Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/87bdc898-7b8c-3958-b3df-9f8cfce1ab1c.roa
File:                     87bdc898-7b8c-3958-b3df-9f8cfce1ab1c.roa (raw, json)
Hash identifier:          K2lvgkxaGMVcAAkwuuXCC2mL5xwlhFbuDEjg1DZryN4=
Subject key identifier:   B5:6B:59:F5:50:57:0F:67:2B:89:33:2A:8C:8C:23:2C:82:BC:D5:C2
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285845777DD57F6DE91B828B42B600
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/87bdc898-7b8c-3958-b3df-9f8cfce1ab1c.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     7203
IP address blocks:        2607:f5b5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:d5:7f:6d:e9:1b:82:8b:42:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=e95b62cc-8de9-48f7-80ec-4edbb686fca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:be:5c:ac:56:82:34:0e:23:85:8d:bd:38:01:
                    3c:dc:47:12:40:a4:f6:1f:21:22:a9:c9:ac:a1:ce:
                    ca:bc:f7:f6:bd:cc:af:33:cd:3d:80:af:0f:f6:36:
                    cb:26:fc:5c:c0:dd:de:05:cd:e1:1e:4d:91:a2:66:
                    e8:f6:2b:d6:98:c0:ad:ec:89:5a:d4:55:9d:28:74:
                    f2:79:e6:fc:26:84:bc:c5:6d:df:78:4a:cb:0c:6d:
                    1f:7e:42:e9:aa:60:4e:e5:77:bf:59:72:3a:45:de:
                    2c:4a:b8:ab:49:ca:9a:0f:e5:03:1c:02:f5:cb:9a:
                    17:e4:ca:a7:aa:f6:ed:21:fd:91:9a:46:52:10:88:
                    3a:bc:55:99:88:d6:23:9f:0f:46:e8:03:aa:00:4d:
                    43:83:f7:30:4d:ca:29:d4:9d:c4:bf:a1:0e:cf:a4:
                    95:4a:cd:1c:0b:fb:33:24:b1:6b:b7:cc:2d:67:a0:
                    16:8b:57:41:ec:61:93:8c:82:7d:b7:c3:bd:b0:de:
                    2e:97:16:6c:0c:68:15:35:b7:ad:de:ea:4e:53:05:
                    f7:82:15:27:fe:cd:de:f7:f8:ac:07:71:ce:b2:2b:
                    21:5e:12:12:b7:38:8d:36:12:d7:07:50:48:b5:15:
                    8b:3d:f6:09:e7:18:fa:2d:ec:1f:4b:b4:99:13:ff:
                    be:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6B:59:F5:50:57:0F:67:2B:89:33:2A:8C:8C:23:2C:82:BC:D5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/87bdc898-7b8c-3958-b3df-9f8cfce1ab1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5e:75:16:f3:67:fe:e6:78:d7:bb:1d:c9:9b:ce:43:46:44:
         42:7f:b6:c1:7b:84:19:91:e9:a0:47:76:f2:d8:e6:52:c8:0b:
         ce:87:ae:c2:55:65:33:6d:9f:28:d5:cd:2a:51:a7:6b:0f:18:
         81:fc:b8:e6:96:7d:b1:94:c4:b1:4f:c4:d7:08:68:04:66:fd:
         d8:ca:2b:1b:79:28:c2:61:fb:93:c1:95:bf:87:6c:33:3a:f8:
         4a:4e:5e:70:be:7e:65:d1:3b:bd:ad:bf:60:45:69:60:4e:53:
         36:d9:88:46:32:0a:01:bb:a2:6b:08:19:41:02:4a:bb:a7:b2:
         e3:ff:64:6a:28:64:f9:d5:4a:6f:66:f2:ba:e5:d5:55:a1:88:
         90:59:20:5c:ca:c7:62:22:01:2c:be:a2:d8:a6:96:ed:53:73:
         71:be:3a:26:4b:e9:39:fd:68:de:59:a3:63:fc:99:24:ba:1a:
         06:a4:4d:dc:17:11:a3:4e:aa:3d:df:b6:84:e3:e7:ea:2e:9e:
         a3:15:d6:a2:c3:cd:d8:a1:da:87:36:00:35:6e:1d:b8:81:75:
         04:fa:48:ca:ed:aa:64:57:73:d0:78:52:5a:bf:cc:01:20:d3:
         cd:3e:01:4d:0f:48:b7:35:0f:ba:67:a1:28:ea:73:ce:e5:d3:
         69:38:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 00:16:43 2024 by rpki-client on console-ams.rpki-client.org