Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/fee69ddf-b29a-31d6-a5c0-0067ca4a2534.roa
File:                     fee69ddf-b29a-31d6-a5c0-0067ca4a2534.roa (raw, json)
Hash identifier:          FqDJByGgy0b1NJg0BFz4G91sS4097Ios8qaVuMrjfbQ=
Subject key identifier:   9A:96:02:9D:FC:AD:E8:51:1D:80:A1:BA:38:39:E7:A7:76:ED:7F:87
Certificate issuer:       /CN=df5adac7-ed86-4b24-911d-716f2c94711d
Certificate serial:       010D0C9F432858456B2CA337BA10D405F3DB66C0
Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/fee69ddf-b29a-31d6-a5c0-0067ca4a2534.roa
Signing time:             Wed 03 Apr 2024 03:07:30 +0000
ROA not before:           Wed 03 Apr 2024 03:07:30 +0000
ROA not after:            Tue 02 Jul 2024 03:07:30 +0000
asID:                     53808
IP address blocks:        2602:f92a::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6b:2c:a3:37:ba:10:d4:05:f3:db:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d
        Validity
            Not Before: Apr  3 03:07:30 2024 GMT
            Not After : Jul  2 03:07:30 2024 GMT
        Subject: CN=0658b51c-bba5-4362-b10f-3cdc80ca39d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:20:60:44:3c:a2:69:99:f3:bd:af:c6:d8:00:
                    ce:b4:ac:43:09:22:29:c0:22:0c:23:ce:36:9b:a4:
                    ad:83:7f:87:6d:52:97:ac:42:58:07:5d:7d:11:9c:
                    90:c9:ba:7a:9a:9d:35:45:d3:51:0c:ae:f1:d0:ed:
                    2b:7a:6f:b4:b7:ae:ac:e5:d9:2a:e1:43:6f:de:ed:
                    15:a7:65:e3:4a:0e:0a:9b:0c:69:6e:9b:2c:98:1e:
                    81:80:8a:5f:e8:24:57:7e:07:35:59:b7:8a:ea:e9:
                    9c:9d:71:ac:01:99:12:e4:20:a8:f8:86:8d:c7:72:
                    dc:6f:67:95:e2:15:e6:08:ab:b0:c5:63:be:1d:26:
                    f9:3e:43:ef:e1:2e:d1:83:49:e3:8f:69:e9:27:26:
                    f8:59:7e:2f:f2:23:81:ee:5c:ec:de:7c:d4:56:99:
                    f0:db:b0:ef:8a:73:29:f5:16:df:99:96:40:55:94:
                    5c:8f:f5:b8:f4:76:88:de:4c:cc:86:ba:e6:44:ec:
                    37:47:c0:c9:2a:1e:fd:26:3f:6e:7a:e3:e9:80:3d:
                    6f:a6:42:ad:37:fb:5b:80:91:35:36:10:fb:e0:db:
                    c0:a2:44:25:e1:7a:5c:7e:87:e7:3a:77:d3:cf:22:
                    60:f0:37:31:4d:af:32:e5:49:48:b4:c9:d6:82:59:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:96:02:9D:FC:AD:E8:51:1D:80:A1:BA:38:39:E7:A7:76:ED:7F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/fee69ddf-b29a-31d6-a5c0-0067ca4a2534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl

            X509v3 Authority Key Identifier:
                keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b8:cd:86:6a:4d:34:cc:cf:f9:63:96:01:6f:e7:82:7b:c1:
         a8:e1:a3:11:47:b7:21:2d:13:46:cf:8e:32:50:54:e1:2d:c7:
         fa:c0:8d:da:8f:4a:cd:b5:00:f9:02:c6:33:75:f2:11:d3:1e:
         dc:e8:f9:d7:87:4e:6b:96:0d:a2:25:82:74:b8:ab:25:cb:17:
         43:bb:05:75:1d:6a:20:c6:1f:1e:bb:e8:e4:c5:c8:b3:75:96:
         00:0f:96:3d:c9:3d:4d:c4:da:c0:72:1b:33:22:80:13:dd:5b:
         34:79:85:b6:bc:1a:11:3c:73:76:86:11:62:74:ca:3f:9f:f6:
         10:a0:f7:68:86:d1:a0:3a:e8:7b:cf:e4:05:b9:07:3d:94:0b:
         2f:3b:a6:03:88:74:cf:c4:32:09:20:77:17:43:ec:98:92:f0:
         93:93:1c:66:bf:04:5a:07:0d:dd:da:ce:8c:3f:08:cc:af:7e:
         67:8f:f9:d6:65:da:4e:38:ba:bf:71:da:34:2d:67:fa:52:be:
         3a:9c:d8:b3:5d:a9:0d:e7:95:66:e1:d0:c2:85:15:14:31:bc:
         0c:f4:ac:e0:bc:1c:37:f3:cb:e7:b0:31:99:3d:5c:d4:c5:c6:
         83:3e:8e:b3:5b:a8:50:74:71:3d:30:45:68:b5:67:36:b9:0d:
         3b:46:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:56:25 2024 by rpki-client on console-fra.rpki-client.org