Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1f6e6277-8ea3-393e-ba00-44d1e44496de.roa
File:                     1f6e6277-8ea3-393e-ba00-44d1e44496de.roa (raw, json)
Hash identifier:          CY6uS7FSrtgdV6ZXApiJR0hwljhtoiCXe9OwLDgmvhA=
Subject key identifier:   CD:B1:BB:D0:27:44:3E:AD:42:52:78:54:4C:AA:92:51:29:F2:5F:B5
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F43285845B4E8D3EC899B47998EB81400
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1f6e6277-8ea3-393e-ba00-44d1e44496de.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     10747
IP address blocks:        2607:9a80::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d3:ec:89:9b:47:99:8e:b8:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=09d959bf-4efd-4656-b81c-39c2576e0eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fa:a7:df:b4:1e:b4:e2:a8:ac:26:6a:8b:a6:
                    c3:d8:06:f2:dd:34:ad:9c:8e:9d:b8:e5:81:85:1b:
                    29:b8:02:08:ae:95:4f:fd:67:aa:bd:65:6c:56:d9:
                    d6:c2:8b:52:a8:c1:63:60:e7:5c:2b:36:dd:ca:99:
                    51:fa:68:c0:06:a7:67:6b:6e:73:c3:5d:a8:81:c6:
                    fe:0b:0b:ec:ca:b8:e7:83:fe:00:a1:85:e8:a1:6e:
                    ba:1a:18:fa:8e:8e:ca:91:d8:e9:c9:28:99:a1:34:
                    5c:39:a3:45:bb:70:29:e7:d9:bc:f4:ec:13:ef:af:
                    cc:e3:40:29:b4:bf:a2:bc:a3:f8:6c:10:da:c4:94:
                    14:12:8e:c4:7e:69:c3:99:b3:8c:74:1d:99:8f:ce:
                    b1:e7:ac:95:a9:84:1d:97:e2:c0:98:cc:a7:a3:e0:
                    84:b3:d7:de:6f:ed:86:30:f4:e2:50:19:2a:a7:2d:
                    80:4e:7b:04:0e:b4:0f:f1:f5:d9:66:71:41:ce:4b:
                    2a:60:1e:ac:cb:c7:b4:b4:86:6d:98:91:cd:5e:b6:
                    e6:0c:8f:68:bb:0f:27:fe:db:dd:d5:5f:28:8e:aa:
                    1a:da:60:4b:3b:2a:83:81:e0:77:13:63:e1:55:e2:
                    78:9f:14:7a:01:a4:a3:5c:12:f1:10:c6:9e:2c:ad:
                    d1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B1:BB:D0:27:44:3E:AD:42:52:78:54:4C:AA:92:51:29:F2:5F:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1f6e6277-8ea3-393e-ba00-44d1e44496de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1d:e8:bb:40:ea:14:7b:94:5b:b5:f8:ae:8e:20:93:a6:59:
         89:17:dd:28:9a:5d:f7:4c:3c:ef:4d:a3:57:8b:76:f8:61:f9:
         a1:35:4b:f3:8e:1b:b0:33:8c:c9:36:8e:d9:c7:53:37:bd:8d:
         c4:a9:9d:4a:d8:f4:ce:1e:fe:c5:3c:82:ba:94:12:63:51:34:
         b6:20:f1:2c:99:65:0f:6a:18:bf:19:18:51:a6:d8:be:d5:b2:
         92:a6:fa:fe:35:ee:97:75:c7:c0:68:9e:39:59:47:3c:e8:97:
         8f:cc:5a:a8:e1:db:46:f9:58:06:19:f1:55:f4:d1:b3:a9:6e:
         31:c4:b4:82:7d:09:39:82:0f:1d:af:37:38:c8:12:bc:bb:fb:
         b1:84:f2:c4:50:60:5e:e5:3c:cb:1a:76:b9:1d:5e:cb:23:69:
         38:1a:53:15:69:4f:e0:c0:05:b7:cb:32:20:2c:ca:77:e1:fe:
         aa:8d:f0:8a:5b:3c:36:9d:4c:2d:32:0d:ec:48:55:5e:e8:11:
         5e:5f:cb:fb:75:b7:89:99:9d:2c:bb:01:8c:74:1d:9b:29:94:
         da:fa:16:cd:55:96:73:60:73:12:2f:ea:89:ba:69:fe:67:42:
         44:6d:18:37:4e:0d:87:59:cd:7d:99:b7:0a:24:0f:b1:8a:c4:
         df:3f:62:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 06:41:30 2024 by rpki-client on console-fra.rpki-client.org