Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/0e25b380-ccb0-3d0c-868a-62da7a67518c.roa
File:                     0e25b380-ccb0-3d0c-868a-62da7a67518c.roa (raw, json)
Hash identifier:          8pmLevJgYtR5YY7AHepAYX+fcLJOFxPjsIMfX/fvTLo=
Subject key identifier:   67:30:04:7A:F9:85:87:29:C3:4F:46:EE:A1:80:63:C1:DE:BD:92:A1
Certificate issuer:       /CN=6528c9ac-3735-430d-99f2-7ac01944d688
Certificate serial:       010D0C9F43285845B383726ACF48BEED9BE61C40
Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/0e25b380-ccb0-3d0c-868a-62da7a67518c.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     54696
IP address blocks:        2602:fa9e::/36 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:72:6a:cf:48:be:ed:9b:e6:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=7dc5f9dd-0097-4687-ab95-3ab4d9626f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:83:ad:c9:b5:55:b4:0b:b8:ec:34:09:4b:
                    c5:6a:3f:f2:17:a9:71:4f:f2:e5:ed:dc:17:e2:1b:
                    b6:e1:bf:fc:ff:ea:c8:3d:c7:a8:cc:dd:8c:8f:7f:
                    f1:48:3d:db:18:7e:a7:23:c4:fd:29:05:e4:7d:2f:
                    33:00:ba:80:be:94:d7:cb:92:ff:0b:5e:ad:32:c6:
                    ba:49:da:99:94:7d:55:cf:8c:8d:eb:97:d5:a7:07:
                    85:d5:10:b5:54:af:81:e8:76:fd:a1:95:12:4e:5a:
                    de:ea:b2:55:d6:39:a0:42:90:ea:bf:69:f5:b5:01:
                    23:53:0c:d0:44:91:5b:fc:12:8c:73:5e:c0:26:15:
                    6e:b7:1f:65:50:59:c0:a0:69:48:cf:4b:b2:66:aa:
                    b6:6d:1d:90:c9:41:85:72:22:7a:ae:28:0e:49:15:
                    b1:98:ff:f7:37:69:b2:41:ca:2b:c5:a2:81:21:ae:
                    5d:80:a2:e1:97:2a:39:ec:ca:89:a4:90:44:7a:1b:
                    32:bc:22:d3:f1:35:39:e4:d7:6b:ae:70:bd:7d:76:
                    c9:e2:46:a0:ee:4e:7f:f6:ba:8f:c7:55:65:3f:32:
                    78:f6:da:7e:4e:9f:72:18:5e:cd:0d:cb:79:7e:d0:
                    b3:c3:6a:2f:c8:38:57:27:fc:e9:10:ca:4a:b1:79:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:30:04:7A:F9:85:87:29:C3:4F:46:EE:A1:80:63:C1:DE:BD:92:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/0e25b380-ccb0-3d0c-868a-62da7a67518c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl

            X509v3 Authority Key Identifier:
                keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f4:ea:a2:57:ee:d7:5c:41:35:83:e5:e5:63:3a:37:84:b7:
         e7:b4:f8:a2:8f:47:6a:e9:a3:9d:cb:2b:a9:1e:35:72:d7:36:
         cb:5b:9b:c2:b4:cb:53:88:0c:e0:91:f4:e9:21:a2:d6:78:2e:
         f7:4d:38:b2:f7:e6:f0:db:f3:b7:ad:05:93:fd:cd:78:3d:6f:
         50:fd:56:b0:d9:71:bb:74:36:19:43:7e:d5:b4:c8:5f:93:3b:
         98:97:1e:c7:d8:89:95:ef:86:45:b2:0e:35:b7:75:4a:f1:a0:
         7a:1c:ef:18:b1:52:0a:ae:af:47:99:21:6b:fb:d7:e9:7a:05:
         65:90:01:df:ba:95:d9:e7:90:96:15:5d:29:94:81:a6:43:8a:
         a9:25:00:70:a2:e2:54:22:23:85:ee:dc:a7:a9:0c:db:93:06:
         07:47:f1:15:70:a9:2c:e9:ed:78:f8:5d:a2:0e:2d:59:47:dc:
         b4:b4:95:fe:80:40:a5:d9:7a:dc:7c:3d:1b:22:a8:19:cb:26:
         af:48:80:ac:96:c6:a6:95:89:48:be:e0:21:1f:de:3e:d9:eb:
         1f:53:ff:db:f9:94:c8:80:66:1b:2f:a2:ce:70:b3:ab:50:47:
         a9:f3:d2:69:34:dc:70:df:61:7f:b3:54:f6:53:89:0f:b5:00:
         69:41:e8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:33 2024 by rpki-client on console-fra.rpki-client.org