Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/85808809-8170-32c7-874c-dec27c04278c.roa
File:                     85808809-8170-32c7-874c-dec27c04278c.roa (raw, json)
Hash identifier:          gvY8w3+RoZxHi2dpzq/w+eNL2Sp+dxq1uYXOvaJk22I=
Subject key identifier:   A6:39:8F:5E:55:DC:17:DC:A6:4A:84:98:09:0D:DA:C4:14:F4:E2:A0
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285844FC2A679F7CCADAC763273840
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/85808809-8170-32c7-874c-dec27c04278c.roa
Signing time:             Fri 23 Feb 2024 08:48:17 +0000
ROA not before:           Fri 23 Feb 2024 08:48:17 +0000
ROA not after:            Thu 23 May 2024 07:48:17 +0000
asID:                     399976
IP address blocks:        2602:80c:20f0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:2a:67:9f:7c:ca:da:c7:63:27:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Feb 23 08:48:17 2024 GMT
            Not After : May 23 07:48:17 2024 GMT
        Subject: CN=487e54c8-76b6-4090-9bd4-406c0944a13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:ea:37:fb:82:c0:f0:fa:77:3b:21:67:7e:
                    a0:02:4a:48:79:5b:20:57:8f:87:27:e9:96:f9:b6:
                    b4:8a:a6:87:8c:74:85:27:cf:dc:78:59:1a:56:9f:
                    14:d8:9a:9c:36:e7:c3:da:13:a6:04:fa:5c:4e:06:
                    5d:8d:a5:a7:af:a4:56:bf:23:05:9e:f4:2a:a2:44:
                    d4:40:8c:05:e4:4b:cb:5d:9e:98:c8:2b:82:15:04:
                    9b:21:2a:bd:38:5a:20:a8:d0:ab:2b:74:2b:67:08:
                    7e:a3:e8:c1:bf:44:2e:a2:01:45:b3:de:93:e5:d6:
                    81:91:0b:73:57:44:32:0b:17:49:3b:b8:5c:8e:43:
                    9b:56:e8:40:bd:6d:2e:c3:28:61:68:19:e7:33:d4:
                    a3:e7:03:7a:be:ba:53:3a:8f:62:17:d3:35:7f:b7:
                    b5:da:eb:e2:6a:59:af:51:d5:5e:f8:3e:10:a9:d4:
                    13:82:ab:e5:6c:0e:f7:18:d9:5a:86:96:e2:7c:7e:
                    71:8b:4a:fc:06:69:e8:b9:3d:73:58:11:87:a6:be:
                    3a:5c:ce:02:ce:47:6c:e7:4b:d1:b2:8d:ad:a6:2b:
                    84:16:7e:92:97:95:96:65:1b:7e:90:2c:0e:70:23:
                    eb:f6:01:79:37:77:55:da:55:5f:45:a0:52:2d:dc:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:39:8F:5E:55:DC:17:DC:A6:4A:84:98:09:0D:DA:C4:14:F4:E2:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/85808809-8170-32c7-874c-dec27c04278c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:74:a2:03:ef:5e:13:10:e9:33:4d:b0:06:6b:88:9c:76:44:
         db:39:96:85:cd:6b:0f:45:4d:f2:25:4b:37:ed:29:c2:98:4b:
         6a:0c:ea:c2:09:00:94:e9:59:34:4e:cb:1e:0b:fc:5f:98:d8:
         9f:d7:67:4e:86:e4:ff:08:94:ea:e1:9c:2a:c5:d2:3a:8f:70:
         e6:cb:50:44:05:ba:84:e6:cb:6c:12:b7:84:23:09:df:18:93:
         54:cd:e5:90:4f:de:57:92:44:8d:8b:d9:72:6e:b7:cd:39:16:
         19:69:19:a5:d7:31:70:b0:46:c8:4e:34:3d:4f:4d:f0:17:6e:
         f3:ee:22:b9:2e:13:77:3c:a7:bf:5b:d8:8f:80:2d:c9:af:be:
         f4:d0:86:81:30:28:0e:58:4f:e8:72:77:31:a9:1c:a3:97:14:
         83:0c:e1:df:3a:82:fe:77:0d:0d:bd:1f:ad:ff:ec:ab:a6:35:
         e2:c8:3b:a7:b8:6a:11:55:de:78:88:1c:00:f1:07:ce:ab:51:
         27:3a:5a:ac:79:38:5d:66:27:2f:90:5d:5f:02:f6:e9:3c:10:
         f8:31:77:b7:8d:0e:94:db:bd:f3:29:8f:9e:e7:5e:c2:1c:cb:
         8c:d2:19:8b:75:bc:5a:b1:a7:c8:1e:46:d4:0f:66:2e:63:82:
         ed:57:e7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:20:36 2024 by rpki-client on console-fra.rpki-client.org