Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/e3503592-48a9-3e87-b656-be3180e2e3cd.roa
File:                     e3503592-48a9-3e87-b656-be3180e2e3cd.roa (raw, json)
Hash identifier:          CWsLn0+v0BP3XdfELbFBd5pbg5InQ+TroGGEpW5cJtA=
Subject key identifier:   8D:CA:C7:34:78:83:A0:44:D1:0E:F3:76:38:2C:17:60:84:DE:E7:08
Certificate issuer:       /CN=933821cc-14e5-4036-8f32-e54b6facbdbe
Certificate serial:       010D0C9F4328584659C8D6B86BE582989461C8C0
Authority key identifier: 75:C8:2B:E8:F5:04:21:77:1B:99:A8:A4:D7:3F:86:53:8C:FB:E1:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/e3503592-48a9-3e87-b656-be3180e2e3cd.roa
Signing time:             Thu 27 Jun 2024 14:24:37 +0000
ROA not before:           Thu 27 Jun 2024 14:24:37 +0000
ROA not after:            Wed 25 Sep 2024 14:24:37 +0000
asID:                     27439
IP address blocks:        2602:f8d6::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/933821cc-14e5-4036-8f32-e54b6facbdbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/933821cc-14e5-4036-8f32-e54b6facbdbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:59:c8:d6:b8:6b:e5:82:98:94:61:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=933821cc-14e5-4036-8f32-e54b6facbdbe
        Validity
            Not Before: Jun 27 14:24:37 2024 GMT
            Not After : Sep 25 14:24:37 2024 GMT
        Subject: CN=f4686844-fb3e-4106-8d7a-ac4f427b08c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:be:aa:9d:56:da:cf:a8:60:d1:84:b5:d7:
                    bf:7b:91:07:7d:63:76:9d:1a:57:df:72:70:d1:41:
                    a4:51:0c:7f:b0:c0:e6:9b:4f:ac:59:9f:3d:3d:81:
                    27:ce:d6:f5:d8:b8:ec:8c:ca:aa:0d:66:68:bb:41:
                    c8:71:2e:fa:22:14:56:50:43:6d:3c:e9:6b:34:8b:
                    01:24:43:fb:a6:cf:b2:05:be:b7:d6:43:66:bf:84:
                    91:3c:f3:be:f4:2b:2d:ae:70:b2:39:80:a4:66:d4:
                    ec:3e:0e:89:69:6b:66:f8:ee:3c:04:fa:15:61:e6:
                    54:a6:5d:22:34:b9:d4:72:8b:e6:97:d0:ba:5f:39:
                    e4:91:82:12:12:d1:e1:a6:f4:03:b2:f3:2a:96:33:
                    aa:3d:37:21:45:56:23:6a:ca:b0:ea:56:c8:d1:2d:
                    c6:ca:97:7d:c6:8a:9d:c3:11:eb:53:a8:73:49:9b:
                    5a:96:35:34:cc:0c:dd:7d:31:0e:56:45:f3:6b:a2:
                    d5:68:24:3a:ec:af:c9:34:63:21:d4:72:98:b4:75:
                    7e:70:c7:ce:62:cb:18:e5:9c:9f:cd:b4:f9:bf:4c:
                    18:59:e9:5e:3e:01:39:2c:73:8c:b6:a3:75:61:9e:
                    47:15:0a:4f:fb:a2:be:10:07:b5:9f:03:05:73:76:
                    68:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CA:C7:34:78:83:A0:44:D1:0E:F3:76:38:2C:17:60:84:DE:E7:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/e3503592-48a9-3e87-b656-be3180e2e3cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/933821cc-14e5-4036-8f32-e54b6facbdbe.crl

            X509v3 Authority Key Identifier:
                keyid:75:C8:2B:E8:F5:04:21:77:1B:99:A8:A4:D7:3F:86:53:8C:FB:E1:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8d6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:af:c1:73:fd:57:e7:3a:4e:48:48:41:8a:e0:31:09:3e:9d:
         ff:ee:8b:dc:3d:40:f5:f1:5a:d5:df:de:06:ee:ec:9a:66:bf:
         a3:55:a1:c4:19:26:63:30:e1:dd:a7:ec:9e:87:db:25:91:7c:
         1d:b4:13:05:ef:67:8f:4f:a9:51:a5:87:26:1c:5d:ff:d8:96:
         67:27:f3:60:32:0a:c4:52:e6:39:e9:18:0c:c3:9f:8d:77:12:
         dd:83:9f:9f:76:ef:0c:97:11:09:78:c2:3a:e8:ad:d3:a3:f3:
         ae:53:11:4f:97:1d:da:f8:1e:e8:8b:ba:90:3f:ba:25:5c:ba:
         4d:2b:11:1b:b8:8c:9e:85:31:83:ea:c3:24:27:76:6e:6c:19:
         59:98:a1:54:92:cf:79:58:93:f4:86:6f:49:58:1a:36:c3:3e:
         27:5a:b6:bc:ac:4e:cc:57:7e:bf:13:46:73:f4:95:45:a8:ba:
         fb:0b:36:42:5e:fc:d1:48:43:5c:7c:4e:82:ac:b7:92:f3:14:
         5d:3b:e6:d1:b7:14:ea:45:03:5f:23:1d:a3:42:b2:b2:03:77:
         05:52:ba:b9:a2:94:e0:33:3f:58:d0:5c:02:d9:a4:4a:f6:ca:
         8f:4b:76:56:44:e9:28:6a:c6:77:da:14:f1:72:c2:b3:cb:92:
         46:46:41:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 23:15:50 2024 by rpki-client on console-fra.rpki-client.org