Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/34398cf2-abf1-34bd-a422-91c3bce934f8.roa
File:                     34398cf2-abf1-34bd-a422-91c3bce934f8.roa (raw, json)
Hash identifier:          q2+gQCWYl9IC0bwzXibOg8hXnRHVyJ0s6Ej2XzBn3tQ=
Subject key identifier:   2F:65:AF:F8:FB:CA:49:32:D4:DC:D6:9A:29:8D:44:3E:D4:39:F9:36
Certificate issuer:       /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial:       010D0C9F43285844F46556383E0313AF86C1F4C0
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/34398cf2-abf1-34bd-a422-91c3bce934f8.roa
Signing time:             Tue 20 Feb 2024 14:00:31 +0000
ROA not before:           Tue 20 Feb 2024 14:00:31 +0000
ROA not after:            Mon 20 May 2024 13:00:31 +0000
asID:                     400642
IP address blocks:        2602:fe59:80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:65:56:38:3e:03:13:af:86:c1:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
        Validity
            Not Before: Feb 20 14:00:31 2024 GMT
            Not After : May 20 13:00:31 2024 GMT
        Subject: CN=033836d2-3d63-4367-b386-ad300ea232c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:16:a7:18:e4:5d:64:55:30:2d:4b:f1:18:
                    27:03:ab:6c:e5:d6:d2:8c:38:81:d3:f0:56:c1:9d:
                    7c:fc:77:b8:dd:43:eb:2e:e3:71:85:0c:64:21:fc:
                    bc:8d:98:39:f5:3d:36:ec:21:fb:ab:78:69:69:fc:
                    50:82:ee:c8:dc:ec:b9:0f:51:34:80:b4:97:98:ca:
                    dc:a6:a8:e9:b3:f2:0b:6f:1b:8c:2d:5a:4e:90:f4:
                    a8:59:d9:f8:dc:dc:e3:64:a7:c0:0f:a8:05:d9:f9:
                    7c:68:a9:54:2a:f1:60:ab:dc:36:fd:b6:79:cc:fa:
                    07:f9:b5:5c:4c:92:b5:67:6b:a4:4e:67:a1:45:62:
                    17:03:03:af:d0:e0:7f:d6:d9:a9:e0:4d:bd:ec:94:
                    c7:32:f3:0a:ad:62:b3:b5:f5:b9:3f:c1:6f:94:45:
                    6c:72:75:14:41:1f:04:ec:e5:65:21:70:b6:f7:68:
                    f4:f7:0b:b2:71:2a:30:9f:8f:9c:53:36:00:9b:cf:
                    04:11:71:be:1b:ef:b2:36:c8:18:ac:27:02:04:09:
                    e5:1b:67:81:0a:fe:67:ea:08:ed:2e:3c:bc:c8:9b:
                    c5:45:6b:1b:ef:f1:98:bb:bc:ee:84:83:68:5e:96:
                    5f:1c:09:df:e7:7e:9e:96:2c:7c:c8:70:02:95:2e:
                    33:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:65:AF:F8:FB:CA:49:32:D4:DC:D6:9A:29:8D:44:3E:D4:39:F9:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/34398cf2-abf1-34bd-a422-91c3bce934f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl

            X509v3 Authority Key Identifier:
                keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe59:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:df:38:4b:52:ee:24:87:26:e7:14:32:25:d8:0f:d7:d3:f8:
         5c:d3:32:97:0d:94:d1:36:ad:c6:1b:34:78:9c:b2:62:d7:ef:
         e2:8a:91:b6:0c:16:43:ea:bc:b3:3d:4f:67:51:45:b8:2c:3c:
         51:3c:e6:af:88:92:0c:6a:4b:fc:0c:f2:dc:bb:8f:9d:3c:3c:
         4b:23:bc:c3:9a:d5:a3:ac:1d:7e:83:81:36:b8:60:20:23:7c:
         54:cf:97:67:4f:1e:7b:83:7e:35:3a:b4:1e:bc:a0:40:82:8b:
         b1:49:d3:2b:6b:67:1c:3d:51:8a:38:d5:4f:46:a0:d1:57:8b:
         05:fe:d6:2c:cf:5a:22:dc:02:83:88:62:9e:d9:8e:3e:7b:2c:
         f9:9e:e9:43:e0:0d:46:6d:79:9c:99:83:65:e5:54:e6:43:87:
         7e:42:9a:09:45:54:a0:92:6b:42:02:4c:34:81:d1:d7:e2:2a:
         04:ec:71:47:61:a1:ee:fb:6d:39:cf:12:9d:2f:6b:fd:cc:c4:
         32:f5:65:f0:0c:ca:7c:f7:41:c5:7d:22:ab:5b:2d:59:34:f8:
         dd:ff:4b:be:98:f6:c1:02:de:dc:bd:29:c7:8a:02:aa:16:e7:
         de:cb:12:be:84:17:3e:e9:33:19:ef:f4:13:bd:a9:09:d6:a4:
         c5:8a:5b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:40:42 2024 by rpki-client on console-fra.rpki-client.org