Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa
File:                     e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa (raw, json)
Hash identifier:          baz3oNhuIqNrjSg8+IvKwKS8TRiJNXYSu4e6DURL30w=
Subject key identifier:   69:B9:19:B1:4C:85:27:38:87:A7:4A:EC:A9:D0:50:85:9C:D7:3A:E8
Certificate issuer:       /CN=b12072dc-8b29-49de-800e-2439a1f4bf97
Certificate serial:       010D0C9F43285845B7B38DCCD3EBB637CFB07900
Authority key identifier: 6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     399737
IP address blocks:        2602:f9dc::/40 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:8d:cc:d3:eb:b6:37:cf:b0:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12072dc-8b29-49de-800e-2439a1f4bf97
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=eafda930-c309-4246-94f7-8b838beeabdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:2f:39:c8:9b:cc:ad:5f:d0:2f:2e:f6:85:
                    bb:35:4b:86:c1:36:a5:35:4e:8b:93:6f:1c:9d:85:
                    82:99:5b:e5:28:25:2c:27:96:5b:00:fa:d1:b6:18:
                    af:82:9f:26:9b:f0:92:fc:06:bb:ee:8e:7c:f0:2e:
                    89:08:a3:ca:6f:1d:b0:74:db:d6:4b:47:a0:ca:c3:
                    da:68:85:bb:ad:62:15:3f:ce:33:30:ac:a9:81:75:
                    20:04:8d:39:df:f6:bd:bb:fd:76:dd:f4:b9:15:c4:
                    75:5f:a8:e5:76:c6:9c:8a:eb:1e:6c:02:85:09:08:
                    09:5c:13:b4:fa:02:e3:cf:44:14:8b:60:10:a2:f8:
                    84:91:0f:53:39:c7:d3:f1:ac:cd:f2:ee:c6:ff:9e:
                    86:10:f2:55:01:e9:fb:bb:81:03:fa:6e:37:12:17:
                    99:8c:99:e7:32:d1:56:a5:8e:1a:67:9c:86:fb:8a:
                    81:6f:18:09:d7:96:d6:ec:50:e2:49:e6:05:f8:36:
                    e6:44:31:b6:b7:0f:15:c0:79:81:db:af:cb:c9:e6:
                    a4:5f:7f:d7:4a:5e:f8:91:1f:d7:f3:94:b4:ec:cf:
                    8c:e3:f8:49:07:a9:38:3b:ff:e4:98:da:51:e2:75:
                    6b:9c:08:75:8c:90:25:2a:2b:58:1f:9a:49:ba:05:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B9:19:B1:4C:85:27:38:87:A7:4A:EC:A9:D0:50:85:9C:D7:3A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9dc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:fa:aa:e3:1b:17:54:17:16:72:aa:2e:cd:22:54:c5:1e:81:
         4a:91:c7:4e:09:49:7d:9a:c1:53:ff:ff:e9:e1:20:56:4f:4c:
         cf:62:30:d8:63:6d:c2:e0:f5:21:24:12:b2:e2:98:a1:45:33:
         a5:24:29:cb:cb:a0:06:fb:9a:0c:03:cc:dc:ea:41:39:4b:02:
         84:6e:e6:37:79:37:7c:fe:b3:e4:ae:65:f8:3d:33:c0:aa:64:
         3b:43:db:a4:91:b9:75:8a:d3:e8:86:cc:fb:e6:17:a6:e4:5f:
         a0:c3:f4:bd:8d:9f:a6:b2:24:ad:e7:de:35:66:41:f0:6d:63:
         63:bc:61:04:d7:a3:93:2e:90:9b:3d:28:5c:e2:c5:e4:55:5b:
         f2:58:c1:ef:f0:4e:cd:0d:97:b6:ac:d4:44:6e:f7:d8:7a:b0:
         9c:0f:b3:e7:18:64:a5:07:cf:bb:33:c0:e0:7e:99:0d:74:67:
         d6:31:0a:a4:b7:65:cb:db:0a:aa:ca:3e:19:2f:41:6c:c0:de:
         4f:43:80:8e:84:28:8b:cc:ea:cd:04:e0:79:c2:92:4f:3d:19:
         03:51:35:39:ae:14:10:1c:ef:eb:ca:f8:04:fd:23:87:e4:d0:
         00:f2:33:6d:3c:5f:da:90:1b:11:f2:17:6b:de:1c:bb:9e:fd:
         06:9a:12:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:05:46 2024 by rpki-client on console-fra.rpki-client.org