Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa
File:                     0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa (raw, json)
Hash identifier:          QZOvz+tIpyNycDszPWRzxpjWf+7O5cuzPu3JYabEScg=
Subject key identifier:   A7:CF:98:20:A4:26:BD:7F:89:A4:20:39:F6:62:C6:35:C1:88:F8:4D
Certificate issuer:       /CN=1fb5932e-f862-443b-a719-26a612c2f112
Certificate serial:       010D0C9F4328584526A5AAEFDD63A70E209C26C0
Authority key identifier: F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa
Signing time:             Sat 09 Mar 2024 14:00:31 +0000
ROA not before:           Sat 09 Mar 2024 14:00:31 +0000
ROA not after:            Fri 07 Jun 2024 13:00:31 +0000
asID:                     17326
IP address blocks:        2602:fd2a::/36 maxlen: 52

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:26:a5:aa:ef:dd:63:a7:0e:20:9c:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5932e-f862-443b-a719-26a612c2f112
        Validity
            Not Before: Mar  9 14:00:31 2024 GMT
            Not After : Jun  7 13:00:31 2024 GMT
        Subject: CN=474a2461-7a2e-43e9-aa01-20db87d06e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:a3:09:fb:60:d6:da:f7:fc:60:c8:b8:ce:
                    a4:d9:41:d1:7c:8d:fc:e6:93:fe:70:06:d7:63:fb:
                    93:f4:7a:25:cf:c7:34:68:24:ed:ec:d6:80:fa:a8:
                    8b:b1:be:8a:c1:27:88:78:55:c6:d0:d2:a6:1b:8e:
                    6b:28:43:7c:12:ac:56:f0:70:a5:cd:1b:03:3b:c7:
                    de:2a:fc:1d:c8:27:7c:1d:e8:c3:01:74:16:0d:47:
                    af:6b:42:9f:6b:d9:0f:cd:29:af:e2:ff:5c:de:71:
                    c2:d7:39:35:72:95:ef:31:0d:54:47:bb:0e:55:77:
                    71:90:69:72:3a:87:9e:10:c8:ce:e8:9f:63:ad:81:
                    ff:82:cb:0b:a3:06:da:48:4c:ec:05:dd:3d:10:94:
                    ed:70:7d:eb:52:e1:09:d5:c8:5d:9f:53:06:9b:8c:
                    e1:8c:44:9d:1a:6c:db:cf:82:b4:b8:01:bc:88:67:
                    78:4b:b9:11:db:ea:da:93:22:56:c2:c3:57:b0:d2:
                    1f:46:50:9e:17:a1:4d:7a:2a:c1:ab:66:13:f9:a6:
                    e5:d7:d9:f5:c6:75:37:29:3b:ad:65:89:95:6d:c7:
                    fc:ca:e6:df:1e:49:9b:69:d4:28:08:34:5f:6b:f6:
                    9e:bd:b1:cf:8e:2a:3b:8b:5f:eb:89:5a:ff:cf:4b:
                    16:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CF:98:20:A4:26:BD:7F:89:A4:20:39:F6:62:C6:35:C1:88:F8:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl

            X509v3 Authority Key Identifier:
                keyid:F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd2a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:68:dc:7f:47:6d:ba:8d:ef:63:05:13:97:06:6b:d1:9d:c3:
         9a:69:1d:f0:67:4b:de:05:17:39:61:16:0e:7c:c5:a6:1a:ec:
         06:3f:70:50:5c:b3:15:d3:a4:9e:04:6f:fb:f1:9b:ca:44:3d:
         41:c2:d3:36:83:6e:77:1e:46:75:a4:f2:3c:ec:62:f3:d9:ad:
         f6:c2:58:52:bc:c9:28:78:a8:db:d8:7c:49:76:b9:75:b2:7f:
         f4:3e:fa:8b:9a:a7:6e:08:ee:d2:41:31:64:ae:50:7e:6c:2a:
         1c:f6:91:54:83:94:99:24:e8:60:22:c2:b7:77:18:06:92:01:
         80:15:ed:50:1a:24:14:74:03:fe:8f:fe:dc:e7:18:9b:c0:2e:
         bb:99:aa:65:0d:16:b4:6a:7d:a2:5d:80:7f:53:cf:de:4e:fc:
         68:3b:14:8f:99:18:cd:19:67:0c:d4:b4:18:04:71:1c:c5:42:
         36:86:10:7e:fd:49:c3:eb:5c:cc:41:96:eb:7b:3a:09:56:fa:
         ee:24:bc:43:23:0b:3e:19:23:20:6a:85:89:ac:03:d2:f3:4f:
         18:5e:c6:23:a4:20:b9:fd:7c:cc:66:dd:db:c2:3a:03:fc:81:
         4a:61:9f:bd:8a:00:57:64:62:5e:c0:3e:ae:ce:f4:2a:14:17:
         e4:bb:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:32 2024 by rpki-client on console-fra.rpki-client.org