Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/df287de6-1914-3cd7-888e-504ff51dd500.roa
File:                     df287de6-1914-3cd7-888e-504ff51dd500.roa (raw, json)
Hash identifier:          3eDO0ogL9hcnExykP5vfvtPSoTKxtvl8Hr6VuJxqGYE=
Subject key identifier:   3E:DC:E1:8F:F3:9B:C2:1A:03:EB:BA:DA:B9:73:84:69:38:BE:34:7B
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F43285845131ADFCF61B862870B9ED480
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/df287de6-1914-3cd7-888e-504ff51dd500.roa
Signing time:             Sat 02 Mar 2024 14:00:31 +0000
ROA not before:           Sat 02 Mar 2024 14:00:31 +0000
ROA not after:            Fri 31 May 2024 13:00:31 +0000
asID:                     23470
IP address blocks:        2602:fb54:149::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:13:1a:df:cf:61:b8:62:87:0b:9e:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Mar  2 14:00:31 2024 GMT
            Not After : May 31 13:00:31 2024 GMT
        Subject: CN=ebb4b3ee-fb00-4533-8ae5-1ad217026594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1a:86:94:17:7f:02:d4:64:e5:f5:26:ed:57:
                    03:e1:00:d5:6a:41:8a:ae:4e:ab:0a:7d:a4:11:ab:
                    a1:2c:35:34:2f:f3:e3:9e:ae:da:e8:74:5e:3a:90:
                    35:6c:82:7e:6b:1b:15:c7:09:d4:fc:78:4a:7d:7b:
                    f7:38:71:f0:af:7a:13:7b:e2:e5:e3:47:83:f3:f0:
                    09:99:7d:ea:2f:eb:dc:9c:74:3b:53:9d:dc:80:75:
                    2f:ee:31:38:a6:39:ed:21:5c:6d:03:35:13:b3:96:
                    52:bd:bd:48:63:4b:28:f3:cc:d7:a5:d5:20:12:be:
                    1f:35:31:dd:d6:ef:32:13:aa:7f:1a:a6:29:64:e3:
                    48:ed:8d:53:cd:2f:da:d2:05:c5:51:b4:33:32:43:
                    3b:6c:c5:a1:17:cd:0b:37:2e:dd:48:74:e7:de:72:
                    44:da:5f:fd:c3:1f:88:a3:35:53:79:e7:39:3b:3f:
                    af:26:93:0f:5d:30:57:8f:82:5c:19:0c:e5:f8:ce:
                    be:92:64:e6:6c:8b:a7:0a:9a:06:4d:af:b9:59:04:
                    36:ae:b7:0e:ee:99:ef:d1:61:dd:19:14:ae:8a:1b:
                    81:0d:a8:32:21:69:b2:92:11:96:c7:16:29:89:26:
                    5a:b2:dc:b7:7c:a4:7b:f4:f5:28:be:f3:4e:3e:5c:
                    26:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DC:E1:8F:F3:9B:C2:1A:03:EB:BA:DA:B9:73:84:69:38:BE:34:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/df287de6-1914-3cd7-888e-504ff51dd500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:149::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:30:88:96:bf:57:7f:a4:1c:89:00:c6:1e:f9:1d:fd:30:75:
         59:b5:91:a4:79:c8:f9:0b:40:21:da:10:40:9a:62:23:e2:7c:
         99:97:19:0f:35:9b:48:19:ff:6b:75:58:e3:a3:e1:34:e2:6a:
         42:cc:b9:99:17:5b:4e:11:90:80:18:e6:61:b0:e0:ec:78:2a:
         b2:f5:60:6e:9d:34:7a:26:cb:c1:a9:7a:81:80:5c:d6:25:9f:
         b0:f7:a0:df:5f:bd:07:93:5f:d5:13:48:b2:69:ad:26:db:9f:
         ed:8e:29:e0:1d:d9:a7:27:9f:9f:4d:19:2b:58:06:7d:37:92:
         ef:f7:35:f7:cb:f1:9e:a1:a7:40:f3:11:3e:1f:7d:0d:9e:74:
         e3:59:a1:3a:2c:ab:a7:29:ea:34:51:5e:1c:fe:22:ea:e2:10:
         90:00:ec:98:8a:70:3e:70:b8:00:ba:b8:dc:bc:1a:0f:7e:35:
         ea:76:82:3b:48:d9:5c:44:60:eb:c6:1f:0f:ca:c9:37:85:f0:
         16:03:4b:24:fe:da:93:09:13:27:4f:60:a5:08:94:f5:47:4c:
         aa:d7:f3:10:2c:67:65:56:31:58:83:67:aa:57:6d:2f:59:af:
         35:94:79:f0:92:c0:a0:7b:1b:95:8f:73:74:59:70:8d:7a:91:
         0d:15:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:52 2024 by rpki-client on console-fra.rpki-client.org