Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1a0ac13c-af8d-3857-9ccd-e44dee58b01b.roa
File:                     1a0ac13c-af8d-3857-9ccd-e44dee58b01b.roa (raw, json)
Hash identifier:          wwJSJXTgZ98S0TAP5y9mTAWfZRhT6uG1csyThzZ+Gy0=
Subject key identifier:   11:DD:B4:F9:88:75:C3:B1:93:FF:E9:68:34:3A:16:7A:C8:47:71:03
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285845777DDB9A47A498F58D50D018
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1a0ac13c-af8d-3857-9ccd-e44dee58b01b.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     30133
IP address blocks:        2001:500:74::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:db:9a:47:a4:98:f5:8d:50:d0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=fe0c64b2-0e7f-489b-b4ea-4b8b7efeaa29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:65:e2:ce:ea:05:8b:4e:33:65:66:5e:80:ec:
                    bf:ca:1d:97:13:bd:6c:e7:fe:bc:a3:54:ff:63:f0:
                    fa:06:fa:56:e3:6f:75:11:54:00:53:0d:ad:08:22:
                    f8:c8:ca:f8:3c:5f:d7:0d:55:44:5f:ae:0f:37:5a:
                    ca:68:89:5d:01:d7:d1:62:71:83:00:aa:e8:54:6b:
                    9e:92:39:60:28:dd:8b:da:ab:9c:ca:ae:82:bf:fe:
                    6f:50:d9:dc:ac:34:59:0b:5c:3b:8e:0a:4f:b8:33:
                    8f:a2:5c:a8:22:53:9c:e5:9f:d1:c1:65:f8:b8:74:
                    97:1f:01:92:a4:ac:8f:fc:a2:cb:71:d4:01:0a:b1:
                    fa:66:4c:80:13:b6:b6:7d:39:8b:87:99:b8:9e:83:
                    c5:56:11:8c:1a:fb:b4:a7:34:fd:05:0a:b0:11:d9:
                    bc:a9:e3:cd:c0:f2:12:26:4d:ea:3c:3f:83:80:1c:
                    75:b7:c2:25:9f:3b:6b:fe:d2:31:f1:0c:7a:44:21:
                    0c:fa:04:83:be:28:1b:5f:48:0c:e4:d4:71:f3:a0:
                    20:69:fc:52:df:35:ec:e5:46:48:3e:6c:07:71:cc:
                    e3:79:2d:25:dc:e6:31:0f:fe:13:62:be:42:fd:16:
                    c1:b4:99:ad:4a:f0:d4:6a:48:33:f3:dd:dc:7b:dc:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DD:B4:F9:88:75:C3:B1:93:FF:E9:68:34:3A:16:7A:C8:47:71:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1a0ac13c-af8d-3857-9ccd-e44dee58b01b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:74::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:2c:90:fe:4e:c7:c2:a5:36:f9:5f:75:e3:bc:0e:08:0d:64:
         f7:79:dc:a7:ce:a2:e4:5d:2e:47:8a:e6:bf:4f:55:7e:02:ff:
         37:ca:66:27:db:5b:55:be:ab:18:e2:77:05:9a:3c:cc:fd:28:
         3e:cc:5a:b2:54:51:4c:e3:4a:e4:aa:42:58:b6:23:ed:69:e4:
         66:b9:99:ff:76:b2:db:f6:e2:d6:9f:97:ca:97:f4:9f:b4:35:
         4f:e1:dd:0b:e5:60:fe:8a:57:06:66:7c:8c:2e:c4:0c:fa:a9:
         e2:65:27:4c:97:8b:b1:d8:40:0c:96:b8:d8:02:00:d3:36:fa:
         45:d0:5d:dd:1b:d1:d5:ec:91:15:7a:86:ee:96:6b:ce:24:8c:
         8a:54:37:69:e7:1c:30:83:5a:a7:23:4e:ea:72:fc:6f:c3:fb:
         7c:79:2d:7b:84:a2:dc:b2:fe:ac:a8:cd:26:fa:fb:88:60:0f:
         07:79:70:7e:3a:69:a5:aa:da:18:de:2d:97:c1:65:df:99:a3:
         99:ee:ed:f3:f9:4c:5a:4a:97:7a:60:c1:fe:88:57:31:26:4e:
         b8:c8:26:5e:9d:74:eb:ab:a2:2c:42:72:ad:ab:62:ca:44:8d:
         9a:fd:03:ff:c5:92:16:70:09:c4:4d:44:58:60:39:b0:ee:82:
         4f:5e:68:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 20:55:57 2024 by rpki-client on console-ams.rpki-client.org