Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ff44e593-bcbc-3a4f-a581-2db78b5f8910.roa
File:                     ff44e593-bcbc-3a4f-a581-2db78b5f8910.roa (raw, json)
Hash identifier:          YGAtd/yRf7kAcdatg4EoiOP9fBID/V8thxEpsqbiLdQ=
Subject key identifier:   24:A8:73:19:99:59:18:D6:D7:22:7D:D7:91:DB:30:43:42:32:E1:52
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F4328584569886E1C9A0CB2E3BC7593A0
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ff44e593-bcbc-3a4f-a581-2db78b5f8910.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     203283
IP address blocks:        2602:2db:110::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:6e:1c:9a:0c:b2:e3:bc:75:93:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=a73962eb-f4e6-4cb7-9a53-1af7721f166d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:0e:8f:30:76:ee:47:e1:89:cf:d5:b8:22:
                    3c:31:c7:bb:11:2d:54:ec:68:ff:ca:61:fa:4a:93:
                    ac:59:1b:5b:61:61:c7:38:54:9f:1c:28:a6:f2:d7:
                    6c:ea:4e:0a:0e:1d:3d:4c:fc:63:20:67:f6:0f:f3:
                    4d:70:1c:2b:f0:c6:d2:98:73:49:3a:30:1e:ac:0a:
                    35:cb:c1:1b:9f:68:98:be:03:77:17:0d:0a:58:ec:
                    73:aa:07:b8:a2:fb:ae:f0:da:f9:85:08:9a:72:6f:
                    f2:9d:3e:f2:91:a7:5f:67:dd:9b:1c:a3:4c:fc:cc:
                    4d:2c:d9:09:0c:84:47:d1:ff:5c:12:96:e7:c5:6a:
                    60:21:c7:16:47:58:d8:5a:c7:f6:7b:70:67:0a:4a:
                    41:51:74:4a:29:ad:7e:ee:2a:3a:6a:88:2a:cc:42:
                    e0:69:f4:3e:8f:14:79:76:1c:3e:25:31:3f:cf:d2:
                    2c:17:9d:93:12:00:ba:ac:84:57:56:e5:c5:42:70:
                    c1:a7:2f:fc:d0:26:d5:fd:59:52:e5:30:b8:5c:ad:
                    bb:e0:9f:52:d8:c1:05:6c:8a:0c:55:a0:b9:a6:82:
                    fa:2a:22:92:3f:bf:da:7d:04:2f:54:ca:a3:3f:fa:
                    69:0b:9b:74:b6:66:4d:db:6d:c5:f9:6d:fb:8d:f6:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A8:73:19:99:59:18:D6:D7:22:7D:D7:91:DB:30:43:42:32:E1:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ff44e593-bcbc-3a4f-a581-2db78b5f8910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db:110::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:95:a4:14:07:8c:1d:68:53:94:9a:13:e8:e6:1f:f5:d6:34:
         73:c4:18:9a:58:bc:db:81:18:ec:3a:75:e7:69:cc:1c:cd:f9:
         7a:3a:42:76:e3:de:ee:fa:dd:39:cb:aa:e8:c0:28:61:5c:8b:
         86:be:61:5f:28:a8:7f:6e:f1:8e:35:ef:9b:44:ed:8d:f0:03:
         43:b3:18:58:d8:59:63:e8:a3:93:74:bb:ff:df:5a:4c:91:12:
         3b:5a:56:c8:5e:1f:ac:7f:7f:bc:ad:79:88:45:03:8b:6d:52:
         3a:5a:ce:58:1b:7e:ee:80:38:81:f5:c2:a6:71:2b:f7:e8:95:
         f7:9c:d3:85:9f:2a:fc:ff:aa:fc:fc:9d:d3:2d:f2:d2:34:75:
         96:db:73:54:4f:b4:26:54:76:8c:36:43:e0:00:a1:d5:56:dc:
         11:b2:e5:96:7e:38:61:bf:28:42:79:21:ef:52:f5:34:81:37:
         32:ac:2b:6f:fa:7c:c1:80:6b:d0:cc:32:5f:9d:62:3f:26:1e:
         5a:c6:37:eb:8e:54:78:08:41:67:3d:89:91:11:33:ff:d1:4c:
         fc:67:4d:6b:7b:39:98:bb:82:7f:d1:e7:0d:ae:c8:f0:37:0e:
         be:a3:71:90:5b:af:7c:34:47:7b:00:ae:29:83:b6:43:50:cb:
         b1:9e:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:14 2024 by rpki-client on console-ams.rpki-client.org