Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/7882e108-4ef5-3061-a1a1-c9b1c26f0716.roa
File:                     7882e108-4ef5-3061-a1a1-c9b1c26f0716.roa (raw, json)
Hash identifier:          9T/1+lik3uVYlx3UbXebLRCgTfWpP/fJdcVPvUPXzjo=
Subject key identifier:   F7:DF:10:0A:FB:32:04:F8:2B:8F:AD:A0:C9:B0:27:87:E2:A3:35:B0
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285845B64E0B7F0C1AD99BEBA95700
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/7882e108-4ef5-3061-a1a1-c9b1c26f0716.roa
Signing time:             Tue 30 Apr 2024 01:00:25 +0000
ROA not before:           Tue 30 Apr 2024 01:00:25 +0000
ROA not after:            Mon 29 Jul 2024 01:00:25 +0000
asID:                     399976
IP address blocks:        2602:80c:20b9::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b6:4e:0b:7f:0c:1a:d9:9b:eb:a9:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 30 01:00:25 2024 GMT
            Not After : Jul 29 01:00:25 2024 GMT
        Subject: CN=43d1a735-af76-4083-b8f3-bbbddc9ba537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:bd:c9:cd:d9:d2:55:73:be:b5:f8:af:3c:
                    8d:1c:17:30:c0:16:d5:5b:98:48:84:63:1c:72:32:
                    20:38:c3:98:fd:2d:33:36:d1:6a:c3:d6:83:45:22:
                    cf:57:1b:f8:1e:7f:db:73:ec:f9:10:96:36:62:4e:
                    ad:b0:e6:ef:04:43:ef:1b:ce:7c:87:9f:45:c6:9f:
                    62:ee:55:0a:58:c8:00:0f:4f:92:4b:c0:cb:a6:d0:
                    07:46:63:5d:88:56:cb:6b:07:a2:30:3e:a5:5f:ee:
                    72:0d:12:87:dc:59:84:76:19:c5:ac:48:52:df:e7:
                    95:87:91:30:24:e5:58:1e:50:6b:42:c1:90:55:cd:
                    5e:71:4a:a5:df:5e:91:ea:49:20:ec:63:83:1c:9c:
                    b3:7a:f9:07:04:ac:47:88:1d:a0:98:59:82:69:77:
                    22:ce:31:29:c5:50:74:99:ab:b7:e0:1d:03:36:e0:
                    c2:22:61:2d:04:48:f6:f8:b9:d4:cf:bf:72:39:37:
                    ba:bf:93:ba:29:73:5e:65:5a:82:a4:a8:55:60:0f:
                    2d:cf:e1:0b:b6:23:58:55:39:90:cc:20:8f:74:0d:
                    fb:b0:d7:22:6b:8b:84:bd:c6:eb:c5:1f:bf:63:59:
                    64:9c:50:0e:15:09:93:ec:6b:06:9a:5a:ca:bd:76:
                    dd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DF:10:0A:FB:32:04:F8:2B:8F:AD:A0:C9:B0:27:87:E2:A3:35:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/7882e108-4ef5-3061-a1a1-c9b1c26f0716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20b9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:17:e6:80:5e:0c:ca:43:bd:3c:84:33:89:56:fc:6a:46:38:
         c6:03:5c:1d:1c:bd:09:3b:cc:df:43:77:cc:cd:67:df:00:45:
         a9:c2:70:69:a5:47:bc:00:dc:a6:65:ea:db:34:91:1d:42:c2:
         3e:3b:75:99:6e:1d:b1:d3:61:6b:50:7d:48:54:0f:5e:85:38:
         89:da:de:c3:48:6d:cd:7e:7a:43:55:d7:60:d2:3d:53:25:00:
         ad:fa:68:71:d8:40:47:96:a4:13:66:c8:1f:92:90:07:26:4f:
         bf:87:a2:10:42:63:61:80:e2:f7:1e:d1:fc:d5:e0:4f:8b:8d:
         00:b7:5c:aa:eb:fb:e5:59:0a:6d:f9:4f:2c:40:8e:0f:37:5b:
         d7:0b:56:ec:9d:89:e2:f1:ea:bf:93:0c:18:ff:0e:5b:ea:cd:
         f4:53:30:c1:9f:73:fe:5a:f8:94:7a:9d:d6:43:af:5d:e2:b6:
         fd:b6:be:85:bf:bd:60:5a:d6:b0:a8:d9:0c:21:1c:ea:e7:68:
         1c:4e:f3:43:5f:40:61:81:68:f3:c6:b5:69:77:97:14:66:78:
         ea:80:70:36:2a:1a:ad:ff:ed:e5:fa:bd:7c:9b:f7:17:de:1a:
         aa:b0:c1:68:fe:15:4a:f7:16:44:b1:c7:c6:89:d6:3e:28:87:
         3a:af:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:05:42 2024 by rpki-client on console-fra.rpki-client.org