Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/cd3f2e2a-0861-34b9-8eab-cca2dddf1680.roa
File:                     cd3f2e2a-0861-34b9-8eab-cca2dddf1680.roa (raw, json)
Hash identifier:          mPjj0iqldBaxPTC6qt+119ZwCC8MBf1YnMB7PRHel5M=
Subject key identifier:   EC:DC:29:9D:E7:DE:21:7F:AF:06:95:E5:6C:73:0C:61:65:9A:05:9B
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F43285844CD4FC6C1B3973715C3FACEA0
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/cd3f2e2a-0861-34b9-8eab-cca2dddf1680.roa
Signing time:             Tue 06 Feb 2024 14:00:30 +0000
ROA not before:           Tue 06 Feb 2024 14:00:30 +0000
ROA not after:            Mon 06 May 2024 13:00:30 +0000
asID:                     398395
IP address blocks:        2602:ffc5:10d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:cd:4f:c6:c1:b3:97:37:15:c3:fa:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Feb  6 14:00:30 2024 GMT
            Not After : May  6 13:00:30 2024 GMT
        Subject: CN=0fd42e7a-73a7-4936-be42-609195522020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:3a:cc:52:a5:27:7e:61:43:ae:51:0c:0f:
                    ae:40:a1:7a:57:66:8a:de:1f:e3:b9:c6:f4:db:05:
                    74:10:2c:f0:44:1a:7a:ab:a5:d9:14:cf:ae:f7:67:
                    80:14:17:4a:27:b2:79:45:f1:81:3f:63:1a:a8:cd:
                    5d:d5:b1:0f:0f:6c:94:df:c7:51:fc:44:99:41:de:
                    4c:90:51:11:89:f3:11:f9:fa:2b:5c:10:65:d9:37:
                    75:6c:3a:83:d1:9c:65:d9:64:d5:b1:90:9f:5b:c2:
                    26:cf:99:cb:89:a4:f4:ae:b9:29:36:ea:03:92:60:
                    ba:99:b1:3f:a7:7e:75:e1:4f:c2:77:47:93:f3:73:
                    01:15:b1:6f:fa:67:b4:47:e9:f9:9a:d5:35:33:63:
                    06:27:00:ef:98:c4:72:0b:81:fd:16:6a:7e:95:c2:
                    27:7c:4f:99:0a:46:17:71:81:9b:e8:e0:74:04:f2:
                    31:00:71:81:6e:e0:5d:d6:9a:82:f7:2c:dc:99:23:
                    23:6c:d0:46:d8:eb:69:a2:fe:63:c1:c7:a7:70:85:
                    eb:a0:a4:a1:de:26:6d:85:7b:30:4b:42:a6:ae:f4:
                    f4:a9:5f:42:9d:2f:f3:99:15:cb:c8:4b:88:18:85:
                    a7:91:62:bd:fc:77:8b:0f:bc:d1:1b:44:9b:41:e8:
                    1e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DC:29:9D:E7:DE:21:7F:AF:06:95:E5:6C:73:0C:61:65:9A:05:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/cd3f2e2a-0861-34b9-8eab-cca2dddf1680.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffc5:10d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:52:48:40:d2:20:77:81:26:c0:f6:6c:7f:9f:08:c2:0e:65:
         a6:19:ac:e8:dc:b3:cc:e4:17:2c:0a:2d:23:79:96:e2:69:37:
         49:9d:f6:76:91:6d:12:b6:5e:a4:14:2f:73:64:d4:2b:44:67:
         2d:f1:3c:ef:df:0b:5b:57:21:e7:bb:cd:92:4a:97:8c:f4:b6:
         3b:7a:ee:3b:aa:f6:1a:e9:82:48:7c:ce:27:52:44:09:8e:1f:
         78:d1:46:30:42:e1:a4:d9:3f:f1:57:31:51:74:ee:ba:fe:3d:
         0f:bf:6a:5e:00:aa:db:78:33:77:73:b4:20:d5:60:a3:4a:91:
         fe:7c:60:0b:ce:c5:fe:47:5d:4e:a2:00:07:9a:d0:33:b6:07:
         59:3c:2d:f5:7c:19:3d:d3:33:a1:d3:a1:18:63:df:16:19:77:
         31:1b:b5:da:54:d5:98:ae:8a:10:80:08:6f:54:0c:95:57:17:
         e2:dc:d9:a5:3b:3c:7f:58:9c:0c:34:4e:87:80:5d:73:c4:3f:
         6e:39:45:82:20:dc:95:18:28:f8:b0:2a:e3:9b:cb:16:33:c1:
         bb:21:61:73:61:77:77:21:55:27:dd:bc:e5:40:a1:04:90:52:
         56:63:00:ac:66:2a:b2:7c:95:d4:6e:22:72:4b:3c:aa:36:48:
         5d:cd:d7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:10:46 2024 by rpki-client on console-ams.rpki-client.org