Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/b724cfb3-f729-3f1d-b659-9e53657874be.roa
File:                     b724cfb3-f729-3f1d-b659-9e53657874be.roa (raw, json)
Hash identifier:          fzuK+46BIZ8l6zVz+dDcK5W//aNmXL/ERZnwxleUfXU=
Subject key identifier:   C5:5B:09:0D:C7:28:1E:BD:B0:7C:34:6A:11:56:C6:48:8D:F1:D7:A7
Certificate issuer:       /CN=0942cd1e-1350-41d5-a14e-51bddb52c336
Certificate serial:       010D0C9F4328584571E872CBE6CF37FBD1EE2980
Authority key identifier: 5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/b724cfb3-f729-3f1d-b659-9e53657874be.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     26157
IP address blocks:        2602:2ba:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:72:cb:e6:cf:37:fb:d1:ee:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0942cd1e-1350-41d5-a14e-51bddb52c336
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=1c67cce0-c7e3-4418-9c4c-73c3c8fdd264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:39:e7:8f:b8:f8:5a:16:75:86:87:43:96:0d:
                    37:6d:33:69:53:ca:fa:f1:f1:39:df:d3:6f:9b:13:
                    62:8e:02:6c:18:dc:cc:f2:d3:39:7d:d4:b7:64:07:
                    99:77:34:a7:d1:33:d7:32:ad:6c:50:85:cb:f0:c7:
                    72:44:b0:c3:3f:28:93:25:cf:9b:99:53:a3:39:2f:
                    b6:09:ed:52:e8:b4:e8:5a:c9:de:37:bd:99:c8:52:
                    33:16:5a:5b:c3:10:45:62:86:e8:5a:4b:68:a4:d3:
                    ea:7c:15:41:c4:9a:e5:37:1d:40:41:1d:a2:85:e7:
                    d5:26:d9:78:1e:1d:11:44:21:52:cb:58:ee:c5:4d:
                    57:9b:91:b8:01:f3:33:cf:67:85:c6:c3:61:ac:b9:
                    09:da:b1:3c:9a:0f:b0:5a:24:05:8f:8e:23:9a:b1:
                    0b:06:04:1b:6e:28:18:ee:2c:7f:14:fd:78:3f:61:
                    dd:93:c1:14:f1:4f:99:c1:c3:da:31:00:31:f8:c8:
                    11:3a:be:90:f9:39:63:27:52:4a:da:7a:43:13:4d:
                    76:a1:c6:6e:4d:e7:80:6a:e0:4c:c4:33:b5:71:a2:
                    52:07:bc:7e:86:c0:2b:21:75:e6:67:c4:da:da:75:
                    9e:a8:3e:30:2c:7f:c9:90:22:80:c5:2d:5e:f8:e3:
                    e4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5B:09:0D:C7:28:1E:BD:B0:7C:34:6A:11:56:C6:48:8D:F1:D7:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/b724cfb3-f729-3f1d-b659-9e53657874be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl

            X509v3 Authority Key Identifier:
                keyid:5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2ba:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ce:30:c6:41:fc:5e:cb:83:19:ba:01:44:3e:4a:e2:6f:28:
         ec:50:74:9b:da:fc:f7:b8:5b:4e:69:f3:b4:e9:12:7d:23:dc:
         f9:66:fb:d2:92:0b:b3:e3:84:d5:3f:b1:af:61:34:2b:c1:a8:
         24:89:a4:05:b1:01:01:cc:f1:e0:30:2f:d2:0e:4d:cc:18:e2:
         98:67:ce:b6:c9:04:20:31:5a:86:8c:30:7c:67:34:c5:1f:46:
         39:ba:ed:d7:10:61:2d:3a:23:24:78:89:f5:f5:0e:ce:a0:f8:
         2f:01:52:a2:94:a8:0d:e0:0e:4c:74:24:05:33:b2:39:9c:32:
         01:45:33:cf:07:c3:c9:f1:b8:2e:0e:35:d4:92:79:e4:37:40:
         c1:ef:67:fd:63:bf:cc:b9:ad:79:87:12:64:01:1b:a6:04:e3:
         c2:6b:16:50:e3:d8:17:1d:62:86:b5:dc:a4:b4:b7:3a:97:e6:
         3c:03:2d:83:ca:2d:38:d1:bb:e4:af:13:f7:94:ba:6c:79:ac:
         15:ec:52:aa:bb:d7:f6:c5:01:c7:c2:1f:03:20:5d:a7:8f:cc:
         9b:5f:6b:d5:95:22:4f:2a:8c:c0:36:41:60:dd:70:74:9a:95:
         dc:3a:b1:b9:79:14:23:b2:03:a9:66:46:54:3f:3c:17:74:05:
         83:1a:a3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:08:59 2024 by rpki-client on console-fra.rpki-client.org