Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa
File:                     d12e5708-1aaf-3a48-be6d-c36976cf0409.roa (raw, json)
Hash identifier:          1bnEopx5Kok6UBIIXT9eE3h6snrnBv+MREuQPcMZY5s=
Subject key identifier:   D1:45:0D:E0:97:C0:8E:1A:49:61:28:F6:54:72:8D:34:D5:6B:C0:D8
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285845777DD4A4F9432C0262425200
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     396362
IP address blocks:        2607:f5b5:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:d4:a4:f9:43:2c:02:62:42:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=b05ce00f-ca74-4814-9902-4a10ee37ca15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:04:2d:ba:12:14:49:2b:16:10:2d:50:9c:
                    02:33:41:28:40:4b:75:85:ba:d6:39:1c:5f:78:ed:
                    8b:dc:4b:f0:5a:5e:06:8f:37:62:af:79:80:22:c4:
                    8d:ea:a7:2f:77:05:79:fd:2e:06:2a:90:4d:3d:b0:
                    e1:21:a0:6d:78:9f:11:27:0d:eb:b2:52:d2:6d:d3:
                    46:f7:e6:9a:60:33:f0:76:60:e4:4f:b7:5e:44:8a:
                    d9:e9:b8:49:eb:ca:ac:78:6a:15:e2:d6:04:26:d1:
                    96:eb:62:e5:ab:ce:1e:47:bd:82:28:62:20:bb:58:
                    d4:0a:d9:b4:80:59:53:c0:85:06:66:6c:51:1d:b7:
                    13:ff:bb:6b:54:78:cd:36:97:35:f5:2e:c4:c9:ce:
                    2a:95:ea:9d:7b:b1:41:db:42:5e:43:b7:a5:e0:70:
                    00:26:06:47:c5:b7:78:31:0f:7e:5f:8e:2d:8c:84:
                    f8:05:f8:8d:2a:1a:6f:07:d1:12:0f:e9:9e:e3:8f:
                    d8:b5:2d:99:0d:7c:37:92:ed:3c:a6:5f:35:ee:31:
                    09:d1:ab:e7:cf:81:28:52:54:80:de:dd:78:43:87:
                    1d:a4:f7:d8:24:c7:79:c8:6c:d5:c7:06:f8:7c:3d:
                    5a:12:b7:8c:9e:1b:3d:7c:96:f3:26:95:65:76:4a:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:45:0D:E0:97:C0:8E:1A:49:61:28:F6:54:72:8D:34:D5:6B:C0:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:29:cc:60:74:d0:4e:b0:66:62:00:b9:c6:6d:ff:b1:2b:d9:
         68:86:c7:3f:46:b0:45:59:6a:dc:04:22:f2:fb:53:00:af:5e:
         69:75:07:96:05:a7:5e:f8:ca:04:25:e3:17:67:c7:10:82:01:
         03:b4:d4:ca:bd:b2:d8:51:cf:81:1b:42:48:9a:3b:8f:54:f3:
         3c:f3:b5:22:9b:ff:f8:d5:bc:97:06:a6:7a:a3:68:98:fd:bf:
         a5:33:25:04:b5:05:fe:18:e8:a2:19:c0:1d:79:ca:c5:33:9f:
         09:5a:de:07:8e:74:56:6d:f9:a9:04:b5:3e:96:be:f2:ab:62:
         b7:fa:51:f3:89:3e:6e:77:44:1a:b0:1b:36:1d:02:75:5a:12:
         69:cd:08:68:fa:3e:e6:12:39:ae:6a:6f:e9:d3:c0:7e:9b:4e:
         88:a7:f9:ad:f5:8e:aa:73:63:0a:26:1b:41:7e:5e:b7:9d:e2:
         b7:2b:56:b5:6c:e6:cf:f6:44:92:91:71:4a:c3:9b:67:01:13:
         94:25:9b:27:93:89:c2:57:cd:87:c5:55:76:f2:e8:5e:57:47:
         25:03:37:41:6b:5f:9b:c2:55:21:8b:48:e8:e3:05:13:b1:c7:
         bd:c7:ec:b0:83:25:2f:f1:d3:7c:9b:c2:00:1c:ac:0b:b3:82:
         55:35:a8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:43:10 2024 by rpki-client on console-ams.rpki-client.org