Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/71166f8b-74ef-3d7d-ad66-9a703f27b048.roa
File:                     71166f8b-74ef-3d7d-ad66-9a703f27b048.roa (raw, json)
Hash identifier:          qyw2WDkAx3evZaV0+TMIE9ajAeF01oJ9vvmkffJC1OI=
Subject key identifier:   66:D5:1F:FD:FB:E5:AE:77:A4:A3:FE:32:88:B5:A9:B9:F7:A3:BA:5A
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285845B4E8C9546BBB4DF5462A1580
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/71166f8b-74ef-3d7d-ad66-9a703f27b048.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:2030::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:c9:54:6b:bb:4d:f5:46:2a:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=85198502-2d0b-4292-8764-f2b5ce7d816a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:43:c8:a2:90:23:fc:d2:8f:8b:fb:f8:e5:
                    98:47:18:fd:1b:4a:a7:60:f9:e2:62:78:f4:83:1c:
                    d2:7d:38:6d:29:e3:cf:51:9b:38:49:05:b2:de:54:
                    af:12:a9:28:29:93:02:30:3e:25:00:9f:33:94:bf:
                    cf:e1:30:21:7f:68:33:9c:76:75:67:6c:57:ad:66:
                    e0:61:54:7f:15:cd:4a:09:11:4d:a7:16:ad:73:03:
                    41:f2:ba:e5:17:83:27:38:64:2d:3a:85:5d:f8:c4:
                    67:ec:cd:00:d7:aa:b7:32:ed:e7:2a:b2:24:0c:a1:
                    a8:64:54:82:f0:f2:1d:c3:e1:15:7c:e5:85:c5:6b:
                    3a:b4:46:7d:3d:a4:21:df:69:e9:fd:15:59:f5:02:
                    7d:88:42:b5:29:b0:e5:25:50:15:8d:6b:22:2b:1d:
                    ab:7c:2d:48:b5:82:4f:0e:c1:48:5a:93:b1:52:00:
                    92:da:92:25:4a:81:d9:ca:0c:07:59:2f:f9:e5:da:
                    65:43:5a:8c:9e:bc:1d:87:c2:0d:fe:ad:01:12:e4:
                    d1:03:df:e4:cd:c6:bd:3f:d1:99:35:c9:8b:59:0b:
                    c5:dc:94:7f:8c:db:da:4b:a7:03:63:6b:0e:44:14:
                    e3:50:fc:24:15:66:3d:fd:00:90:2a:45:d9:2b:80:
                    b4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D5:1F:FD:FB:E5:AE:77:A4:A3:FE:32:88:B5:A9:B9:F7:A3:BA:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/71166f8b-74ef-3d7d-ad66-9a703f27b048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2030::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ef:06:53:a0:b4:b9:3d:5b:d9:75:e8:84:01:74:87:8a:56:
         ab:1a:e2:74:40:95:6e:a8:a5:fd:a5:4a:59:b2:ad:df:04:b2:
         32:ba:cf:78:e4:c6:f7:83:33:c0:26:8a:34:53:9f:14:98:10:
         71:1d:35:1f:d1:12:2f:d4:45:e1:1d:b4:5f:75:16:6f:53:de:
         ae:e9:22:6a:bd:15:56:53:30:90:f3:bb:a4:2f:05:d1:04:98:
         2c:c5:e9:ee:b9:00:1f:ed:f0:59:f0:96:95:0b:a4:57:d3:43:
         41:b4:51:58:a1:06:08:14:c0:56:05:4d:99:41:e2:68:76:48:
         d4:13:84:34:97:ff:21:2e:e3:1d:b6:f6:80:8d:d9:c2:df:f0:
         46:6b:37:32:49:b8:58:bf:0c:49:6e:ff:40:a3:66:8f:f4:f1:
         bb:ad:17:5c:1f:9f:ce:41:c6:4f:50:d9:a5:a3:c3:fe:82:ab:
         7d:94:02:dc:24:75:aa:b1:45:8d:69:64:83:9b:b4:5f:69:59:
         ea:57:c2:e0:19:17:24:f0:78:c8:38:85:1d:f7:44:6d:ba:87:
         24:cd:62:ff:3d:bc:8f:fc:38:e6:c3:29:f2:bf:f8:b0:9c:87:
         37:92:c5:f6:51:24:4f:4e:c1:5a:aa:27:7c:71:98:a5:52:c6:
         a7:f9:11:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:05:42 2024 by rpki-client on console-fra.rpki-client.org