Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/04060585-1bc1-378b-876c-7416a134b05d.roa
File:                     04060585-1bc1-378b-876c-7416a134b05d.roa (raw, json)
Hash identifier:          1CxqQ8Hr0tEXYK1T3uLGA8S/0M8Saqx6mGBQtnathtU=
Subject key identifier:   E6:C7:B7:AD:29:1D:64:92:C1:93:DF:46:66:E6:83:45:C6:3E:9C:24
Certificate issuer:       /CN=66610284-035b-4928-833d-55f67bcdadc1
Certificate serial:       010D0C9F43285844E0DA8A514CB3B98A56E09440
Authority key identifier: 32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/04060585-1bc1-378b-876c-7416a134b05d.roa
Signing time:             Tue 13 Feb 2024 14:00:29 +0000
ROA not before:           Tue 13 Feb 2024 14:00:29 +0000
ROA not after:            Mon 13 May 2024 13:00:29 +0000
asID:                     400587
IP address blocks:        2602:fb95::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e0:da:8a:51:4c:b3:b9:8a:56:e0:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66610284-035b-4928-833d-55f67bcdadc1
        Validity
            Not Before: Feb 13 14:00:29 2024 GMT
            Not After : May 13 13:00:29 2024 GMT
        Subject: CN=68bdc097-311a-46d3-94ce-d2343d5b4184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:e4:12:3f:d6:4d:4c:6d:59:46:95:73:0b:
                    2e:1f:2b:70:46:e5:96:f7:1c:49:6f:d6:04:11:8e:
                    ab:29:61:91:e6:34:23:bb:3c:7d:71:dd:ab:f4:ce:
                    9c:f7:10:ae:d3:31:db:c2:e8:ea:c0:d1:8c:6b:a3:
                    29:74:62:f7:56:65:21:7a:8b:3f:f6:61:7c:d9:53:
                    a4:eb:18:ae:8e:f6:f6:56:12:a2:76:47:1a:60:28:
                    48:db:54:10:52:db:09:15:d1:e6:89:d6:0a:2c:cb:
                    1b:81:bb:de:09:ff:71:d6:57:dd:8b:77:6d:b7:03:
                    d3:36:c6:aa:90:a4:75:89:2a:61:cf:82:9f:35:a8:
                    80:78:bc:54:59:5d:9e:d5:78:9e:3e:2f:9b:1d:bc:
                    92:44:e1:58:98:03:41:58:27:13:d8:f6:9f:98:3e:
                    7d:7b:1c:dd:c3:69:b0:37:2e:a8:7d:fe:45:cd:81:
                    09:d3:b1:f5:e9:f4:b8:6b:87:b9:bb:da:ef:55:0f:
                    f0:df:f7:a7:22:1d:47:cd:f6:ad:06:34:f2:8b:fe:
                    9a:31:bb:9e:81:c1:b0:bd:4f:76:00:d0:6b:c7:35:
                    8c:9c:0f:3e:0a:cf:22:2c:1e:9a:49:e0:c8:a1:75:
                    c7:42:c8:5e:b0:69:ec:91:a5:f5:a3:6f:f5:2b:b6:
                    28:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C7:B7:AD:29:1D:64:92:C1:93:DF:46:66:E6:83:45:C6:3E:9C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/04060585-1bc1-378b-876c-7416a134b05d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl

            X509v3 Authority Key Identifier:
                keyid:32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb95::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b1:5d:a4:84:bc:43:9a:82:f5:38:ff:f2:32:1c:2a:26:d5:
         fa:b9:fd:fe:b5:57:14:ac:02:cc:1e:bc:c7:81:d6:28:2a:3f:
         31:47:87:d4:54:e0:37:02:bf:ec:da:31:36:8d:7c:cc:de:da:
         08:82:14:46:5d:2c:a2:16:23:34:59:5c:03:d1:b9:c9:ce:2c:
         4b:0b:a0:08:9e:51:5b:2b:06:85:6f:7d:e2:76:ee:a4:c0:6d:
         a2:d5:7e:0a:93:d2:79:5e:b0:06:2e:3e:6f:c5:8a:df:26:53:
         e9:43:2a:01:b6:f4:96:0b:cf:f7:9c:76:f9:cb:c7:6c:8e:96:
         7e:8e:db:18:44:d7:44:65:25:f6:a0:53:ef:f9:26:34:62:58:
         15:7d:f1:c7:10:6c:67:5a:db:fb:95:a8:1d:30:bc:7f:58:c8:
         a7:e4:62:fa:b1:f3:a6:88:30:de:a8:96:f8:d7:76:33:3a:fa:
         fd:21:c3:94:63:cf:0f:33:e0:a0:69:43:04:83:65:a2:92:43:
         46:aa:0b:f1:30:45:12:ad:c7:4b:43:e7:3a:1c:94:27:eb:82:
         27:26:cc:e0:64:35:ba:04:06:c2:23:3d:a9:a4:a1:6d:0e:59:
         c8:e4:f0:97:85:2a:86:27:15:a3:02:b1:4c:5f:1c:89:9d:a0:
         79:91:6b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:31:41 2024 by rpki-client on console-fra.rpki-client.org