Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa
File:                     9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa (raw, json)
Hash identifier:          vFfCT22dUQxNaFH8RT4gEYL8ERoUezDN+dfZCOypO5M=
Subject key identifier:   66:47:E0:FF:6E:D9:28:4B:4E:4C:BA:4A:D2:09:22:2C:B5:F8:DE:51
Certificate issuer:       /CN=bb3e1744-5186-489a-9b86-cb31cef73874
Certificate serial:       010D0C9F43285845A6F370AACF825E094B1AF530
Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        2620:20:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:70:aa:cf:82:5e:09:4b:1a:f5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=433554c3-a43a-4ca7-bc68-414bf507d404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:80:01:3b:74:f8:b3:b8:33:b0:78:16:05:1d:
                    58:a7:a7:87:a1:f2:b1:a8:44:5c:53:b2:d0:4c:b8:
                    b5:70:11:19:df:4f:46:14:8c:16:fa:bc:43:eb:df:
                    df:bc:f0:75:92:7a:93:5c:41:38:ea:a6:9d:ae:90:
                    9f:e9:82:cc:c1:2c:2e:28:a9:03:da:72:79:e6:d4:
                    5d:93:a1:99:39:20:32:f0:73:91:c6:1a:f6:98:49:
                    ab:43:b5:3b:d0:c5:a7:dc:a9:0c:9a:6e:47:2c:3e:
                    07:63:10:54:a3:c4:70:0b:6b:a0:ea:6e:51:5a:bc:
                    0c:b5:cb:3c:9c:f1:e2:36:7c:7d:7e:51:6a:0a:0c:
                    3e:c6:96:67:bd:d4:ae:e7:bd:f8:7d:f5:32:9d:3c:
                    ed:46:f3:23:79:c1:c6:18:52:61:52:11:ec:dd:83:
                    46:cc:87:1d:91:08:f2:5f:03:97:73:0a:1a:5c:4c:
                    2b:9a:b4:1a:db:d0:78:4d:d1:cf:71:98:59:e2:85:
                    f0:62:5f:e6:6f:f8:59:45:ae:96:44:94:20:2f:36:
                    53:14:be:7d:f1:18:ce:a9:8c:ec:ac:63:23:0e:0f:
                    e3:ac:35:d0:05:8f:e3:27:3b:9d:f7:58:26:75:89:
                    85:86:71:3d:79:1b:65:d0:99:99:96:d3:1f:b3:8c:
                    a6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:47:E0:FF:6E:D9:28:4B:4E:4C:BA:4A:D2:09:22:2C:B5:F8:DE:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl

            X509v3 Authority Key Identifier:
                keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:20:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:1a:46:ca:ac:ea:1b:c2:12:e8:02:ee:35:d4:6f:c5:7e:ee:
         fe:fc:2f:ed:b8:fa:87:82:81:83:3b:54:c4:50:5b:ff:a8:70:
         80:7e:48:71:e9:38:e9:28:04:c1:34:f3:0e:70:c4:8c:1c:1b:
         ff:11:3a:2f:84:45:f2:1f:49:e2:2b:9c:d7:00:e5:fb:fe:ba:
         07:92:14:ab:aa:da:72:1a:48:95:27:c0:02:d0:4d:f4:2d:7e:
         e1:50:fe:68:eb:13:dc:db:ce:3f:83:6b:e5:ce:be:ec:5c:37:
         ec:f3:f3:8b:ee:2b:f3:9e:c6:74:3b:57:3e:59:05:fe:a3:1a:
         9f:ef:22:2b:b7:fe:ff:3d:93:11:7a:b7:e6:b8:22:67:ae:d5:
         1f:59:5e:fd:5d:06:66:13:e6:e6:16:84:ff:f6:62:65:3f:5e:
         e3:34:89:aa:f5:14:1a:1e:54:80:c7:d1:c0:38:c8:9f:ea:49:
         f1:ba:17:c7:ae:28:0a:c6:95:21:e1:41:d4:c8:67:ab:39:58:
         c8:b9:ba:26:1e:6b:e0:fb:30:6d:22:c1:c8:e6:63:58:ce:af:
         9b:fa:55:71:57:73:8d:c2:fe:cb:f8:45:8e:4a:14:5a:3f:35:
         8c:9b:fb:c4:0f:c6:f2:7d:5f:f5:eb:87:f5:e3:38:be:fc:fa:
         1c:a2:00:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:31:49 2024 by rpki-client on console-fra.rpki-client.org