Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/f90519c5-62f7-31d2-b3aa-240151a93f58.roa
File:                     f90519c5-62f7-31d2-b3aa-240151a93f58.roa (raw, json)
Hash identifier:          Ri8RabJ4Rs3G5heQKwx//9TY4df17RKmij0iU98c4oQ=
Subject key identifier:   E0:72:37:B9:54:95:56:64:22:51:29:10:8D:33:D2:50:59:BC:CA:80
Certificate issuer:       /CN=3df29669-3733-4127-bbde-a71cc4b5a661
Certificate serial:       010D0C9F43285845612857C91AFBF1F72AA94800
Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/f90519c5-62f7-31d2-b3aa-240151a93f58.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     55247
IP address blocks:        2602:ff32:202::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:57:c9:1a:fb:f1:f7:2a:a9:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=178044c1-afe7-4b45-868e-652010de6163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b6:99:e9:ef:1d:55:cd:d4:2e:30:e9:31:f9:
                    34:38:d4:90:1b:38:25:b5:5c:77:24:c0:7e:c1:f2:
                    3f:2d:cd:83:f7:39:53:53:08:c2:11:47:1c:c8:8b:
                    33:7c:19:9c:5b:cd:f5:bc:ff:71:97:73:30:41:60:
                    38:b9:9e:37:3e:8d:41:3e:69:5c:8e:54:4b:96:d2:
                    eb:af:a0:3d:05:a2:08:dd:5d:47:a0:a7:0a:1e:73:
                    11:26:79:24:38:b5:c1:cc:b3:14:a0:97:01:99:2c:
                    dd:40:7d:27:1a:bd:1c:90:57:f2:d1:41:00:5c:65:
                    3c:2e:70:04:0d:be:02:4b:84:e1:da:28:90:e6:8a:
                    20:5b:76:fb:3b:f1:86:86:93:03:d8:54:7a:ee:80:
                    d0:2d:52:1a:e7:79:1b:b3:d5:8c:84:9a:f8:42:43:
                    28:37:bc:fb:7e:be:5c:a2:ce:c6:d1:b0:6d:4f:52:
                    15:83:e2:95:45:1b:e7:c4:67:d9:ed:22:2e:ce:b4:
                    0f:44:f3:8a:8f:22:a6:e2:ed:e9:c1:78:f8:2a:dc:
                    96:b8:1e:16:9d:0a:5b:38:a6:7b:e9:bd:f6:af:e5:
                    f3:5c:ba:14:16:ab:c1:5a:be:59:11:34:e1:d9:47:
                    55:b7:8f:2c:83:a1:55:73:9b:6d:33:de:f0:89:79:
                    c5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:72:37:B9:54:95:56:64:22:51:29:10:8D:33:D2:50:59:BC:CA:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/f90519c5-62f7-31d2-b3aa-240151a93f58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff32:202::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:5c:80:45:78:62:42:0a:ea:82:e6:e1:35:ab:e5:fa:8f:f3:
         f1:5d:27:c6:8b:ea:b1:5a:f6:b0:93:50:a8:f9:0d:1d:a0:2c:
         36:8d:7f:66:99:1d:22:ee:cb:ba:4c:9e:9a:2a:30:d0:56:1d:
         eb:3e:e4:a5:50:0d:db:78:09:49:60:90:1c:41:0c:44:5d:cf:
         33:a7:27:d7:8c:e8:88:d7:ec:d8:12:02:b8:b7:80:43:95:b6:
         1c:88:aa:c9:64:cc:5f:95:47:7d:a4:3f:af:8b:68:6a:34:ea:
         54:9f:1d:80:2e:b4:48:94:4e:7b:b6:72:d0:e4:44:90:cc:f8:
         82:b8:36:be:bf:57:ca:e6:0a:45:7f:b7:89:43:8b:9c:91:c1:
         f6:07:a8:ce:34:f3:6f:63:26:02:33:38:66:a7:e9:a0:81:df:
         bd:ab:28:74:70:5c:9f:a8:c3:c2:01:71:8d:58:88:f1:21:01:
         e2:fe:48:6d:fb:3b:98:57:35:7e:95:d6:01:3f:b6:6f:7a:ff:
         03:d1:bb:9c:54:e8:7d:17:82:20:60:82:93:c0:fb:4d:92:ed:
         76:d8:60:5c:af:a1:c2:22:8b:02:ac:7d:86:81:46:ea:50:e6:
         ed:c5:29:e8:c1:38:45:b3:78:0f:45:11:12:31:61:dc:bd:90:
         df:79:29:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 04:24:57 2024 by rpki-client on console-fra.rpki-client.org