Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/fa0b4834-eb01-397d-b065-c91c0aff8fba.roa
File:                     fa0b4834-eb01-397d-b065-c91c0aff8fba.roa (raw, json)
Hash identifier:          ZJadHFH+54k+L8aFrTTo7j+2Ti2yBcndQSOWfGjPecg=
Subject key identifier:   48:65:4E:FF:A9:31:F2:77:37:11:DD:42:F8:85:EF:18:0D:F4:94:CE
Certificate issuer:       /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial:       010D0C9F432858457082FFE332E00246BBA6C280
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/fa0b4834-eb01-397d-b065-c91c0aff8fba.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     32590
IP address blocks:        2602:801:f000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:82:ff:e3:32:e0:02:46:bb:a6:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=6f1109cd-a1e5-4398-968f-c76abe0f56fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:65:58:55:b9:83:a8:5a:69:a0:0d:f5:67:a0:
                    0c:cf:03:70:1b:00:e4:c3:05:38:dc:2e:d9:27:9f:
                    3d:3c:b6:eb:f3:58:aa:60:53:7b:6c:6a:09:88:76:
                    b2:77:93:28:ce:0b:9b:48:3a:12:85:dc:25:66:16:
                    12:6f:f2:96:81:24:39:df:db:3c:93:4e:5e:74:39:
                    77:ea:ff:ee:72:b3:c1:9a:8b:17:45:da:d7:c0:f6:
                    e5:ab:e4:ac:d6:78:a9:dd:51:95:e7:cb:99:64:d3:
                    62:f7:a1:17:c7:80:b2:d6:a1:3f:8e:75:6e:f2:9b:
                    ab:bc:59:3b:13:6c:0e:53:79:09:ce:97:24:c1:ab:
                    48:f8:5e:e1:9a:2a:d7:30:54:8e:14:03:4a:7d:0f:
                    62:a9:24:19:fc:0f:65:17:59:0e:28:b3:45:2a:6d:
                    a3:1c:65:22:25:d1:42:60:ee:5f:20:3a:ac:4e:71:
                    8b:50:38:10:08:9b:b6:78:83:26:87:f1:c9:ca:9b:
                    ee:ad:73:80:e9:c1:98:4b:81:c5:a4:ec:91:7f:3c:
                    1b:79:34:f8:93:a0:ae:bd:74:b3:3f:91:53:7b:c8:
                    71:df:b1:04:da:50:a3:34:17:6d:3e:c7:e5:96:98:
                    25:6c:16:6e:5a:88:08:bd:78:6d:69:45:66:63:3f:
                    01:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:65:4E:FF:A9:31:F2:77:37:11:DD:42:F8:85:EF:18:0D:F4:94:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/fa0b4834-eb01-397d-b065-c91c0aff8fba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:801:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:18:12:0b:05:00:e7:ab:81:0d:ef:e8:3a:77:73:95:58:99:
         22:9d:6e:64:e3:be:15:eb:b9:a9:97:cc:b9:7e:0e:0d:69:58:
         17:0c:50:91:e3:ff:2d:16:f2:87:1f:60:d7:c2:c2:8b:ce:ff:
         a8:c6:22:50:ca:88:0b:73:6d:c9:e5:0b:df:9f:db:be:ca:b0:
         cb:65:68:d3:ac:5a:38:e2:a5:d2:42:4f:3f:fb:cb:7f:1f:ab:
         71:46:9e:df:60:70:07:9d:14:91:b0:2f:ec:65:92:40:c8:40:
         a0:55:38:be:b1:09:99:71:40:ec:b7:f4:db:5a:d5:11:ba:92:
         3f:dd:b8:07:19:a1:f2:31:28:46:7a:2e:8f:4c:b2:e5:f6:b1:
         55:67:cf:51:a4:6e:9d:52:19:a7:6f:35:33:02:15:97:de:a5:
         7d:ea:36:10:b9:f2:24:d1:77:63:9e:be:14:2f:3e:53:22:5b:
         6c:63:98:c3:f6:e2:00:28:ea:3d:c9:f2:a3:59:ee:ab:a9:5b:
         60:09:e6:52:58:32:3c:3b:e3:53:a9:9b:97:60:2a:03:d0:8e:
         5d:6c:40:bb:6c:c6:4b:aa:52:37:b8:eb:53:50:ec:46:5b:b7:
         08:7f:d1:38:60:90:f4:85:54:73:67:0a:34:40:09:83:2a:63:
         9e:c3:cc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 00:36:38 2024 by rpki-client on console-ams.rpki-client.org