Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa
File:                     5ad059d5-c2f7-31c1-abd5-db5132e61422.roa (raw, json)
Hash identifier:          SPVvGsYrvc29inBjxUbFsCVRVJMec66VMznnhWrg6cc=
Subject key identifier:   AC:B5:30:DA:E5:FC:62:FC:3F:66:93:D0:91:CD:DC:FC:22:01:02:72
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285845777DDB27F128A705918D2300
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     30133
IP address blocks:        2001:500:64::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:db:27:f1:28:a7:05:91:8d:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=0043de32-1155-4a58-876d-26ef22e78d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:d4:1d:7f:95:a0:b6:e4:33:11:8e:a5:ca:
                    a4:1b:2a:c6:5d:d4:6b:e8:0a:37:db:80:26:e2:96:
                    80:0e:d0:66:28:95:7a:93:90:49:94:12:43:a4:63:
                    59:67:82:09:66:03:35:43:22:ed:62:16:1b:62:69:
                    ff:b8:03:ec:8a:42:8e:f1:2f:8b:6f:e3:49:08:a6:
                    5c:80:e8:7a:da:b3:91:ea:2b:53:05:04:b2:99:77:
                    6e:5a:3a:06:06:ab:7d:53:0d:d1:f8:c2:1d:65:56:
                    51:e2:9a:3f:d4:7f:9f:7f:9d:68:f9:63:5e:39:e4:
                    29:15:ed:d1:98:32:fc:1a:cc:f3:0d:bb:17:ba:90:
                    ed:8c:2b:85:3e:d3:a4:d5:6f:6f:9a:c9:eb:02:c8:
                    a8:a3:47:cf:ec:ee:e7:16:1e:7e:80:14:03:c3:a4:
                    1f:a1:3b:3f:43:37:be:e0:7a:3a:e6:d8:db:4f:83:
                    23:d6:63:b7:58:82:3f:ed:78:ac:34:fa:b7:a3:9c:
                    74:89:50:3b:a3:14:3d:2f:69:a6:29:13:a6:25:a9:
                    c0:98:ce:05:f5:46:10:7d:95:0f:32:b5:ba:5f:1c:
                    5b:fb:08:60:23:9f:56:ec:35:cd:14:e2:b7:12:60:
                    54:a9:79:d8:47:4c:76:e1:41:dc:6c:a8:cb:21:68:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B5:30:DA:E5:FC:62:FC:3F:66:93:D0:91:CD:DC:FC:22:01:02:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:64::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b6:0c:12:c0:b7:14:cc:40:64:96:40:6d:bf:48:f9:0e:d4:
         a6:66:eb:23:0c:00:b9:c2:b2:64:3f:85:5e:7e:d0:c8:82:e7:
         56:17:08:dc:93:04:51:46:b1:3b:c2:e0:39:62:b3:a4:54:0c:
         ba:05:97:f3:92:9a:0c:93:9d:88:97:2c:56:6b:89:ca:5c:bd:
         aa:1e:b3:ac:e1:6c:bb:fd:d1:cd:5b:13:44:14:c2:6d:14:19:
         11:33:68:2c:a5:22:07:5d:9a:1a:80:92:4b:14:cf:c7:7a:e1:
         f7:3b:8e:8a:32:a2:a4:8b:6d:a8:46:36:97:85:72:40:30:c5:
         da:82:26:ee:38:85:ac:cf:b6:23:c7:af:39:0e:6c:98:e9:5f:
         b5:e8:fe:7d:51:c1:bd:78:f0:ba:53:4f:13:65:ea:71:db:eb:
         93:aa:66:2c:f6:4b:c5:01:87:e0:a0:b6:08:aa:f6:19:d5:7b:
         6f:0d:9d:e0:0d:cd:26:a0:76:d8:2f:b5:ef:5c:f5:93:31:fa:
         af:b9:dd:c2:b5:43:34:71:a3:12:77:c9:97:48:46:93:e2:4a:
         12:4b:b6:48:99:aa:d8:79:ae:9f:ac:64:7e:a5:82:74:66:5b:
         a4:74:7f:1d:97:42:0e:5d:a3:f7:fe:66:c2:d6:e5:16:1b:5c:
         2c:67:e8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:15 2024 by rpki-client on console-fra.rpki-client.org