Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/ae72c7a9-987e-3ba6-8133-73bafe049409.roa
File:                     ae72c7a9-987e-3ba6-8133-73bafe049409.roa (raw, json)
Hash identifier:          RLZKIIgeHyGqJwojVQhN/9I9fJHiOH+HLkhIfe/Ez5U=
Subject key identifier:   6D:45:74:54:D1:19:EE:04:B2:50:79:E3:1E:6F:56:9C:3C:5F:D9:A2
Certificate issuer:       /CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
Certificate serial:       010D0C9F432858457D13274081EEB56C93AA09D0
Authority key identifier: 66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/ae72c7a9-987e-3ba6-8133-73bafe049409.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     13781
IP address blocks:        2606:6dc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:27:40:81:ee:b5:6c:93:aa:09:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=b7730a05-bd48-4f97-bc6b-349ee09e6cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:2c:6b:91:35:7c:ca:fb:95:7d:c0:9a:50:
                    62:ac:3c:8a:97:e4:9e:af:8c:ad:df:72:34:a8:11:
                    9b:78:79:c1:5c:7e:44:32:2a:8d:29:01:d1:4c:12:
                    cb:be:a1:1b:62:a7:e7:ed:61:38:63:99:2e:6b:2d:
                    3b:a0:c9:80:85:a8:56:ca:67:de:2b:3c:fd:4c:d6:
                    d9:d3:e2:1f:f8:a0:b3:ea:79:11:83:5e:11:a4:d6:
                    86:99:af:60:3a:db:59:e8:f5:b4:06:a0:24:4b:93:
                    86:63:e1:63:2b:d0:71:71:cd:b0:b9:66:d2:b0:0f:
                    96:d4:fd:3b:f1:b6:a3:87:6b:81:08:fe:f3:22:47:
                    09:e3:37:fa:37:f8:83:23:b9:a4:39:aa:31:98:3d:
                    ca:0d:62:9a:03:33:f6:3c:6a:e4:40:84:16:52:3b:
                    9a:47:d7:f8:fd:e4:8a:6b:7f:54:72:e3:a5:6f:86:
                    1b:82:52:e6:73:b5:7c:9e:bb:e5:3b:6f:5b:22:2d:
                    87:d0:53:90:ed:f9:81:ee:c7:fe:c2:33:2d:b3:eb:
                    d3:d8:d1:8c:64:3c:91:77:0d:24:b7:4d:e9:f9:ec:
                    ed:3a:d7:e6:d4:c2:bd:a9:df:56:24:09:a8:f4:22:
                    5e:55:b4:44:0f:f2:bd:a9:f3:5f:4c:20:33:bb:f7:
                    40:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:45:74:54:D1:19:EE:04:B2:50:79:E3:1E:6F:56:9C:3C:5F:D9:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/ae72c7a9-987e-3ba6-8133-73bafe049409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl

            X509v3 Authority Key Identifier:
                keyid:66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d0:84:59:84:54:d0:10:82:91:c5:9c:75:81:3a:94:e3:73:
         f2:34:b2:88:f8:65:50:ac:da:6f:df:de:8e:6f:04:87:62:97:
         ff:43:91:27:84:79:a0:74:2b:99:a4:66:67:62:a7:47:b2:bf:
         0e:3f:01:bf:e6:a6:ec:e1:6e:57:b6:36:13:b4:fe:5d:75:ec:
         4e:bb:25:56:d0:91:1c:3b:32:09:12:02:84:9f:b0:19:f6:e7:
         dd:13:20:0b:cc:7d:82:f0:aa:06:74:d9:f7:c8:f8:85:40:f2:
         89:74:9b:e9:cf:45:1f:d4:db:61:40:4c:1c:83:f2:72:87:7c:
         df:69:aa:7c:73:23:23:f7:23:5b:89:25:6a:74:d6:c9:ab:e0:
         96:92:04:8e:4c:5f:ff:9e:66:a2:da:b3:06:3c:22:48:75:b6:
         70:70:db:1e:f0:bf:5b:60:7d:ed:e1:ec:ab:f0:12:72:6c:e1:
         e1:32:1d:c6:76:cc:6c:b2:bf:8a:52:07:fd:a2:1a:e9:2d:2d:
         92:f4:ce:f9:39:6d:0f:a4:c1:ff:97:62:d4:1e:a3:27:32:dc:
         7d:2c:7c:8e:b5:ac:ae:6a:1f:80:45:40:70:36:f6:de:16:75:
         ba:22:d5:05:44:4f:cc:bd:42:30:6f:1e:98:36:7a:86:e6:5d:
         e4:0f:3a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:53:46 2024 by rpki-client on console-fra.rpki-client.org