Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/5af69910-53d7-36e0-bea9-9105b0772848.roa
File:                     5af69910-53d7-36e0-bea9-9105b0772848.roa (raw, json)
Hash identifier:          IzZv/Y+5fYd1+WqwS5Eg8KHLSJKX49zwvlnCB7I308I=
Subject key identifier:   DB:13:F9:FA:AF:8E:22:92:47:5A:64:73:DE:94:B0:1E:98:9D:30:C2
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F43285845F3B91A6757CF9BBA395C4500
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/5af69910-53d7-36e0-bea9-9105b0772848.roa
Signing time:             Wed 22 May 2024 01:00:27 +0000
ROA not before:           Wed 22 May 2024 01:00:27 +0000
ROA not after:            Tue 20 Aug 2024 01:00:27 +0000
asID:                     53727
IP address blocks:        2602:f982:10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f3:b9:1a:67:57:cf:9b:ba:39:5c:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: May 22 01:00:27 2024 GMT
            Not After : Aug 20 01:00:27 2024 GMT
        Subject: CN=fcb89980-814e-4fff-94c9-e4507569fd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:fb:e0:4e:57:64:5f:49:b9:bf:60:c4:af:
                    18:5e:09:68:6d:15:e5:6d:22:83:d1:d6:49:36:ae:
                    5d:f5:78:29:a9:9d:16:eb:de:1c:1a:2e:67:ac:55:
                    fa:c1:c2:d9:4b:ae:f7:89:9a:f9:57:fd:0f:4b:0d:
                    ef:5f:33:ca:29:7a:76:08:9f:49:f2:38:11:49:98:
                    9c:95:aa:0b:a5:51:59:5e:7b:5a:62:41:00:6d:42:
                    b2:2f:ca:26:5b:22:09:fe:92:13:ca:97:da:b8:f3:
                    df:3d:a2:14:9c:1e:a5:09:56:4f:d7:39:ef:34:c0:
                    1f:b5:fa:78:f8:ab:71:69:54:62:7f:9a:26:d0:16:
                    43:ec:b1:01:e1:de:bc:27:13:bb:43:13:54:a6:c9:
                    a7:dc:b1:11:0e:56:60:e1:6d:c6:be:2e:88:fe:7e:
                    98:d7:90:bb:45:33:3c:c5:ad:f2:e6:ed:d7:4e:86:
                    c3:f6:f9:f1:35:bb:ec:e1:6f:1d:59:0d:b1:40:fc:
                    36:45:39:8e:99:8e:dd:00:44:05:60:48:a3:62:d7:
                    cf:ef:33:10:00:d0:96:68:40:26:d7:d6:fe:25:c6:
                    fc:f6:f2:e8:7b:6c:50:cf:e7:10:22:a3:0d:3d:d2:
                    9b:75:89:3f:25:cf:52:53:da:76:5f:2e:ee:54:02:
                    31:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:13:F9:FA:AF:8E:22:92:47:5A:64:73:DE:94:B0:1E:98:9D:30:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/5af69910-53d7-36e0-bea9-9105b0772848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:de:c9:4a:51:5c:c1:63:35:a8:ac:29:86:ce:bf:2e:b1:27:
         bf:25:cf:6f:dc:06:81:c2:05:f9:1a:d0:42:ff:6f:02:f2:fe:
         db:06:a7:a0:9f:cf:d5:ff:ac:4d:ea:39:49:af:a2:2c:d4:14:
         db:bb:b0:06:48:e3:d3:4f:08:5f:77:59:66:0e:f0:b3:94:2c:
         df:49:c6:ac:0a:cc:df:bb:f8:7f:61:7c:72:ed:18:f6:3e:1a:
         81:ef:0b:fa:9d:82:46:b7:a3:31:05:c3:00:da:0f:47:11:92:
         db:79:39:41:b5:68:de:8d:35:fb:09:34:28:37:50:19:6e:0d:
         50:2e:57:d0:31:c1:04:5a:8e:81:a6:e8:8d:fd:19:09:43:f8:
         33:fe:e3:08:46:b9:4d:f1:e0:b4:33:04:2b:ef:48:29:36:b8:
         d7:24:af:9c:59:bc:28:a2:d9:90:e0:fb:dd:eb:70:e1:5d:3c:
         37:d4:71:ec:82:ed:09:1f:0d:3b:96:e6:bd:58:20:0c:74:a8:
         64:ce:3a:f0:41:dd:e3:d5:6e:2f:cc:d5:2a:bc:88:0a:b1:40:
         e5:0f:59:ca:4b:ce:6b:15:65:87:5a:ef:55:76:03:2c:01:ad:
         18:2f:dd:8a:cb:1c:31:a7:aa:68:62:3e:c8:32:72:13:26:7c:
         b8:91:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 23:58:36 2024 by rpki-client on console-ams.rpki-client.org