Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/b2b26512-6eb9-336f-bcab-4bbf4fa68512.roa
File:                     b2b26512-6eb9-336f-bcab-4bbf4fa68512.roa (raw, json)
Hash identifier:          PYR/D+ox/yI1udXL87qJaeYjVnYmW9qfu3Noiv8zonc=
Subject key identifier:   CB:65:2E:BB:B1:74:EC:A2:AB:36:EA:8A:F2:06:A6:F7:A5:E8:C7:EB
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285845B64E0AA6C31E86C57A848780
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/b2b26512-6eb9-336f-bcab-4bbf4fa68512.roa
Signing time:             Tue 30 Apr 2024 01:00:25 +0000
ROA not before:           Tue 30 Apr 2024 01:00:25 +0000
ROA not after:            Mon 29 Jul 2024 01:00:25 +0000
asID:                     399976
IP address blocks:        2602:80c:20b0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b6:4e:0a:a6:c3:1e:86:c5:7a:84:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 30 01:00:25 2024 GMT
            Not After : Jul 29 01:00:25 2024 GMT
        Subject: CN=d60a1376-d5d1-4c20-8bff-e0490663437b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5f:fe:7e:89:b3:c9:b4:ce:c2:c5:1d:cb:c9:
                    72:4a:a8:e2:57:5f:39:d1:b4:bb:9d:98:ea:e8:40:
                    85:08:81:ef:4c:d1:90:f9:71:00:d2:58:fd:7e:7d:
                    ee:54:00:a6:85:3c:6b:a1:28:de:fb:c4:c8:d2:d8:
                    2e:b7:a6:bb:ea:d6:3b:00:20:b6:6f:30:26:04:3f:
                    02:0a:61:61:b7:47:17:23:d0:51:7f:f1:8d:aa:77:
                    74:20:53:ae:72:b3:3c:11:f1:0e:f0:f1:89:aa:d8:
                    70:b0:ec:95:28:d5:39:9f:58:e1:26:64:d0:d3:f5:
                    f0:1a:92:99:64:1b:d8:88:65:d3:d9:70:7a:24:19:
                    a0:eb:6c:18:7e:86:77:90:3e:96:1e:ef:4e:75:b9:
                    65:21:40:25:c8:88:2a:dc:3e:92:7e:9a:c0:bf:9c:
                    ef:ef:0c:68:bc:67:f5:9f:6f:09:7d:5a:53:dd:c1:
                    bb:ae:54:e1:2b:83:95:a9:47:e1:59:e1:3a:11:ac:
                    fe:35:ca:e4:93:98:a1:68:b6:da:35:79:e8:16:9d:
                    f7:42:6d:83:fd:35:87:c6:20:e7:5a:fe:34:e8:b8:
                    af:32:c1:dc:aa:6a:6e:d4:fb:f7:b3:77:54:33:d6:
                    92:f5:8a:b8:b7:a9:ed:9e:6b:c3:b0:dc:dc:87:52:
                    f7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:65:2E:BB:B1:74:EC:A2:AB:36:EA:8A:F2:06:A6:F7:A5:E8:C7:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/b2b26512-6eb9-336f-bcab-4bbf4fa68512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:74:24:7c:35:96:4e:9a:7a:25:4a:41:52:f7:fa:07:e7:
         a3:24:7d:37:d3:36:78:3a:9b:5b:1d:08:86:9b:40:23:6e:31:
         ec:4f:f0:66:42:2f:fd:3e:0f:8e:4a:68:bf:53:76:c9:e7:37:
         af:f2:dc:0a:28:eb:29:a9:de:a7:33:5b:8c:0a:f0:d8:05:97:
         d7:e4:a7:08:43:bc:c7:63:42:be:d1:46:55:0f:8e:01:f3:05:
         42:67:b7:5f:fc:dc:e1:6f:5d:32:e5:42:97:43:9a:2a:6b:b8:
         0e:bf:c6:e1:ae:2a:19:2d:3c:da:0a:6d:cd:9b:9f:0a:01:2f:
         37:25:56:64:92:59:92:55:e0:47:e2:d8:28:67:ac:cc:d6:52:
         8a:65:85:8d:c3:c8:db:42:b6:ae:17:54:ff:3e:1e:9c:61:66:
         98:1f:3c:03:fd:93:08:05:58:c5:56:46:05:8d:56:eb:41:49:
         99:b0:54:12:8b:33:34:69:85:fe:2f:a2:de:7b:94:12:c2:1a:
         16:e1:8c:dc:f3:35:85:b7:c0:48:ce:7f:99:e1:b3:7a:33:65:
         93:1c:ae:4a:90:a8:fe:22:a3:4b:68:e6:cb:f5:13:81:08:8b:
         60:0f:ff:c6:24:a1:ab:6c:51:20:6e:40:66:b4:59:4e:b2:69:
         68:f9:67:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:33:40 2024 by rpki-client on console-fra.rpki-client.org