Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa
File:                     aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa (raw, json)
Hash identifier:          GyfsDxxInaYb4JTc9ZmmAulrJFGXQHAYV3sitEEtTbs=
Subject key identifier:   FE:98:4F:85:0A:EC:42:3D:94:D8:AF:98:F3:90:4D:3F:D2:03:E3:B0
Certificate issuer:       /CN=4e424533-541a-4c27-93d7-8d76453fe152
Certificate serial:       010D0C9F43285845B88A21AAE9300BE513044780
Authority key identifier: CB:F0:85:73:F9:51:8E:80:A5:B6:D5:EC:C0:F6:5F:D2:39:0F:41:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa
Signing time:             Tue 30 Apr 2024 20:13:08 +0000
ROA not before:           Tue 30 Apr 2024 20:13:08 +0000
ROA not after:            Mon 29 Jul 2024 20:13:08 +0000
asID:                     401036
IP address blocks:        2602:f90e::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b8:8a:21:aa:e9:30:0b:e5:13:04:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e424533-541a-4c27-93d7-8d76453fe152
        Validity
            Not Before: Apr 30 20:13:08 2024 GMT
            Not After : Jul 29 20:13:08 2024 GMT
        Subject: CN=963ea6fb-409b-43a7-953a-ec5663d17927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a9:2f:93:f1:1f:fe:4b:90:86:0f:7e:b6:1d:
                    8a:f5:e8:4a:7c:1f:07:df:c8:9d:59:c8:4b:a2:73:
                    ad:10:2c:c6:84:38:fc:84:54:0c:f4:95:fc:11:d8:
                    74:aa:7a:e6:b0:c0:95:01:3c:d0:69:78:63:56:e1:
                    13:a9:2a:bf:b5:7b:3d:18:b2:eb:d1:10:93:e1:b9:
                    09:a8:d0:2f:ef:07:0b:a4:1f:06:b8:98:2a:20:32:
                    c2:37:2a:2d:43:5b:b1:a5:2c:73:e4:e7:ab:68:aa:
                    9c:ef:b5:30:e9:c5:6a:c3:0c:46:3f:07:c0:06:24:
                    db:ad:c8:4b:15:97:93:89:2f:2b:da:b8:6b:0e:b1:
                    bf:e3:16:7a:c9:6c:55:84:82:7a:2b:14:f3:8c:dc:
                    43:cf:b2:e3:ea:b2:8d:30:39:36:3b:f4:6f:79:52:
                    c8:61:12:27:cb:b4:e8:a8:bb:35:46:40:fe:7b:b9:
                    34:59:29:ab:c9:7f:bc:66:08:6b:f3:a6:91:e7:7b:
                    68:04:57:9d:db:79:b6:fc:d7:b0:fd:f5:79:f5:20:
                    38:9b:cd:52:1e:2d:29:0e:e1:98:96:11:26:ea:f5:
                    34:34:db:0e:5e:70:70:dd:e6:a2:91:0f:2a:06:31:
                    2a:44:f2:3b:40:26:f1:54:bb:74:70:cd:80:65:f7:
                    ff:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:98:4F:85:0A:EC:42:3D:94:D8:AF:98:F3:90:4D:3F:D2:03:E3:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.crl

            X509v3 Authority Key Identifier:
                keyid:CB:F0:85:73:F9:51:8E:80:A5:B6:D5:EC:C0:F6:5F:D2:39:0F:41:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:3a:38:5c:53:8c:d9:33:a3:86:d8:49:ba:e3:a0:6a:30:16:
         90:06:8c:1e:6b:a0:e7:2e:84:a4:5a:5d:71:fe:7e:3e:b4:54:
         de:d8:c1:5d:ce:bb:f5:b3:be:f4:8b:0d:58:f5:6f:e8:40:03:
         8d:d3:f9:3f:10:fc:1e:b1:ea:4a:c2:e9:6b:1c:34:3a:62:15:
         82:7c:49:20:31:7d:d2:74:20:f1:80:01:9e:f8:2f:7a:83:0b:
         1b:7a:3e:8c:ba:bd:77:0a:77:47:b5:cc:60:af:71:1f:12:38:
         d8:fd:ad:52:fe:51:5d:7d:6a:b9:7e:b2:11:b4:32:2e:ac:8d:
         60:56:3d:7a:10:ab:40:c2:c6:14:51:a4:90:56:44:31:16:bc:
         4a:27:96:c4:f1:7b:6a:27:09:71:b3:cb:87:a9:de:ad:09:0b:
         b9:d0:59:65:c7:f3:14:c8:7f:ae:fd:51:75:0e:91:22:1b:58:
         38:58:85:f2:4a:d0:bb:6c:5a:cd:93:e2:3c:ca:9b:f6:13:db:
         13:c6:21:d0:ef:3d:2e:78:92:a7:4c:e8:3d:9d:3c:d3:3d:aa:
         42:ce:a6:5d:de:6e:a1:50:8b:b3:6c:29:3e:26:a7:47:76:df:
         13:3a:b1:d4:a4:8b:53:eb:14:c5:d4:c5:fd:a2:24:70:d3:ea:
         bb:5f:7e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:42 2024 by rpki-client on console-ams.rpki-client.org