Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/afe349cc-106e-318c-978e-b94817278f78.roa
File:                     afe349cc-106e-318c-978e-b94817278f78.roa (raw, json)
Hash identifier:          i/LeLaTZdaMYlgnKD85N9DTK6PVIa9WrI0cj9uj5fCE=
Subject key identifier:   61:8E:97:51:E1:90:C0:A6:49:95:32:79:AB:4C:3C:2C:1C:35:12:E4
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285845B4E8C67B49C7603343615E80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/afe349cc-106e-318c-978e-b94817278f78.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:201d::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:c6:7b:49:c7:60:33:43:61:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=85850665-b166-48f1-bfb5-acaa31d355b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c6:86:56:88:eb:4d:e3:e3:2a:06:70:18:3c:
                    7f:d6:c6:76:fb:45:0b:f7:34:ef:ad:f4:f5:23:ec:
                    c5:6e:f0:35:19:88:31:02:d7:10:a0:13:e5:f3:cc:
                    7b:52:9c:2d:7e:3c:a1:b4:cf:42:71:46:5c:26:7d:
                    f9:45:43:ea:32:e8:27:06:d0:b9:21:93:7b:df:4a:
                    a2:c6:9a:0c:36:2a:c9:01:f5:d9:b2:e8:f2:eb:f5:
                    01:54:9c:fb:73:50:6d:57:9c:38:a3:49:67:c9:df:
                    dd:cd:31:54:8b:ae:2a:ba:8b:f8:0d:04:93:93:a4:
                    00:c9:a4:eb:53:a3:47:f1:ca:76:b9:18:2a:ea:91:
                    0a:c5:ef:63:ed:92:ee:6d:db:01:bd:9b:44:51:4d:
                    fa:1a:64:9d:dd:fa:40:c4:1b:33:a0:7c:a7:28:9d:
                    56:57:ea:3c:34:19:93:c4:86:25:65:11:05:91:33:
                    90:a3:22:66:f0:9d:aa:f5:2b:d3:96:5e:ab:b2:b6:
                    e7:af:97:10:98:f6:a5:2b:e7:5d:c3:ae:d7:b9:91:
                    ad:c2:5a:8c:f8:ca:89:1e:fb:45:d6:78:9c:d0:29:
                    91:18:e7:4e:82:d1:ba:d2:6a:25:98:31:23:89:e1:
                    4e:46:fa:b8:d1:9f:0b:59:47:55:90:e5:86:b0:3e:
                    6c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8E:97:51:E1:90:C0:A6:49:95:32:79:AB:4C:3C:2C:1C:35:12:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/afe349cc-106e-318c-978e-b94817278f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:201d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:4f:59:8f:46:e1:e5:85:0b:ec:4a:48:62:bd:34:08:21:e9:
         97:3c:5e:09:23:f1:16:19:9b:2e:11:cd:97:f8:a9:5d:5f:19:
         08:89:72:2b:de:db:94:10:0f:7e:a8:a4:8b:17:d5:fd:84:41:
         4a:61:db:d9:e3:3b:ca:18:9c:29:d7:11:a6:e6:02:8a:37:d9:
         08:05:ba:b0:2b:fa:e5:6d:98:08:a9:7e:fe:f5:5c:e1:93:b7:
         59:b2:e1:c4:55:e1:2e:a8:9a:22:66:9a:87:97:31:a6:24:e6:
         a9:ad:ce:25:ea:81:bf:8f:7e:2d:6e:92:d2:ac:9f:c1:32:11:
         a6:04:c7:de:8b:fe:c7:db:79:44:a6:c5:2e:36:38:fb:b6:14:
         bc:fd:10:5e:d4:69:a1:a8:38:d1:5f:f9:56:2c:18:d6:1a:02:
         72:5f:9f:2a:46:e4:8a:bc:8a:c5:28:10:ed:af:a7:e3:da:80:
         c0:3f:a0:97:af:55:4c:41:83:aa:77:22:72:9b:3d:67:84:7b:
         03:8f:84:50:e4:35:75:70:de:ef:bf:83:fb:88:d1:34:8b:bd:
         f0:fe:81:79:89:1e:c8:e8:3c:70:8b:cf:a9:91:1b:9f:70:43:
         4d:fc:a9:3b:be:ef:5c:fb:a6:c3:be:59:32:f2:3d:f6:57:92:
         9d:87:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:49:30 2024 by rpki-client on console-fra.rpki-client.org