Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/42260333-fa7a-3e67-8741-ccb79a740c7a.roa
File:                     42260333-fa7a-3e67-8741-ccb79a740c7a.roa (raw, json)
Hash identifier:          P8KXrEiDCxBViRoExSEIqnCAt8qL1mF5Ra01GsrpUhk=
Subject key identifier:   B3:CA:2F:5B:64:9C:13:81:7F:E2:12:56:46:63:28:0C:1A:95:23:37
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285845909DE95640DA4AF2E66B5788
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/42260333-fa7a-3e67-8741-ccb79a740c7a.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     19437
IP address blocks:        2607:ff00:300::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:e9:56:40:da:4a:f2:e6:6b:57:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=aca67181-97df-44d8-b43f-67f5e5cf8a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:c0:e4:3f:10:19:d0:81:d2:4e:b7:a8:50:
                    b2:03:d7:4b:20:d7:c6:a5:c8:70:ff:6f:c1:2f:78:
                    2b:b6:57:ee:1c:d8:b5:56:94:65:25:d3:16:2f:5e:
                    19:62:10:87:ff:c2:e5:90:97:d7:b6:02:38:ce:49:
                    45:b5:f8:77:9a:4b:9b:34:39:7b:3b:76:31:4b:7e:
                    cc:b3:d4:29:ae:22:02:63:1e:a1:3e:01:27:a9:4b:
                    6b:88:9a:56:ea:43:31:27:b9:d7:65:af:6c:ba:6d:
                    b8:78:7c:e7:9c:48:a7:5c:d1:14:ae:a0:f2:78:22:
                    7b:3d:10:2f:d6:da:7c:bd:ac:06:5c:38:d7:f4:07:
                    ab:1e:76:33:48:20:c9:a1:88:93:2e:b4:c3:b5:ec:
                    1a:bd:ef:76:a8:a6:c9:38:fc:87:ee:37:67:d3:bc:
                    d7:43:04:6f:e5:bb:44:45:f4:12:d3:73:1b:48:ff:
                    c4:42:a1:85:2a:8e:b4:70:91:3c:0c:72:d2:2c:5f:
                    4a:45:22:67:32:dd:b3:c3:e0:3b:00:e0:7b:8b:ec:
                    9c:f4:71:20:f1:2c:d1:17:fa:6a:ee:67:ad:39:71:
                    22:72:de:09:ed:b9:e7:75:16:b9:7f:61:e4:04:5f:
                    4d:12:d1:6e:29:fd:69:cd:63:48:c1:f2:e6:c2:be:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CA:2F:5B:64:9C:13:81:7F:E2:12:56:46:63:28:0C:1A:95:23:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/42260333-fa7a-3e67-8741-ccb79a740c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff00:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:5a:9a:fd:b8:85:df:6b:ee:4e:03:65:e9:ac:f9:6d:70:23:
         ea:0f:5f:17:98:03:36:96:0e:3d:01:b3:8f:c5:0d:40:79:7d:
         d6:00:0f:3b:8a:2f:38:30:35:a1:61:32:66:a9:49:fc:3a:78:
         60:d5:0d:82:75:16:4f:2e:9b:26:b3:41:30:0c:61:52:c2:31:
         6c:93:03:3e:d1:85:fb:4a:71:aa:34:b8:79:89:21:62:8d:b0:
         e8:04:b8:78:be:20:ef:4f:32:b9:11:dc:ee:af:b2:06:9a:a9:
         b3:73:16:3f:ad:3b:a8:01:e8:e5:14:d4:79:23:45:fc:bc:55:
         84:e7:38:f0:00:89:fb:21:ad:df:5d:6c:a5:6b:26:a3:6d:77:
         ac:ff:77:cd:89:30:7f:be:83:d4:4e:4b:62:73:1d:69:98:dc:
         6a:d3:9b:09:66:61:34:e7:64:a9:d9:14:9a:09:dd:e8:e8:20:
         fe:f5:70:ff:17:14:af:d1:44:50:68:6f:1c:99:02:b7:19:32:
         25:c0:96:3c:69:39:ce:32:14:a0:4d:cf:92:42:d2:ab:61:7d:
         19:96:a2:1d:08:9d:df:fe:a2:9a:36:6b:0a:f7:cc:a9:2e:e7:
         86:2b:60:ec:b4:0a:af:db:59:8c:53:e5:c9:88:8a:24:3b:6b:
         04:54:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:42:10 2024 by rpki-client on console-ams.rpki-client.org