Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa
File:                     dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa (raw, json)
Hash identifier:          FwVUEjR+8UQ8qoBb0fYMgH7Qi7Qowr8iWUn+wMJ2L1I=
Subject key identifier:   24:09:72:0B:12:5D:74:E2:8E:C0:38:BE:B9:82:00:A3:D4:F5:A0:D9
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F432858458B088BC4CA320CD3F3CC7AC0
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     43181
IP address blocks:        2604:28c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:8b:c4:ca:32:0c:d3:f3:cc:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=192c49dc-982c-4415-a3c4-620ce3635555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:7f:fd:49:28:59:63:fe:0c:18:5b:f8:2c:
                    61:00:3f:34:ee:52:5f:cb:af:e7:d3:96:06:f7:f2:
                    c6:24:0f:26:cd:1a:1e:35:49:ad:dc:a4:03:0e:5b:
                    b1:69:98:44:be:42:5a:10:f7:ff:1f:a9:d0:81:e4:
                    67:88:95:ce:5b:0b:9d:a6:f8:73:35:3c:78:89:ae:
                    bb:9a:a6:2c:77:86:15:18:d2:3a:94:13:0b:f3:87:
                    92:14:87:88:32:ed:99:ba:ab:f7:a2:02:05:18:f9:
                    8b:8f:86:c9:e7:cc:e8:34:ab:a2:e5:51:54:0c:52:
                    d3:b6:d8:22:50:52:b4:7b:c6:1d:6d:a9:3d:b8:2a:
                    7e:65:88:07:25:ef:86:52:ae:d6:34:20:b3:98:c4:
                    3f:b5:9a:02:f8:c0:3c:a9:33:c3:38:fb:22:d6:d9:
                    82:65:a9:31:5d:8a:77:8d:04:23:fd:24:1a:e2:8a:
                    00:44:93:86:89:a3:ad:e0:2b:8c:60:9c:08:9b:bf:
                    cc:60:5c:6b:4e:9c:90:be:8e:0d:68:04:aa:1f:7c:
                    b2:87:d2:96:1b:48:bf:6c:4c:dd:1f:7f:fb:b4:64:
                    21:e5:da:29:e5:78:df:8c:81:cd:47:b9:2a:07:40:
                    53:46:50:60:2a:82:a5:1a:d2:cb:1e:5f:f6:e3:77:
                    83:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:09:72:0B:12:5D:74:E2:8E:C0:38:BE:B9:82:00:A3:D4:F5:A0:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:28c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:37:65:fe:e5:43:3a:3a:f5:5a:c8:20:c8:9f:c6:8d:2e:35:
         74:b1:96:05:01:af:0e:62:43:20:05:a4:97:b9:91:76:c4:da:
         74:fa:af:49:4f:a4:d9:f4:c3:90:73:3c:5d:3a:9e:20:c0:37:
         a5:ae:26:4c:72:dd:9b:be:d0:4f:b0:6d:46:b4:eb:14:00:79:
         cb:19:e0:92:85:ab:57:e6:9a:50:ce:c4:a9:61:10:13:62:21:
         40:dc:a7:1a:46:df:53:4d:74:01:7b:ad:b2:19:33:ab:ad:97:
         15:a2:8b:66:83:e0:6e:80:7f:7b:23:72:04:41:19:da:c4:90:
         f4:8e:83:e5:86:2d:72:e6:6c:3d:c7:ff:1e:6c:a8:9d:14:45:
         c1:1d:d5:5e:c9:54:25:d6:3c:6b:4d:0a:da:23:ff:01:26:bc:
         42:4a:d5:f2:69:e4:de:79:f3:ca:b1:0c:b3:d5:6e:87:19:ac:
         d4:9f:a5:ed:fa:84:97:b3:6e:36:35:62:59:be:1f:54:fd:16:
         62:f6:7c:b9:96:e3:a0:fd:c5:af:d6:13:f8:8e:f9:42:f9:8a:
         c5:6c:c6:b7:95:fa:46:3b:ce:b1:8e:44:dd:7f:83:70:62:f6:
         a2:ce:d5:e0:a0:37:be:80:b1:f8:cd:73:9d:38:b6:c9:03:28:
         0a:3e:94:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:42 2024 by rpki-client on console-ams.rpki-client.org