Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7880a518-272e-3d8a-a2fc-5e1873b388c3.roa
File:                     7880a518-272e-3d8a-a2fc-5e1873b388c3.roa (raw, json)
Hash identifier:          5BTDHezeEWGVZ8ueYW+7kvv1xAynKGAO6u5GFk+A6Mg=
Subject key identifier:   23:E1:8C:E2:90:47:34:6B:F6:E8:0F:33:F9:9F:7E:74:54:58:0E:20
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285844F19AAB1AF23DD1E32FA28CE0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7880a518-272e-3d8a-a2fc-5e1873b388c3.roa
Signing time:             Mon 19 Feb 2024 14:00:31 +0000
ROA not before:           Mon 19 Feb 2024 14:00:31 +0000
ROA not after:            Sun 19 May 2024 13:00:31 +0000
asID:                     400672
IP address blocks:        2607:ff00:b00::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f1:9a:ab:1a:f2:3d:d1:e3:2f:a2:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Feb 19 14:00:31 2024 GMT
            Not After : May 19 13:00:31 2024 GMT
        Subject: CN=0be7bfcd-7482-4633-9389-8ee75b75e068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:11:13:58:b0:50:83:a3:61:bd:1b:63:c9:c6:
                    64:1a:b8:a1:6e:7e:49:5f:68:bf:18:0d:b0:81:25:
                    54:ed:aa:04:f7:8f:d2:93:3b:61:56:b0:e3:b4:e8:
                    54:ff:fa:2d:01:1c:2a:5d:a7:ce:53:58:f2:00:67:
                    2a:47:39:00:7a:26:3d:6e:42:fc:7d:71:60:d7:43:
                    a9:ac:c1:b8:9c:88:a1:2b:a9:9c:32:e8:f0:b1:50:
                    de:bc:b1:d0:9b:fe:59:76:ad:8d:9c:ef:95:3d:35:
                    ae:bf:22:63:bc:eb:1f:40:c9:58:81:0e:d2:56:eb:
                    30:87:7e:50:a4:8d:ed:94:65:3a:f7:7b:f3:75:f5:
                    a4:15:ce:f6:33:25:ed:a0:0b:35:12:fd:4b:e1:c5:
                    c4:b5:3f:95:60:32:0f:52:f8:d6:ae:52:23:e7:8e:
                    31:81:2d:f5:50:7d:9b:d9:bb:40:9f:35:d5:68:cb:
                    6c:d8:85:95:8f:2e:a3:73:da:c7:63:d2:25:14:fa:
                    8e:5a:56:be:75:79:e3:f3:1f:14:eb:83:6d:41:02:
                    aa:46:6d:83:d5:32:bb:06:3a:18:76:b3:8a:4b:16:
                    41:99:7d:f6:74:7a:88:50:d5:df:9f:89:e9:b3:80:
                    0f:b2:2c:a8:bd:fe:19:69:eb:df:1c:7c:9f:8e:66:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E1:8C:E2:90:47:34:6B:F6:E8:0F:33:F9:9F:7E:74:54:58:0E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7880a518-272e-3d8a-a2fc-5e1873b388c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff00:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e6:d7:91:52:84:a5:c8:d7:e3:84:67:14:b8:16:9a:c9:9f:
         f8:55:20:e0:3d:cc:94:8d:b9:77:d3:a7:76:8c:b6:45:ed:36:
         42:a5:cb:73:cb:9d:24:19:7c:b0:10:d9:60:8c:e7:26:af:85:
         80:03:df:12:00:d4:2b:dc:cf:09:51:99:fc:b5:be:e0:a9:b5:
         cf:64:92:6c:24:e2:74:96:6d:8d:58:4b:bb:18:9d:f3:ac:01:
         97:ba:31:a3:f8:d6:35:23:28:21:ba:89:45:d9:32:8b:89:b2:
         c0:ec:80:0b:3a:60:14:94:28:3f:c4:97:11:c0:bb:ef:02:54:
         ab:a2:9e:5c:ba:80:91:f6:1c:00:1d:fd:c5:a6:8b:3e:48:0f:
         1d:a0:66:fe:e4:aa:e0:98:91:38:cd:97:7e:c7:d5:26:eb:5c:
         6b:3e:04:24:23:44:79:e4:07:b7:e3:b9:50:4b:76:e3:d0:6b:
         ca:63:18:3b:cd:ef:a9:b5:20:06:b0:ee:73:11:d6:33:35:43:
         2f:b1:bd:02:4d:24:d3:b0:4d:cd:49:53:e7:75:d2:c6:ff:30:
         24:de:09:cf:50:24:4d:30:ac:bf:88:24:43:cf:5b:21:cb:59:
         11:5c:78:75:24:8e:3d:9b:75:c1:89:f5:6d:f7:ba:5a:6b:c0:
         c2:68:24:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:18 2024 by rpki-client on console-fra.rpki-client.org