Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e/3ede90f0-4c91-30e9-89dd-e6d5ab01e47b.roa
File:                     3ede90f0-4c91-30e9-89dd-e6d5ab01e47b.roa (raw, json)
Hash identifier:          o6daDwET4tbLlvGr7qqxmsGHxN1TDTeDXTJ0zY1GZPo=
Subject key identifier:   15:92:62:C9:79:23:21:5D:52:4F:10:30:C6:7A:E5:20:5E:12:44:8E
Certificate issuer:       /CN=b3684cc2-61f3-48ab-a840-5ed39d70b96e
Certificate serial:       010D0C9F43285845B4E8D811F75A16723EF63F40
Authority key identifier: DE:65:2F:B4:D2:D7:DF:9F:4E:E4:6B:0E:F9:33:72:E5:2B:09:A5:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e/3ede90f0-4c91-30e9-89dd-e6d5ab01e47b.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     206203
IP address blocks:        2602:fb8a::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e/b3684cc2-61f3-48ab-a840-5ed39d70b96e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e/b3684cc2-61f3-48ab-a840-5ed39d70b96e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d8:11:f7:5a:16:72:3e:f6:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3684cc2-61f3-48ab-a840-5ed39d70b96e
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=bfb5648b-a22f-44c4-b707-58d38460f85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:08:98:ac:e7:37:cd:69:8c:f0:8a:4d:9f:
                    a3:4c:db:f6:54:f8:5f:4c:44:31:99:6f:bd:d9:4b:
                    6c:a7:32:5b:a2:34:e7:ff:96:57:d7:26:d1:e3:00:
                    c1:76:70:a2:c2:69:3f:0e:89:a6:86:7f:38:b4:af:
                    6e:72:f7:6d:58:8e:07:96:75:67:51:49:c8:7e:4b:
                    15:84:3d:e2:6b:fb:3e:5c:2a:4b:9b:a8:3e:f7:fe:
                    5f:be:35:d0:a7:c7:22:38:58:99:a7:d3:f6:14:df:
                    a8:d9:e5:a0:dc:99:7e:9f:66:89:34:a0:e6:c0:27:
                    07:29:da:1f:82:bb:73:4c:ad:00:96:b9:29:2c:ed:
                    8d:9d:b1:bc:73:d8:49:4c:b0:24:55:bf:ae:2f:cf:
                    03:f9:67:44:1b:69:df:20:f4:ce:02:c8:08:c3:83:
                    33:c5:12:4f:28:6a:24:9f:cf:12:38:ad:19:88:e5:
                    75:1d:7c:4d:46:9b:27:fa:66:ae:43:2d:0b:5c:56:
                    3c:93:5a:13:f2:f3:ef:5f:c9:44:b6:92:17:4f:ab:
                    29:5e:31:c4:b9:0c:03:76:e0:6e:b6:ce:b2:77:1f:
                    8b:a9:f7:76:2d:21:a8:9b:e2:48:ce:d7:3e:8f:73:
                    d2:f2:e6:5c:7b:30:a2:11:4e:e9:08:5e:77:f8:f5:
                    d2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:92:62:C9:79:23:21:5D:52:4F:10:30:C6:7A:E5:20:5E:12:44:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e/3ede90f0-4c91-30e9-89dd-e6d5ab01e47b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e/b3684cc2-61f3-48ab-a840-5ed39d70b96e.crl

            X509v3 Authority Key Identifier:
                keyid:DE:65:2F:B4:D2:D7:DF:9F:4E:E4:6B:0E:F9:33:72:E5:2B:09:A5:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb8a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:4c:b0:fc:d7:fb:23:e2:01:f1:eb:0b:09:53:11:fa:76:98:
         d5:de:64:aa:ab:38:b0:e9:1b:07:92:f2:c1:75:50:bf:5a:73:
         15:bc:58:a1:fd:26:5d:d4:1d:1d:62:44:a8:c3:f9:87:66:9f:
         55:54:67:1e:f4:d5:4f:2a:af:83:1e:28:e0:b5:9e:30:70:52:
         19:9f:42:9e:ff:67:e7:84:54:1f:af:2a:a5:d5:dd:2e:6f:05:
         35:9e:c5:98:b4:9e:24:34:41:ff:42:2c:7e:73:39:f1:67:29:
         d5:09:0d:9a:86:08:5c:08:4a:df:42:60:02:35:c4:0c:e6:0b:
         d5:6e:14:5a:53:7e:ff:f5:ef:28:2a:be:08:a4:49:65:7f:97:
         1b:8c:12:5b:f8:71:5b:ea:86:18:94:34:5b:71:24:a5:d5:d9:
         a3:28:d5:9f:77:78:cb:e1:3c:57:37:61:ec:05:21:43:41:ce:
         2b:85:10:b2:75:dc:95:a5:b2:0b:40:dd:9b:e3:58:f5:cc:7a:
         70:8e:77:41:e8:42:b5:cf:a0:4b:ec:f5:14:48:28:b5:96:06:
         47:24:18:13:de:90:69:c7:04:54:e1:f7:85:51:ff:35:aa:ef:
         a3:fc:a0:c8:0b:89:70:69:e3:5f:f9:dc:69:e5:ce:c6:c0:9d:
         27:95:17:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:23 2024 by rpki-client on console-fra.rpki-client.org