Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa
File:                     09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa (raw, json)
Hash identifier:          TQgg0ueUVTUC6NAIr9u5l8yL4xaoJlFRQ7j0r5eY8Hc=
Subject key identifier:   F8:1B:A1:E6:93:F6:80:EA:76:56:92:80:C5:B0:22:4E:A1:3A:30:D4
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D66905AC28D47853CF8F80B0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        2602:210::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:69:05:ac:28:d4:78:53:cf:8f:80:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=35e02fd6-a653-491a-88b0-ce6bc7009350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:bd:a8:0e:72:8d:6c:41:d7:ec:37:7a:13:
                    38:b8:f0:f5:16:57:18:88:ee:3b:9d:9f:e2:ed:ab:
                    42:aa:77:99:0e:ed:14:a9:9c:f1:fc:73:40:18:07:
                    43:d9:b0:4a:09:e0:a3:3e:aa:fb:6c:79:13:9d:d9:
                    be:8a:49:36:35:3f:99:82:36:6f:b9:eb:61:d7:51:
                    65:e5:09:1b:aa:9e:7f:f6:41:c8:56:29:7e:95:54:
                    ae:fa:75:74:e4:f9:83:72:42:02:56:4f:ba:da:94:
                    8c:0e:a3:d1:3b:06:5e:86:e6:05:85:a2:ab:99:e1:
                    84:51:c2:2b:ef:d3:c1:b6:61:5b:8a:f9:bf:75:f3:
                    3c:12:43:68:0d:b6:eb:71:40:db:18:8f:1d:61:e2:
                    e1:c9:cc:09:21:36:c7:23:37:39:69:88:6b:b2:cb:
                    75:3a:45:f1:5e:5b:f8:6a:5c:b7:f6:d1:87:82:d7:
                    6a:6f:c0:bb:da:b6:c8:00:fa:48:63:3f:2b:c8:79:
                    64:7d:4b:5a:41:5f:07:59:f9:33:47:3e:82:e2:e0:
                    64:6a:ae:09:97:ee:ab:8a:d4:86:9f:b3:6e:5a:c6:
                    1c:e2:a8:0b:f1:5c:71:db:1a:c2:74:40:72:67:21:
                    a9:a3:9d:91:1b:c9:61:24:c0:5f:9b:08:5a:b0:c5:
                    51:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1B:A1:E6:93:F6:80:EA:76:56:92:80:C5:B0:22:4E:A1:3A:30:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:210::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:7e:e0:88:9c:27:8a:6a:85:6c:7f:03:db:4c:f3:a4:76:b1:
         a1:87:37:71:0e:64:3c:33:08:28:24:2f:ad:28:6d:e3:33:d3:
         d9:90:c0:c8:e9:c9:67:77:ac:d5:d0:4a:47:a7:41:78:32:f7:
         22:26:72:99:32:fc:ed:7f:6a:63:e0:3d:4d:00:a8:24:0a:8c:
         1d:53:75:75:f1:2e:62:c5:33:3f:60:10:93:b7:5e:93:01:b2:
         65:49:28:84:ac:b9:68:f0:d5:81:46:03:7d:65:d5:f8:04:4a:
         4c:fb:e1:f5:c2:f1:2b:ff:3d:ce:d9:39:70:26:3f:f5:97:8e:
         4b:50:03:94:ff:84:5c:f3:b7:db:e5:be:b2:1d:e3:b0:a1:7a:
         1f:98:19:3f:a8:d2:6e:b7:dc:8b:31:9d:8b:19:af:e9:67:1f:
         5b:28:13:11:33:f7:3e:97:89:34:5c:d1:6d:f3:fc:61:1f:da:
         72:65:40:26:fa:81:75:a5:38:98:d0:bf:0f:15:82:bf:41:bb:
         e0:2f:11:f7:98:77:de:fe:80:e0:27:38:ac:e3:da:6d:a7:e1:
         67:9c:17:a2:55:e6:66:d2:43:8d:a4:05:dd:3a:48:d3:8a:76:
         89:0b:e5:50:48:f5:15:91:19:e4:4b:87:d5:c5:6f:5f:fe:cc:
         c8:6e:1d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:38 2024 by rpki-client on console-fra.rpki-client.org