Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/f42a1026-3aa1-3d11-9f79-e7cabb078147.roa
File:                     f42a1026-3aa1-3d11-9f79-e7cabb078147.roa (raw, json)
Hash identifier:          PRbwgXHYljINW4TIi6CoNanZ6mcZt9MAtoUvUt3HDgQ=
Subject key identifier:   92:1C:A2:36:20:E5:29:C2:C8:03:72:55:B2:B3:3E:EE:28:E9:A0:84
Certificate issuer:       /CN=d9d41cd5-6bda-4d2b-aff4-b89893aa1531
Certificate serial:       010D0C9F43285845E45E7C83C6958AF34EBF98A0
Authority key identifier: 84:75:FD:0B:B1:EC:65:B3:FC:1D:85:04:A8:6C:38:DC:C4:CD:AD:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/f42a1026-3aa1-3d11-9f79-e7cabb078147.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     16509
IP address blocks:        2602:fd12::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:7c:83:c6:95:8a:f3:4e:bf:98:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d41cd5-6bda-4d2b-aff4-b89893aa1531
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=b059a4cf-16a2-4c44-ba7e-b5a02fe3cb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c7:d3:60:45:a6:e4:39:21:29:be:3e:7a:59:
                    b2:98:94:de:2b:06:51:51:95:92:7c:cf:64:e7:f1:
                    40:cb:bb:65:bb:ea:d4:f0:2c:86:84:4e:96:17:fe:
                    c0:d1:ca:b5:b2:7b:80:e3:95:94:75:ca:2d:a7:23:
                    6f:1d:a2:1e:f7:e6:36:b3:6b:00:1a:78:f4:52:c8:
                    69:c1:82:c7:92:04:e5:a8:8e:d5:1d:2e:0b:46:2f:
                    67:45:10:f1:fd:7a:ae:d7:84:9d:21:d7:b9:ac:97:
                    a5:0c:4b:b9:41:1f:94:17:b7:83:82:cb:51:2a:ec:
                    c5:3d:2a:dc:af:b1:02:b9:bf:94:23:7f:76:ca:5a:
                    c8:96:bf:84:b6:3c:f8:b6:ea:85:51:5d:f4:9e:25:
                    9a:4c:35:18:d2:ae:a5:a1:d0:1b:9d:52:6b:8f:ca:
                    03:15:b4:63:17:1c:e8:ed:5a:d9:84:9e:d8:75:b8:
                    3e:64:e2:47:bb:6b:2d:87:78:df:44:07:ec:a2:55:
                    01:1e:81:28:74:71:9e:0f:f6:7d:33:b1:22:db:4d:
                    8c:65:6e:63:dd:8b:a3:62:f0:63:1d:2a:c1:ae:da:
                    71:b3:ba:04:b6:be:93:31:58:9a:36:0e:b5:07:1e:
                    af:99:a3:21:76:2c:6f:48:a2:a2:89:83:ef:e3:b6:
                    ef:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1C:A2:36:20:E5:29:C2:C8:03:72:55:B2:B3:3E:EE:28:E9:A0:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/f42a1026-3aa1-3d11-9f79-e7cabb078147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.crl

            X509v3 Authority Key Identifier:
                keyid:84:75:FD:0B:B1:EC:65:B3:FC:1D:85:04:A8:6C:38:DC:C4:CD:AD:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:22:5a:34:87:77:47:6a:40:1c:95:62:9c:29:44:3d:74:a2:
         24:b6:0f:8b:ee:d9:5a:8a:7c:45:7a:7b:54:16:df:d3:fd:00:
         03:a3:20:8b:27:49:a1:ec:66:b5:47:9c:1b:b0:42:9a:78:26:
         64:f2:86:5d:74:1f:7d:a9:df:dc:d3:d6:6b:09:39:ee:15:3c:
         33:d5:b5:af:58:ce:1a:c4:38:86:0e:30:a4:30:02:b6:bc:f0:
         d7:52:04:80:e6:04:98:44:18:ea:b3:f7:c1:1b:2d:43:bd:23:
         45:5b:fd:6d:0f:12:14:5b:88:68:d6:b1:45:c0:85:36:11:a7:
         61:88:f3:01:e2:d7:90:94:30:ef:17:2a:5d:39:53:1a:c0:a8:
         a2:f5:5a:4e:b3:bf:58:39:98:3c:f0:a6:8e:65:b9:1c:8c:2a:
         26:3b:01:ad:94:bb:24:46:3d:ff:37:c3:43:ea:6c:ac:2f:52:
         47:32:0f:cd:39:4f:2b:ed:6d:d6:e8:44:41:3c:22:c3:85:2c:
         1c:a0:be:95:cd:7c:56:86:23:6f:42:7a:51:85:74:ef:c6:e3:
         bf:97:08:9d:c9:74:5a:78:04:11:5e:ad:88:b3:c8:bb:d8:2b:
         c3:c6:de:fe:e7:84:6e:1b:47:33:ce:ee:de:0f:03:e7:e7:1b:
         fa:5f:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:37:56 2024 by rpki-client on console-fra.rpki-client.org