Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67dbb277-754e-3624-b108-1973387047b0.roa
File:                     67dbb277-754e-3624-b108-1973387047b0.roa (raw, json)
Hash identifier:          3+z83xwxaf6tvLjjQ/UDmMf9jloTw4eSy1I4pjGye3M=
Subject key identifier:   50:85:D4:02:C6:27:C2:89:E5:D4:0E:A2:EE:0B:56:0D:77:A1:4C:79
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285845734DBA1D77EF416F72C2AD80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67dbb277-754e-3624-b108-1973387047b0.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a400::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:ba:1d:77:ef:41:6f:72:c2:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=f771afd1-0d7d-4863-baa5-6c1845104632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:66:b3:7e:f6:96:cd:e9:59:4c:61:4f:94:
                    24:1f:f1:02:e1:d6:c6:8d:74:ed:85:1c:3d:b9:06:
                    e8:d4:2d:88:93:91:63:56:c0:f8:32:03:82:ac:bb:
                    ec:90:40:5b:46:0b:7d:36:fa:88:df:ee:17:04:4a:
                    d3:b6:fb:db:29:95:75:95:0f:76:c9:9e:1a:8b:8f:
                    f4:5b:ea:6e:51:4a:09:2e:c4:f1:e7:09:22:1e:11:
                    c2:49:67:b2:2f:b2:5a:a5:34:f6:7a:50:79:e5:df:
                    62:3b:01:cb:86:d1:25:4e:a2:26:a1:22:f4:2b:b4:
                    6a:d4:6a:25:94:a7:59:8e:af:de:41:f5:bd:ca:b7:
                    ec:8f:bc:5d:f0:7f:ff:cd:d3:9f:61:fc:8d:ad:30:
                    18:2a:23:68:2e:d0:4d:b5:2d:27:b6:25:73:8d:c3:
                    c6:9f:18:78:da:15:0b:33:89:f8:cb:7a:a6:d5:12:
                    47:df:c9:6b:be:f7:5b:98:ba:4c:05:38:61:f3:3d:
                    a5:7e:28:2e:f6:f3:d2:c9:1b:72:a7:92:3b:44:b9:
                    73:f1:b7:d2:b6:e3:9e:2f:73:e6:cc:4a:3e:d3:c4:
                    80:36:b7:f4:07:38:8f:38:1c:dd:80:40:8b:1f:e7:
                    71:59:2d:7f:d5:00:41:47:07:94:fe:da:cf:a0:c5:
                    e0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:85:D4:02:C6:27:C2:89:E5:D4:0E:A2:EE:0B:56:0D:77:A1:4C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67dbb277-754e-3624-b108-1973387047b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:56:99:d4:8c:b7:bf:b8:2f:71:89:5b:fe:dc:e9:68:df:15:
         76:ec:da:bd:15:a3:37:22:20:c5:ca:6d:a7:ad:65:6c:c3:09:
         a0:43:40:c6:6d:61:8c:35:03:26:62:35:aa:d6:bc:d3:a7:6d:
         40:dc:de:77:66:b5:8e:3c:0e:d6:e5:c2:81:1a:d3:d5:44:69:
         af:4a:18:ca:9a:e3:30:8b:95:b3:cd:0f:df:84:8c:55:c4:a2:
         c6:ff:06:b3:ba:08:f5:39:52:cb:9b:a8:bb:e7:fc:0f:56:70:
         24:09:9e:d2:0e:c8:36:16:5c:3f:60:ff:6c:29:94:79:fa:0c:
         7c:5c:0e:e4:6c:3e:30:e6:f2:e6:13:7d:fc:81:45:83:86:32:
         00:2a:eb:4c:e4:9e:6b:37:1a:25:bf:46:34:47:ab:8c:41:b9:
         c8:32:de:e4:98:29:23:76:60:7f:ed:00:97:4c:fa:f1:a7:48:
         cd:54:2a:e5:61:7e:04:2f:70:d0:2f:68:7c:51:39:4c:0d:d8:
         7e:35:4a:cd:c1:f8:52:48:b5:d4:ce:f8:1f:08:47:dd:d6:50:
         b6:a9:f2:14:18:98:4d:0a:57:64:35:7e:f7:01:2f:fb:6d:84:
         46:0c:4c:ac:a7:86:06:78:87:bb:51:36:10:80:26:ab:45:2f:
         58:7f:28:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:29:18 2024 by rpki-client on console-fra.rpki-client.org