Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/0092ac2b-5291-3213-961f-46693932424a.roa
File:                     0092ac2b-5291-3213-961f-46693932424a.roa (raw, json)
Hash identifier:          LoqLxqs5IvaFOtIMsdowe0m5XBq9PlkFS0v7M8sVg20=
Subject key identifier:   A4:38:EF:58:41:A5:93:0B:AA:DE:92:DC:01:08:E7:5F:0C:9B:20:5F
Certificate issuer:       /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
Certificate serial:       010D0C9F43285841E46D37B184A813633E173300
Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/0092ac2b-5291-3213-961f-46693932424a.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Tue 20 Jun 2023 23:03:26 +0000
asID:                     400312
IP address blocks:        2602:fbf0::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 May 2023 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:37:b1:84:a8:13:63:3e:17:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 20 23:03:26 2023 GMT
        Subject: CN=14c83ba3-512b-4f2a-94fc-73e4b38c48b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:f7:82:57:fa:6c:5f:77:56:70:a3:f5:85:
                    1b:e8:bc:7b:cd:82:57:31:4c:9b:24:86:4c:c2:e7:
                    b3:21:cd:1b:c9:c9:47:c8:9e:f4:e2:c0:e9:87:11:
                    bf:e6:50:e1:47:26:23:a2:4c:e6:be:d8:77:56:5c:
                    cc:00:4d:63:a0:7e:5d:33:f1:1d:d7:07:ee:08:c1:
                    84:6d:aa:54:5b:13:e0:f9:16:19:ac:59:54:31:16:
                    11:66:8e:32:84:ce:30:a8:a0:25:db:1c:7a:ef:38:
                    26:d7:62:d4:5f:98:d1:9d:20:10:e8:ab:db:29:68:
                    aa:7d:ba:32:75:1d:92:e2:d4:47:15:59:3e:63:e4:
                    4b:8e:ab:de:15:d2:f3:b6:4a:6f:6d:e0:a1:5d:5b:
                    82:6a:37:68:36:d2:30:3e:14:3b:91:d4:b9:85:20:
                    07:ee:d0:86:ad:d4:cd:6b:31:44:45:71:75:35:c3:
                    08:7c:21:fe:7e:51:8e:be:97:31:05:c9:ce:f9:e2:
                    4d:3a:4d:e2:16:aa:95:97:0a:a4:de:97:0a:69:20:
                    7e:dc:a5:91:18:d1:53:7f:6c:36:a6:bc:74:a1:26:
                    c0:00:80:ca:ef:d5:97:05:6b:71:f4:61:f6:30:0f:
                    39:be:e7:9e:f6:ff:1e:7d:02:93:f7:02:40:57:df:
                    94:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:38:EF:58:41:A5:93:0B:AA:DE:92:DC:01:08:E7:5F:0C:9B:20:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/0092ac2b-5291-3213-961f-46693932424a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl

            X509v3 Authority Key Identifier:
                keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:71:0e:1f:7e:a3:1d:b2:69:65:12:33:82:56:43:e4:e2:b4:
         8a:1a:29:59:26:2c:ed:c7:af:6b:21:a4:d4:f3:05:68:e8:e5:
         15:f7:e6:25:65:07:4b:52:a2:2b:42:eb:c7:ce:a4:38:15:92:
         94:8f:8d:1e:87:d4:c8:70:81:06:b6:ff:64:b5:fc:a3:19:06:
         29:d7:2f:16:3b:43:4f:53:25:57:de:90:49:59:cd:0e:7a:88:
         1e:58:a2:c6:70:ca:24:38:8f:85:51:e3:07:05:73:4c:41:d7:
         6e:1c:3c:10:cc:19:0d:10:e7:c3:1f:c5:31:c7:8f:47:f1:9b:
         59:c4:0b:a4:6b:f4:73:80:6c:cb:f9:cf:5a:c3:37:18:6d:25:
         01:24:c2:b3:43:d2:59:55:2d:e1:76:c5:fd:49:ca:f1:3f:20:
         18:03:c0:de:19:1f:e3:14:32:69:9e:a0:99:35:04:ab:aa:df:
         57:af:9b:3e:fa:d2:c7:93:8d:2c:3c:0e:19:37:02:9f:b8:7c:
         72:d2:b5:3c:e6:16:be:40:93:fa:38:76:ac:c6:30:4b:46:f4:
         bc:2e:03:73:1e:8f:50:8c:4d:fc:88:e7:9c:7e:33:a1:cc:90:
         17:d9:04:ae:a1:cb:78:42:a3:f0:c2:ac:8a:a6:03:27:57:bc:
         49:26:1d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 19:17:30 2023 by rpki-client on console-fra.rpki-client.org