Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1b63046d-f519-3f13-a304-7091d7eabb92.roa
File:                     1b63046d-f519-3f13-a304-7091d7eabb92.roa (raw, json)
Hash identifier:          Q/6fonDJDdIn62VS0XUJ7sU6Pqfb/xEj5H2MWICNOiw=
Subject key identifier:   6E:4D:25:D8:46:96:D0:B4:2C:16:91:E4:9D:12:6C:C6:33:3E:D2:98
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F43285845179DD6A9634213829AF43AC0
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1b63046d-f519-3f13-a304-7091d7eabb92.roa
Signing time:             Mon 04 Mar 2024 04:47:41 +0000
ROA not before:           Mon 04 Mar 2024 04:47:41 +0000
ROA not after:            Sun 02 Jun 2024 03:47:41 +0000
asID:                     53727
IP address blocks:        2602:f982:200::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:9d:d6:a9:63:42:13:82:9a:f4:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Mar  4 04:47:41 2024 GMT
            Not After : Jun  2 03:47:41 2024 GMT
        Subject: CN=9625b69a-ce8a-4290-9982-92ac438bab5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0f:84:fa:fa:08:7a:cd:8b:08:24:c0:62:65:
                    fe:1e:aa:2e:93:8a:4b:5c:ce:75:55:ff:e9:4a:05:
                    85:73:02:5d:78:cf:ac:a1:dd:2e:e2:ef:98:b4:43:
                    f2:4a:92:27:0f:9d:d4:45:17:d3:63:4a:a8:ea:b2:
                    fb:e2:d1:ec:43:a4:56:17:9c:ef:c5:08:4b:04:39:
                    0e:fa:c1:48:6c:42:a3:2c:a8:be:6b:1a:07:33:7d:
                    2c:a2:94:ad:58:01:77:91:3a:76:e7:4e:35:ba:d6:
                    65:c6:a2:43:71:16:0d:d0:3b:7e:89:6e:39:2a:48:
                    db:44:10:73:45:12:3c:33:82:54:04:f6:89:36:29:
                    8d:1a:7f:cd:c3:27:31:c8:92:29:dd:c3:99:4d:31:
                    3d:d5:d4:31:12:b6:88:47:0c:50:f5:68:d5:84:9e:
                    b2:70:99:45:2d:e5:64:d5:e6:d5:49:71:ce:d5:82:
                    5a:bb:6a:f3:32:d3:c7:28:66:36:86:cb:86:48:d6:
                    38:86:da:be:5b:46:3f:80:b9:c4:20:d6:19:1c:dc:
                    d1:f7:d9:5b:93:56:bc:94:a1:c4:0c:1e:78:22:4b:
                    85:52:43:5b:81:00:bd:56:8d:a4:40:16:bd:c6:21:
                    00:c7:92:68:cb:9a:7e:5e:3d:c4:e7:a3:7f:f8:4b:
                    b6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4D:25:D8:46:96:D0:B4:2C:16:91:E4:9D:12:6C:C6:33:3E:D2:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1b63046d-f519-3f13-a304-7091d7eabb92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ce:3a:f8:81:bf:91:7a:c6:17:0d:55:e5:d2:42:ff:e9:95:
         2a:d0:d4:82:f8:1c:44:8f:52:57:44:ee:c4:0a:fd:70:17:ff:
         c2:22:38:05:b9:c7:8c:7f:c6:99:fb:3f:7e:dc:f2:0b:5e:87:
         4b:f4:21:9d:83:ad:4b:35:83:3a:39:34:ae:d1:d3:a3:f5:95:
         20:4c:83:1e:9b:e8:3e:e7:12:61:67:be:9b:9a:be:27:ef:de:
         d1:34:83:ce:37:bf:d5:95:df:51:47:18:fd:e3:c7:bf:46:13:
         a3:5e:9a:44:4b:67:40:75:68:19:81:b5:8a:e0:c1:e9:ca:76:
         4b:6d:4e:19:95:5a:71:2b:dd:7c:8c:7c:d0:5e:3d:5a:1c:14:
         3b:34:79:97:eb:6c:91:54:fb:f2:a2:a4:52:b7:b9:ea:2d:74:
         ea:ac:9f:48:bf:7e:56:95:b3:21:46:b2:33:72:32:49:fb:62:
         ff:d1:71:63:0d:36:9b:4d:5f:a9:86:ef:73:b3:0d:db:86:11:
         f2:c6:4a:3c:96:ac:64:b9:71:b2:43:13:f8:59:da:9d:79:2b:
         af:e6:6e:05:ac:e8:2e:db:37:21:08:5b:42:36:1f:4c:57:85:
         46:61:6d:b2:f9:22:0b:be:00:ba:e4:59:40:a2:2d:09:f7:e7:
         88:c7:b8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:53:45 2024 by rpki-client on console-ams.rpki-client.org