Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/9fd311c1-e770-39bf-a936-c5c989cd234e.roa
File:                     9fd311c1-e770-39bf-a936-c5c989cd234e.roa (raw, json)
Hash identifier:          GBqWVMiMZdThRIA7QAbB5qHsMtnRoYzBLNqOi7cL8iA=
Subject key identifier:   10:B6:68:F4:FB:FE:78:0F:BA:11:1B:E7:48:53:E7:83:62:A3:11:6D
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F43285844EECFF67752A5D99407CD9580
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/9fd311c1-e770-39bf-a936-c5c989cd234e.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     225
IP address blocks:        2604:4540::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:f6:77:52:a5:d9:94:07:cd:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=8d1eab99-ef48-4c26-b038-ddc288213e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:36:50:4a:18:5b:78:1a:40:70:77:51:5c:
                    0e:a5:31:b9:40:b4:06:6b:75:1d:6f:05:83:b4:97:
                    2e:1b:d3:14:41:31:a0:f8:64:b1:33:56:71:3d:31:
                    60:d6:1f:4a:6b:64:f8:21:ad:56:e5:55:fb:1b:46:
                    8e:a0:e8:30:e2:fa:13:6c:43:fd:1b:c5:2e:4b:19:
                    e3:1c:a9:18:8f:7a:aa:1e:ae:e0:ac:bb:5e:f9:f1:
                    c2:7d:62:ef:da:11:2b:9e:18:89:1d:65:2b:35:7c:
                    a2:bf:5e:a0:ab:63:f7:b7:c7:ef:9a:dd:54:f8:ef:
                    59:7d:fd:48:ff:cb:af:a4:7b:17:98:ce:2a:2f:ac:
                    f9:18:ad:e0:bf:72:d5:c1:03:eb:8e:4c:3d:28:ae:
                    07:bb:09:b7:91:41:f0:21:20:12:5a:ce:87:70:8b:
                    71:fe:73:f8:f2:e9:79:62:01:dd:9f:69:67:7f:74:
                    4a:5b:65:89:a6:89:00:76:37:25:fa:a3:4a:36:5d:
                    85:81:a5:13:be:c0:7f:d8:02:3f:35:6c:81:e8:90:
                    63:3e:49:db:eb:82:6b:94:f9:12:6f:11:34:4c:ea:
                    db:1e:2d:f0:90:d8:01:ee:8b:d9:1f:7c:84:d6:9b:
                    ef:80:c7:6b:0c:db:af:51:35:ff:51:24:d2:4c:c4:
                    a8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B6:68:F4:FB:FE:78:0F:BA:11:1B:E7:48:53:E7:83:62:A3:11:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/9fd311c1-e770-39bf-a936-c5c989cd234e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:aa:86:4b:59:4c:56:66:87:79:0c:8a:05:e1:f3:33:66:6c:
         05:50:51:58:04:6b:0a:c6:e7:0b:0a:f4:9b:86:80:7a:58:ac:
         64:ee:e6:c0:db:0f:9b:0b:b0:fd:3a:80:fb:6e:1a:a0:c5:c2:
         dd:16:af:68:94:c5:bc:c3:c3:c1:b5:8c:6e:d9:45:f5:83:a5:
         05:54:2a:79:7d:ec:ef:92:cf:b9:48:4a:0d:42:e9:cc:ad:6b:
         f4:c5:41:df:12:ae:87:8c:0b:da:49:a9:36:09:1a:af:ad:8f:
         ee:3c:2c:9f:e9:d4:59:ae:92:b5:57:33:63:bc:53:b1:d2:a2:
         b4:dd:a8:e2:3e:6a:51:48:6a:cc:ad:4c:a3:ce:b2:f2:2b:c0:
         cf:f9:66:93:b8:9c:1a:16:03:c4:66:2f:38:7c:37:5c:25:ea:
         c4:97:7c:1c:af:77:f2:c7:b3:e1:1a:71:bd:85:43:0b:3c:38:
         83:a9:25:9d:e9:25:a2:be:44:9e:6a:73:ca:6c:3e:fe:32:97:
         db:f6:83:fa:b0:b5:56:a2:7f:7f:99:9a:7c:85:4d:3d:48:8f:
         5b:9b:f6:f0:d1:03:1e:04:be:92:4a:74:23:91:ce:9b:25:c8:
         f6:65:29:a2:66:ff:7b:3e:f5:18:9f:28:e2:2f:b5:c5:ca:aa:
         aa:7c:87:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:53:30 2024 by rpki-client on console-fra.rpki-client.org