Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2a45a639-abe6-396e-9150-a4cae7672b65.roa
File:                     2a45a639-abe6-396e-9150-a4cae7672b65.roa (raw, json)
Hash identifier:          sQv2SrhxefuMiMbL+1VEO9wK9jBzv3j/uRaGfLs5Z2A=
Subject key identifier:   FD:15:9F:71:A7:40:77:C7:60:04:54:CA:08:C4:C0:33:5E:E4:CC:47
Certificate issuer:       /CN=5039f611-54f3-4a44-9153-55949e05704b
Certificate serial:       010D0C9F432858458C6DD9B12B7FDD86C5FD8680
Authority key identifier: 9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2a45a639-abe6-396e-9150-a4cae7672b65.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     11004
IP address blocks:        2602:fa66::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d9:b1:2b:7f:dd:86:c5:fd:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5039f611-54f3-4a44-9153-55949e05704b
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=3cc1c7ab-eba7-4ad9-8a1d-afeb4c9b11ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:11:78:f4:26:80:51:3a:ca:3e:de:8b:25:
                    64:dd:87:70:9f:44:3c:41:ce:29:ff:e4:c3:63:23:
                    95:e7:a0:17:91:51:5a:6d:fa:b2:92:d4:06:16:77:
                    22:0c:29:4b:18:b2:a5:f2:71:2a:02:5f:f1:b5:54:
                    a6:6f:c2:dc:6c:d6:55:71:35:5a:f0:86:dd:46:4b:
                    96:c1:54:7c:e5:8c:97:3b:38:aa:d2:e5:ad:b0:19:
                    ec:fe:17:64:74:23:d6:e2:8d:4a:98:89:26:fb:26:
                    1a:08:43:0b:8e:47:7a:51:76:3e:f2:88:3d:8c:00:
                    c7:0a:ad:04:85:69:b3:7c:0a:08:a5:54:f5:e3:82:
                    77:0c:17:4f:7b:9c:b1:2c:05:0b:8a:00:d1:29:11:
                    3f:98:bc:06:eb:21:60:27:b8:bf:ad:63:74:50:4c:
                    b6:71:ab:dc:40:13:da:f2:68:79:7d:29:75:cc:ac:
                    17:43:07:e7:1d:a3:9c:c1:1b:2e:11:d7:71:80:8b:
                    ae:6d:51:23:95:5e:66:37:c1:d6:0a:c3:02:cf:7d:
                    8b:30:95:4b:23:7c:9f:62:09:1e:8a:4a:70:9a:6c:
                    9a:32:7d:c6:89:7d:b0:3c:5c:c8:5f:c5:ad:b9:bd:
                    2e:ba:38:76:54:6e:41:7b:3b:97:50:3b:bf:2a:2d:
                    0c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:15:9F:71:A7:40:77:C7:60:04:54:CA:08:C4:C0:33:5E:E4:CC:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2a45a639-abe6-396e-9150-a4cae7672b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl

            X509v3 Authority Key Identifier:
                keyid:9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa66::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:46:51:9b:77:8d:21:27:68:fb:43:ff:91:fb:8a:55:7d:fe:
         cc:33:b2:91:59:23:a5:84:2d:dc:1e:d3:62:2d:49:1c:f5:37:
         8a:aa:26:eb:b7:34:6f:60:05:d3:56:4f:f2:08:69:15:6c:50:
         34:33:3e:3f:1a:ae:08:31:da:d0:8c:ac:f4:4f:2f:ae:98:5a:
         0a:19:72:06:11:a8:42:84:9b:25:22:65:f4:cd:3c:77:cd:8b:
         06:bb:28:78:42:ee:4c:c7:fc:e2:22:0a:4f:a3:fd:13:42:be:
         2b:5d:3d:d9:57:36:98:35:10:b1:73:aa:d0:50:21:29:a9:9b:
         06:97:b0:7d:ae:37:5f:2d:6f:aa:c1:d1:fe:80:61:a8:4e:f3:
         8c:66:63:41:eb:eb:eb:8e:7e:fe:c0:b3:e3:bb:78:3d:08:0c:
         c8:6e:5d:38:5d:86:34:cf:a4:8f:24:87:b2:f2:a0:73:59:88:
         02:f2:b9:dc:af:f7:98:f6:cc:d9:70:01:a3:7c:dc:c0:93:69:
         a3:21:64:19:88:c5:de:f9:db:17:69:25:7a:e7:0c:9c:9a:b8:
         ad:b8:51:19:66:b9:42:1f:09:9e:2e:83:7d:b1:7e:48:f8:e7:
         6f:90:77:c0:38:34:47:66:95:ee:71:d8:d0:ee:23:26:45:55:
         05:f5:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:39 2024 by rpki-client on console-fra.rpki-client.org