Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/e4d0207a-085a-31a1-871e-eafcc1a16dab.roa
File:                     e4d0207a-085a-31a1-871e-eafcc1a16dab.roa (raw, json)
Hash identifier:          CnY6VzxXzuouyRTNl/qClsRnYgROTWFrrdBawDKtXCA=
Subject key identifier:   AD:D3:92:49:40:A6:E0:A6:2F:50:33:11:90:72:90:F5:34:A2:63:B0
Certificate issuer:       /CN=1a059caa-dd4f-4480-a089-c3da1959a314
Certificate serial:       010D0C9F43285845E55AFEB5FD60A60245624400
Authority key identifier: F4:5A:93:65:33:74:A3:67:AB:AA:8E:F7:17:B4:4D:40:ED:E2:B7:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/e4d0207a-085a-31a1-871e-eafcc1a16dab.roa
Signing time:             Thu 16 May 2024 21:29:32 +0000
ROA not before:           Thu 16 May 2024 21:29:32 +0000
ROA not after:            Wed 14 Aug 2024 21:29:32 +0000
asID:                     40880
IP address blocks:        2602:fe09:f00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e5:5a:fe:b5:fd:60:a6:02:45:62:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a059caa-dd4f-4480-a089-c3da1959a314
        Validity
            Not Before: May 16 21:29:32 2024 GMT
            Not After : Aug 14 21:29:32 2024 GMT
        Subject: CN=cb94ab80-97a5-4f72-b6a9-5ea5887a5e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:ee:1f:6d:22:be:1d:98:0a:95:c8:69:9e:
                    45:61:fa:85:1a:da:43:18:f6:03:0d:02:01:6e:31:
                    48:b0:19:82:d5:9d:9a:7c:00:e5:ad:84:03:d8:e8:
                    5f:ca:54:62:3d:5b:f6:32:20:ba:75:e0:78:72:15:
                    03:32:9d:6a:ab:47:5e:33:77:9f:4b:69:6b:3f:31:
                    28:21:40:86:3b:32:b6:7b:ee:41:fc:b2:db:12:68:
                    45:f4:2e:58:b8:d8:0c:38:e8:9b:4a:0b:6e:38:06:
                    a2:e8:5e:39:cd:d5:3c:8c:ba:89:ca:b9:f7:e7:e7:
                    c6:6a:11:df:da:20:58:59:bc:82:04:3c:20:6e:19:
                    91:a1:39:a0:54:15:fb:45:cd:d3:8a:3e:ba:62:01:
                    8e:d8:dc:36:b6:83:53:5b:14:9c:77:8f:5f:17:b8:
                    94:e3:93:88:91:2e:c3:66:04:09:89:d0:c5:71:c3:
                    d8:4f:5f:91:3b:98:45:73:fe:91:6b:5c:c0:8d:63:
                    9a:37:68:4a:66:69:ed:0e:c0:9c:4a:9a:63:b5:1b:
                    2d:ce:cd:d1:35:bb:e8:35:23:48:0f:b3:ab:8d:38:
                    74:4a:aa:ed:f7:82:16:ac:9b:5c:fa:9d:7e:ed:a3:
                    88:3a:df:aa:89:42:36:58:91:89:02:a6:ea:13:e8:
                    2d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D3:92:49:40:A6:E0:A6:2F:50:33:11:90:72:90:F5:34:A2:63:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/e4d0207a-085a-31a1-871e-eafcc1a16dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5A:93:65:33:74:A3:67:AB:AA:8E:F7:17:B4:4D:40:ED:E2:B7:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe09:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:b9:8b:91:52:aa:7b:3e:e4:60:aa:4b:5e:ac:41:a8:0e:
         d6:b8:ad:ff:ed:74:cd:8a:54:25:4a:9f:c6:37:7e:3d:24:71:
         11:fa:83:58:51:8d:0d:2c:30:1b:00:3a:05:69:e2:d9:0c:87:
         3c:99:b2:2f:11:4b:c0:d8:56:12:f1:d2:01:a5:ab:55:ac:0b:
         25:73:d3:04:6a:fd:c9:05:b3:31:da:a2:0e:63:86:79:4b:6f:
         06:cf:9d:ed:cb:60:cc:2e:a5:75:5d:fe:a8:dd:0d:d9:d6:38:
         31:80:31:c1:d9:12:74:09:04:0f:12:7b:1b:80:6b:28:6f:ab:
         7c:25:05:0a:76:b6:3e:1a:63:bf:f7:71:7f:30:43:a5:4a:07:
         82:9e:6d:f8:80:0c:78:9e:27:fb:81:97:5b:9b:92:0b:16:e9:
         b3:33:63:fa:cd:bf:7d:49:36:af:7f:d8:a0:a6:9e:8b:d1:19:
         1a:3c:96:87:ea:26:a8:c6:73:54:43:28:9d:11:56:b6:c8:11:
         52:d8:09:93:c5:f7:f3:cd:69:ac:75:f4:38:03:09:a9:be:1a:
         31:e9:15:e7:1c:87:93:02:d0:88:f0:84:f1:7d:e3:8b:b9:04:
         3e:d5:cc:c6:9c:f7:df:7a:ce:f4:9a:7d:c8:8e:9c:84:cb:c3:
         2c:f1:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:42:58 2024 by rpki-client on console-fra.rpki-client.org