Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/942c9e96-374f-34ae-ace7-3764b014e8d8.roa
File:                     942c9e96-374f-34ae-ace7-3764b014e8d8.roa (raw, json)
Hash identifier:          qWduV82KY5f5NPQFrWM6+kIE0yKNV3lRnTFODrY9/qc=
Subject key identifier:   76:24:D8:DC:88:61:80:00:B1:9F:0B:8C:08:3A:8A:87:23:E5:28:67
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858395BD69D0C848EC4FA02016138
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/942c9e96-374f-34ae-ace7-3764b014e8d8.roa
Signing time:             Wed 24 Mar 2021 04:00:00 +0000
ROA not before:           Wed 24 Mar 2021 04:00:00 +0000
ROA not after:            Wed 17 Mar 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2607:f098::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:5b:d6:9d:0c:84:8e:c4:fa:02:01:61:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 24 04:00:00 2021 GMT
            Not After : Mar 17 04:00:00 2027 GMT
        Subject: CN=ba29bb7e-3d40-4935-bfed-57534e14a2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:37:43:e4:b0:59:35:d3:b4:5c:45:5c:36:90:
                    47:16:fc:19:e4:88:f0:10:57:c6:83:1e:f0:57:e0:
                    51:bf:7e:22:a0:bf:8c:63:66:3b:92:ca:17:fe:11:
                    ea:3f:2a:56:a1:f5:c0:33:61:c1:8d:25:15:3d:0b:
                    0d:9b:95:90:a6:70:d0:ff:ba:4f:48:0c:04:96:e0:
                    ee:8c:9d:89:bc:cd:a4:a7:61:e1:42:e3:6a:f1:41:
                    87:59:fd:87:a5:a6:59:71:91:f1:be:86:47:41:a6:
                    c2:08:1a:ac:55:89:f8:ec:59:ae:2f:fe:27:18:05:
                    ec:09:29:16:0f:4a:02:5a:db:f0:6e:f3:55:33:fc:
                    46:48:14:c9:05:bd:60:be:32:7a:43:e6:da:20:b0:
                    46:05:93:d9:f0:e8:d5:60:35:91:80:30:e0:0a:09:
                    54:ca:ca:4f:c3:72:9e:7f:8a:2d:0c:bf:74:a1:78:
                    e7:ce:13:be:29:2b:1f:48:f8:4d:86:c1:ad:b4:26:
                    10:90:10:42:6d:8c:e8:1f:65:75:86:e0:68:93:6a:
                    9a:80:1f:b7:bd:2c:5c:bd:f5:b2:ca:8c:89:f0:16:
                    13:71:28:5c:83:f8:5d:e2:68:a0:a9:40:7a:0e:70:
                    ad:b5:12:36:cd:ee:cc:49:30:2f:15:86:02:df:30:
                    03:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:24:D8:DC:88:61:80:00:B1:9F:0B:8C:08:3A:8A:87:23:E5:28:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/942c9e96-374f-34ae-ace7-3764b014e8d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:be:c8:6c:96:d0:cd:4e:50:0d:9a:ae:be:90:e8:bd:5f:99:
         58:56:fe:3b:5f:f0:e2:54:04:17:d6:8c:5d:88:e6:b7:46:2a:
         03:49:de:56:64:9d:b2:9b:d5:f0:ad:74:f5:a0:f3:87:32:b1:
         91:45:81:91:a2:ca:fc:22:d4:50:77:29:21:df:5a:5e:bc:00:
         1e:7f:dd:f4:c7:c4:89:09:ca:1b:f0:48:77:95:8d:cf:46:d8:
         fc:8e:50:08:13:55:a2:9e:da:98:76:e6:c6:32:bc:46:1c:96:
         f8:31:b9:fc:47:39:9a:0a:a6:49:fc:70:95:67:8c:0c:bc:6e:
         1a:50:0c:1d:45:ec:dd:f3:0c:62:98:0e:0c:e7:77:f2:1d:39:
         71:bc:34:8b:30:9c:02:d0:10:67:ff:5b:80:fb:ea:5a:9e:64:
         fa:8e:40:f5:38:fd:bc:cc:b1:94:d3:17:06:4d:88:75:51:7e:
         15:67:ec:a0:61:b9:5d:88:07:27:08:89:00:11:5c:60:c5:f2:
         b8:b7:3f:a6:24:98:f8:5c:6a:3f:ba:99:56:f9:02:9c:a1:93:
         94:ba:1f:c6:b1:43:85:bc:e6:24:92:93:8b:67:28:19:7f:0b:
         57:96:36:12:4d:15:63:0e:58:2e:71:ae:d2:38:20:77:10:cd:
         86:54:29:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org