Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/7f57ab54-4400-3df5-a895-a6e848077c75.roa
File:                     7f57ab54-4400-3df5-a895-a6e848077c75.roa (raw, json)
Hash identifier:          ONgrxJ7Ob+ogdGZ+c0hSFXAyzIvUc9F0YC9uXgz0rSE=
Subject key identifier:   4B:82:B4:A9:A7:E2:E2:D9:1B:6D:30:B8:3A:96:6F:77:1D:6D:14:A0
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F43285845B9C39937A995D69A9EFA62E0
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/7f57ab54-4400-3df5-a895-a6e848077c75.roa
Signing time:             Wed 01 May 2024 06:44:44 +0000
ROA not before:           Wed 01 May 2024 06:44:44 +0000
ROA not after:            Tue 30 Jul 2024 06:44:44 +0000
asID:                     61112
IP address blocks:        2602:fa4f:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b9:c3:99:37:a9:95:d6:9a:9e:fa:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: May  1 06:44:44 2024 GMT
            Not After : Jul 30 06:44:44 2024 GMT
        Subject: CN=09d98668-54d1-4204-bf74-a3d4003a4dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:03:72:87:d5:7c:60:31:7f:2f:1e:2a:5c:
                    cb:bb:75:f4:bb:21:88:70:11:77:c9:c9:9a:92:c2:
                    0a:fe:d3:36:8b:59:cd:4c:c9:28:54:e8:bd:6c:ad:
                    26:2a:a9:46:48:48:85:0a:4c:82:df:e8:02:2b:02:
                    17:8b:b6:e5:e9:8c:a7:89:7b:d1:76:cc:d9:36:68:
                    73:d7:c2:ca:72:2c:47:ed:26:01:cd:a2:64:c3:d1:
                    02:ae:61:8e:47:3a:0a:8f:43:03:86:75:00:74:25:
                    85:dc:76:3d:46:36:1d:21:d4:53:33:2b:34:8e:fd:
                    8a:bf:e5:28:32:5c:e7:aa:53:d8:0e:bf:70:4a:2c:
                    ef:06:f1:9b:60:99:06:88:42:8e:4b:8a:b3:8d:4b:
                    3a:94:8d:69:71:63:79:42:ea:11:d2:c5:2d:9b:d5:
                    3f:c8:53:54:7c:b8:ba:3b:4e:f3:92:ea:c9:d8:28:
                    46:c9:4c:78:20:8e:0a:0f:6a:1e:bc:c3:83:e6:74:
                    64:b8:09:af:ea:8f:fb:b0:d8:f4:d2:79:38:0d:9c:
                    a3:36:28:ce:35:6a:b7:cf:b9:01:00:15:a6:3f:5a:
                    d1:46:5e:02:4a:56:f8:82:f6:41:3a:4e:af:b2:07:
                    a4:33:34:3a:7f:cc:96:95:01:ac:6f:7b:63:9e:75:
                    f7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:82:B4:A9:A7:E2:E2:D9:1B:6D:30:B8:3A:96:6F:77:1D:6D:14:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/7f57ab54-4400-3df5-a895-a6e848077c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:e1:0d:2a:b7:47:ae:7a:1a:44:4b:16:7c:80:86:fc:58:2c:
         58:cb:98:40:bd:3d:5a:00:8a:52:9d:78:c7:3a:51:1c:b7:b4:
         a4:e7:d7:4a:23:bd:68:cf:de:bf:7f:b4:e3:60:a0:ff:e0:08:
         0a:8d:6c:05:61:3c:cd:7b:92:05:bb:c7:5a:94:0c:a0:20:96:
         b6:e0:1c:56:39:ac:10:4c:a8:bd:33:4a:58:c9:dc:3c:91:91:
         fc:da:7a:16:9b:a5:a2:a8:59:c9:e0:25:fd:5a:0a:66:3e:ab:
         50:96:dc:cb:e4:9c:dc:f5:da:54:ce:b9:62:68:f0:09:61:72:
         34:96:5f:4d:17:24:72:b7:55:a9:1d:2f:57:b8:bb:23:6e:ef:
         37:6e:49:e9:0d:11:29:30:db:b8:65:7f:bc:51:2b:a4:bc:43:
         2d:ef:1c:07:3d:a3:11:9d:c3:33:99:b5:27:e7:0d:ca:be:ed:
         cc:15:fb:21:b2:41:53:47:c2:ff:75:79:d0:1c:71:14:d8:1c:
         c3:3f:46:83:98:5d:8f:ac:eb:8b:71:81:bb:88:c6:43:4a:9f:
         3d:d1:19:e6:4e:2f:3c:9e:54:42:1b:f2:d5:23:dc:d4:63:25:
         4a:37:7f:8b:70:9e:24:17:21:e4:25:d6:82:5c:a7:c3:15:94:
         09:05:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 15:55:09 2024 by rpki-client on console-ams.rpki-client.org