Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/204162ba-a29f-39ea-a41e-84a3e247d093.roa
File:                     204162ba-a29f-39ea-a41e-84a3e247d093.roa (raw, json)
Hash identifier:          nANFImCrYi/nkHc2ymHOUGN2A+zUuIpXUFZxnDNq+pE=
Subject key identifier:   4D:48:D0:49:15:98:AD:AE:B8:C9:B3:25:64:FB:E6:5A:D9:95:C7:D0
Certificate issuer:       /CN=68769a07-faff-4fc9-92ac-0487571d9f26
Certificate serial:       010D0C9F4328584596311D1E016457DDBD94CAD0
Authority key identifier: 85:22:E0:14:98:4B:69:56:39:DB:27:8B:CE:91:19:82:2C:89:81:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/204162ba-a29f-39ea-a41e-84a3e247d093.roa
Signing time:             Thu 18 Apr 2024 12:56:17 +0000
ROA not before:           Thu 18 Apr 2024 12:56:17 +0000
ROA not after:            Wed 17 Jul 2024 12:56:17 +0000
asID:                     33535
IP address blocks:        2602:2e6:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/68769a07-faff-4fc9-92ac-0487571d9f26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/68769a07-faff-4fc9-92ac-0487571d9f26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:31:1d:1e:01:64:57:dd:bd:94:ca:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68769a07-faff-4fc9-92ac-0487571d9f26
        Validity
            Not Before: Apr 18 12:56:17 2024 GMT
            Not After : Jul 17 12:56:17 2024 GMT
        Subject: CN=669e259e-f3b7-4489-90c7-a03bf2fd5103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cc:cf:11:88:89:b8:c2:ad:9d:04:63:da:dd:
                    6c:c5:83:c7:ff:d3:ea:4c:0c:a5:38:a6:48:35:e2:
                    72:72:a3:e8:d3:57:93:8b:59:5f:17:dd:0a:b1:4d:
                    10:89:bc:f8:63:a6:85:98:3e:63:61:e7:db:05:c8:
                    52:e8:f7:4d:c8:dc:a0:62:95:6e:bd:1e:18:9b:1e:
                    45:01:57:c2:ee:66:a4:36:56:62:41:34:69:44:58:
                    43:d2:e1:25:76:08:4d:2f:d0:3e:78:ee:bc:66:96:
                    e9:5f:56:47:c5:4c:98:84:15:08:9b:d0:97:3f:36:
                    44:64:d4:67:0c:91:c7:12:6c:83:9c:68:0c:ab:a3:
                    2c:41:eb:14:3a:da:a0:b8:bb:9b:7f:a1:8e:d4:6f:
                    e2:4d:ac:e5:f4:3c:8d:29:9d:6e:84:66:c6:4c:47:
                    12:1a:07:af:df:4c:08:54:56:46:28:66:3b:a3:c9:
                    a1:9e:c0:3c:df:56:cf:0a:1e:a6:81:44:74:5d:f3:
                    57:75:85:32:95:2f:6c:33:ed:37:69:83:46:a0:d1:
                    5a:75:10:a0:b7:50:dd:f1:c7:e7:56:70:ab:b0:93:
                    1f:51:76:aa:ce:4e:9d:86:de:07:28:1c:2f:cf:ad:
                    e6:cd:b2:14:88:95:04:f8:df:43:b2:b3:15:3c:d7:
                    23:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:48:D0:49:15:98:AD:AE:B8:C9:B3:25:64:FB:E6:5A:D9:95:C7:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/204162ba-a29f-39ea-a41e-84a3e247d093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/68769a07-faff-4fc9-92ac-0487571d9f26.crl

            X509v3 Authority Key Identifier:
                keyid:85:22:E0:14:98:4B:69:56:39:DB:27:8B:CE:91:19:82:2C:89:81:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e6:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3a:93:06:99:bc:3f:95:77:71:f5:36:eb:91:69:51:dd:73:
         58:2d:c4:9a:2d:f4:e6:0e:47:30:ff:23:de:37:c4:3e:45:74:
         2d:fc:22:b1:f7:d4:c5:7f:29:79:04:0a:03:d9:9b:b9:46:91:
         a5:65:d7:d9:f2:28:74:d1:d4:81:b8:d6:2f:35:e5:0f:a8:77:
         11:03:e8:a0:f5:6d:e0:8d:f2:b4:45:f7:8d:a1:52:22:af:90:
         ad:7f:a7:2e:a4:2e:fd:e1:b1:cf:4d:03:bc:f9:a3:db:87:e7:
         e2:74:8b:a2:cf:59:f8:7a:31:9e:3b:35:41:e3:64:cb:db:0a:
         88:0c:1e:41:95:ea:1e:63:06:f2:7e:92:31:6f:af:d4:42:08:
         47:6b:2f:a5:c3:a2:30:0d:4b:26:98:70:18:a0:ab:7a:12:df:
         63:6e:59:3e:94:a5:47:5b:c6:a6:b9:78:30:99:3a:8c:d8:32:
         c5:87:85:d1:ae:43:31:6e:49:5b:91:78:d0:50:bf:57:02:85:
         b2:87:e4:44:42:cf:19:27:13:7a:65:f2:ff:24:ce:60:30:b8:
         a4:39:d1:89:6c:e0:08:85:be:0b:fc:3a:52:a3:51:1c:09:e9:
         b1:fb:f4:3a:0c:0d:2e:07:b3:ef:4a:5b:35:d8:cf:9d:6a:8e:
         46:97:ce:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:24:50 2024 by rpki-client on console-ams.rpki-client.org