Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/364a4fb5-afe6-3df2-9a9c-389993ff73a8.roa
File:                     364a4fb5-afe6-3df2-9a9c-389993ff73a8.roa (raw, json)
Hash identifier:          matAtuZLCFYNa9hpOJMB7hWSac3wJBBQOQW33m97cPQ=
Subject key identifier:   05:BC:4A:AA:1F:35:4F:DD:F3:43:E0:DB:D9:86:BA:9A:75:81:4A:5E
Certificate issuer:       /CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
Certificate serial:       010D0C9F43285845706005E328D634C00AA67980
Authority key identifier: 4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/364a4fb5-afe6-3df2-9a9c-389993ff73a8.roa
Signing time:             Thu 04 Apr 2024 23:50:05 +0000
ROA not before:           Thu 04 Apr 2024 23:50:05 +0000
ROA not after:            Wed 03 Jul 2024 23:50:05 +0000
asID:                     40676
IP address blocks:        2602:fb0f::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:60:05:e3:28:d6:34:c0:0a:a6:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
        Validity
            Not Before: Apr  4 23:50:05 2024 GMT
            Not After : Jul  3 23:50:05 2024 GMT
        Subject: CN=672e0cb8-56fa-4ef6-99c7-37455cd1e7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:37:c9:2a:7e:4b:2a:12:de:5e:5f:d9:1b:
                    fc:9e:08:f1:1c:12:f7:15:39:9a:30:74:63:13:11:
                    7d:e3:d0:02:27:7c:fa:d2:32:62:a4:7e:d6:84:e1:
                    35:f0:33:05:e0:1c:fc:18:88:2e:46:21:da:92:77:
                    b8:a3:13:4b:22:6e:46:e7:1a:72:97:e7:ae:6f:71:
                    6e:d5:92:15:66:81:70:bf:30:f4:7e:af:e2:e1:d4:
                    75:01:f0:a4:03:cf:a6:de:a9:b9:c8:20:df:45:3c:
                    75:99:e8:7c:94:12:39:96:33:8c:74:64:a1:25:24:
                    90:f2:e5:f4:1f:e2:72:63:b8:e0:d8:37:1c:d5:51:
                    82:f4:8b:5e:11:3f:dd:e7:5d:6a:3e:58:ff:4b:8c:
                    c0:0b:e8:46:87:7b:f0:15:ce:aa:9e:b8:85:34:71:
                    d8:48:1c:f9:76:d7:c6:7d:07:a1:e5:81:36:b8:17:
                    b4:8d:9b:68:aa:af:c3:f0:2b:4d:97:bb:53:d0:58:
                    94:49:3e:d2:f8:6b:91:46:e6:6e:0d:25:92:a2:16:
                    15:d7:ec:30:98:36:c5:1f:b7:08:5b:4e:1b:27:7c:
                    c0:05:88:ce:22:ed:a5:29:5b:72:92:00:b2:94:c1:
                    25:95:1d:a3:ef:5b:7e:0f:56:1e:5b:1f:91:b8:a3:
                    f7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BC:4A:AA:1F:35:4F:DD:F3:43:E0:DB:D9:86:BA:9A:75:81:4A:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/364a4fb5-afe6-3df2-9a9c-389993ff73a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl

            X509v3 Authority Key Identifier:
                keyid:4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb0f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a5:63:59:ab:1c:2e:dd:fd:e9:e6:d6:49:84:dc:07:82:23:
         06:28:82:91:98:5f:35:1b:fa:e7:da:ff:e5:75:95:e2:45:57:
         e7:0c:ee:d5:f1:2d:50:dd:9a:69:1a:05:fc:a5:17:04:b9:d3:
         02:d4:53:6c:0e:5b:6a:e4:99:31:fe:17:49:ec:76:6f:66:59:
         2a:85:77:ea:64:91:0d:f6:53:48:c3:c3:3d:50:d0:37:03:6f:
         72:c6:d4:e1:b3:2b:3d:b1:31:5a:28:ed:71:10:61:db:b2:1e:
         bc:70:76:0d:c5:2a:b5:1a:ad:30:7a:2f:6c:b0:90:03:e8:02:
         9a:0d:b6:0c:c8:72:44:9c:ec:1c:55:c6:ab:61:4b:4a:b9:06:
         a6:8a:2b:29:19:6f:24:21:58:7d:db:c8:d1:85:a0:a1:b2:41:
         e3:be:e5:44:20:8b:4f:cb:d8:38:86:ad:86:f4:fc:f4:6d:82:
         df:cc:7b:f6:8b:31:65:ed:f0:4e:8c:8c:89:e9:03:55:c2:40:
         15:aa:db:b4:91:4d:26:e6:26:3d:c4:83:80:bd:de:70:88:59:
         5e:fc:00:d5:47:42:15:08:a4:94:d1:aa:64:d7:f6:79:e2:b8:
         18:f0:96:42:21:30:c8:c6:38:8c:4f:0b:2a:91:4d:67:a5:c2:
         6d:4b:df:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:08:51 2024 by rpki-client on console-ams.rpki-client.org