Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/cceb834d-6b62-3186-a463-5dbcb9ade471.roa
File:                     cceb834d-6b62-3186-a463-5dbcb9ade471.roa (raw, json)
Hash identifier:          zYZ6Tz/1H7m8W60c5O4H1kaXUn6ghPWn8JTm/2UwuE0=
Subject key identifier:   0A:AD:F0:9D:BC:04:DF:87:A9:B5:6D:7A:29:4E:75:0D:38:75:2E:81
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285845B4E8CC0B6907F6498823ED00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/cceb834d-6b62-3186-a463-5dbcb9ade471.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:204b::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:cc:0b:69:07:f6:49:88:23:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=606cd1a5-06aa-476a-b8bf-f9e935d6629c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:1d:50:29:ae:9d:de:46:0b:ee:3e:bb:51:
                    b5:6e:8b:c8:9f:13:f7:58:76:f3:ff:2d:9c:2f:0c:
                    05:dd:10:db:c3:c8:d4:e5:67:d8:6f:2b:86:79:46:
                    47:90:c7:e9:26:3c:67:96:95:fe:17:78:cf:83:33:
                    6e:90:de:c1:fd:87:34:7d:91:64:b2:4e:a3:5a:a8:
                    f7:64:88:0f:0a:33:bc:8c:bd:e6:84:85:78:8d:99:
                    20:36:0f:5d:39:96:d9:08:81:8e:28:69:f6:93:54:
                    2d:53:38:39:6f:fb:62:cf:48:e9:5c:d1:33:03:d2:
                    78:ea:56:59:54:34:84:1e:12:7f:99:d1:6d:0c:34:
                    5f:1d:ef:ba:2d:71:28:53:e2:36:60:ed:bb:5a:1c:
                    66:f4:d4:47:b0:1e:d5:3f:c1:23:e1:64:cf:a7:54:
                    5e:93:c6:4e:16:b0:5f:cc:f6:05:47:d4:83:f2:20:
                    26:71:c9:07:e3:9b:4c:47:f6:9e:e3:14:49:46:b3:
                    98:14:94:a8:83:bd:96:30:72:93:a4:4e:c4:a4:1c:
                    f1:0b:d4:e4:6b:23:4a:95:c8:a2:9c:7e:4d:12:96:
                    4a:22:43:28:d8:7c:5e:8a:80:bd:90:c5:39:67:5c:
                    dc:83:f1:5d:a2:fe:67:69:19:4b:cc:7c:c3:01:c0:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AD:F0:9D:BC:04:DF:87:A9:B5:6D:7A:29:4E:75:0D:38:75:2E:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/cceb834d-6b62-3186-a463-5dbcb9ade471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:204b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:27:69:e6:58:86:10:f9:b7:f2:27:14:76:36:ee:75:41:49:
         75:a4:77:33:2c:23:fe:79:3e:ee:25:e1:bc:61:b0:10:0d:24:
         c4:99:f4:c3:c8:8e:31:c1:85:c9:f3:6c:e1:6c:9c:f3:10:1e:
         a5:e0:0f:28:89:51:3f:6d:32:27:5b:89:ff:76:d3:c2:78:df:
         ad:d8:9c:d0:10:75:2c:d5:23:a8:c5:cc:e6:91:e9:0e:7d:13:
         e9:fd:e2:10:6b:8c:ca:29:7a:c0:f4:5d:9e:d0:4b:1c:14:6d:
         eb:35:06:ed:6c:68:c0:cb:34:70:3b:7d:6d:c6:74:1f:cd:82:
         db:07:db:4f:cf:32:e2:b7:d6:43:bf:94:e7:51:c8:1d:e2:fb:
         b9:30:ca:4b:95:33:cb:7d:59:84:78:13:4b:f4:69:1b:d9:a7:
         25:28:f0:ee:8c:ef:50:e1:7c:ef:04:2e:c8:85:34:75:4a:38:
         7c:c1:be:eb:a8:52:53:dd:38:73:f0:65:bf:9e:b7:43:ef:14:
         ee:bf:25:fa:d4:57:b6:4c:71:9e:57:ff:92:57:54:e5:6c:7a:
         75:70:0d:85:c0:51:72:9b:26:0c:64:18:87:0b:5a:b1:0e:49:
         71:a2:dc:c4:08:9e:cc:8a:d1:dc:3b:51:60:ef:c1:b9:ef:d9:
         d5:e5:9e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:03:06 2024 by rpki-client on console-ams.rpki-client.org