c:a0:f5:ac:46:53:5d:d7:61:3f:f4:d7:46:b8:
         34:04:00:9e:da:a8:c5:f0:74:6a:94:23:f6:81:6d:14:10:38:
         b4:c3:95:1a:85:9f:6e:a4:5c:e2:f2:80:94:6b:96:f1:d3:5d:
         34:4b:1b:ab:ef:be:bb:73:4d:2a:ee:40:5d:97:e9:4b:41:1e:
         d4:30:f6:f4:c2:48:2e:cd:a2:a3:10:1a:81:38:cc:aa:d3:02:
         27:de:5c:04:30:bf:cc:cc:17:45:37:73:f2:6c:dd:56:ac:1b:
         95:eb:22:78:08:ca:d0:6d:05:e3:8f:d7:0d:4f:ec:de:70:1c:
         a8:94:46:69:ee:07:4e:7a:86:f7:ad:f6:b7:18:25:6a:4e:69:
         64:91:ef:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 08:50:41 2024 by rpki-client on console-ams.rpki-client.org