Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/84c22fe6-f72b-38f7-b78f-ea8887b4eef9.roa
File:                     84c22fe6-f72b-38f7-b78f-ea8887b4eef9.roa (raw, json)
Hash identifier:          tMqroWzcH7bRuki0p1Jb2Yqapw86Kx79TrwXHXYKVXI=
Subject key identifier:   84:F4:BC:A8:89:D1:E0:60:B1:E0:22:9B:CB:BB:E7:1F:0E:79:30:09
Certificate issuer:       /CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
Certificate serial:       010D0C9F4328584536CD357C479256C342052F00
Authority key identifier: 95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/84c22fe6-f72b-38f7-b78f-ea8887b4eef9.roa
Signing time:             Fri 15 Mar 2024 08:53:12 +0000
ROA not before:           Fri 15 Mar 2024 08:53:12 +0000
ROA not after:            Thu 13 Jun 2024 08:53:12 +0000
asID:                     396073
IP address blocks:        2602:f947::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:36:cd:35:7c:47:92:56:c3:42:05:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
        Validity
            Not Before: Mar 15 08:53:12 2024 GMT
            Not After : Jun 13 08:53:12 2024 GMT
        Subject: CN=0a93f3b4-0c84-456f-bf2e-2520aabc4b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:70:9b:26:bf:98:2a:c1:6a:c8:93:0e:10:
                    f8:10:ef:de:9b:d4:46:84:9f:73:a0:8c:35:00:79:
                    7f:4d:04:31:a2:5f:e2:40:a7:67:fe:17:1d:2d:f3:
                    28:0c:17:64:ee:7c:09:91:83:c4:94:80:8f:7c:2e:
                    0d:40:09:43:37:c1:2e:aa:86:32:89:3e:47:2a:64:
                    b3:ea:7d:ea:c4:cf:73:0a:bf:48:1b:1c:a5:c6:53:
                    22:1b:ec:ee:29:33:1f:a7:95:a8:06:63:da:4e:66:
                    7c:35:52:81:cf:b7:b6:7f:ef:b2:ff:69:ff:44:65:
                    c4:68:64:06:f2:5e:60:4e:43:47:bb:16:33:60:76:
                    5c:96:78:f0:f5:9a:72:bb:62:4f:d5:0b:60:bb:12:
                    c3:c6:68:14:38:19:2d:43:d0:b1:fe:e9:7e:00:e3:
                    bc:34:15:ef:5d:52:16:79:14:b8:44:7a:e6:79:1f:
                    2d:7b:1d:a6:f5:62:33:23:b0:bd:67:ef:13:da:a1:
                    21:d8:b9:b1:99:da:ed:06:86:08:5f:ab:d6:dc:b6:
                    88:0e:f0:8c:40:7f:7a:32:2b:c9:c5:4e:2c:15:9b:
                    f7:6e:ba:60:2e:06:fd:96:4f:62:0e:ea:aa:0b:60:
                    38:d4:3d:07:17:8b:5e:a2:73:5c:2f:96:38:1f:c1:
                    20:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F4:BC:A8:89:D1:E0:60:B1:E0:22:9B:CB:BB:E7:1F:0E:79:30:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/84c22fe6-f72b-38f7-b78f-ea8887b4eef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl

            X509v3 Authority Key Identifier:
                keyid:95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f947::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d9:ce:9a:20:d2:36:a2:c8:da:30:e5:e4:b8:1f:a3:ba:66:
         62:74:2f:92:19:d9:09:e2:36:aa:5b:2d:21:e6:56:35:f2:ad:
         19:6e:a9:32:35:cb:d0:35:ab:ce:d3:47:20:ef:20:3e:cf:0b:
         46:73:5a:13:19:29:8f:8c:b1:ea:27:d4:c9:7b:e5:b5:53:24:
         4d:da:b1:14:a1:3a:c8:8e:9c:97:4a:84:78:3d:e2:85:2d:91:
         f5:56:fa:60:5c:fb:b7:98:8d:9d:df:93:09:f3:dd:0c:59:9b:
         88:4b:6d:af:ea:c2:4f:65:9d:b1:40:83:3d:6d:c3:6c:29:37:
         7b:3f:89:61:ec:85:00:6f:02:b6:7d:7e:68:ae:61:75:e3:b7:
         14:08:fd:51:39:7d:b6:19:8e:27:08:2d:71:b0:0b:2d:89:50:
         d6:41:43:43:96:df:41:3e:2c:66:80:1a:20:a1:6e:8f:bf:f7:
         fd:9b:5b:38:37:05:43:6c:a4:c4:df:ff:6e:44:a7:41:35:5b:
         b5:f5:a1:22:f5:25:c4:dd:81:6a:dc:97:1a:ea:48:3c:a7:be:
         9e:eb:67:0a:b3:2c:29:ed:12:b9:b0:f8:e5:82:67:1f:56:1c:
         f0:31:cb:3a:a5:72:d7:e7:1c:f7:5f:95:44:1c:a6:94:88:0f:
         57:31:0f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:25:33 2024 by rpki-client on console-fra.rpki-client.org