Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/b7fdab78-e78e-3f0d-a9ed-97af290a9671.roa
File:                     b7fdab78-e78e-3f0d-a9ed-97af290a9671.roa (raw, json)
Hash identifier:          U7WoJmMImkgMIrNlT+eIYEkJ6ncW3t2tiay/CI/mBR8=
Subject key identifier:   CB:0E:50:48:1C:99:7D:82:0C:97:E3:C4:12:ED:09:E3:3D:CF:47:0D
Certificate issuer:       /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial:       010D0C9F43285845E88E6D4D6AC702CEEDBFB400
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/b7fdab78-e78e-3f0d-a9ed-97af290a9671.roa
Signing time:             Sat 18 May 2024 01:00:27 +0000
ROA not before:           Sat 18 May 2024 01:00:27 +0000
ROA not after:            Fri 16 Aug 2024 01:00:27 +0000
asID:                     51308
IP address blocks:        2602:fa42:fd0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e8:8e:6d:4d:6a:c7:02:ce:ed:bf:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
        Validity
            Not Before: May 18 01:00:27 2024 GMT
            Not After : Aug 16 01:00:27 2024 GMT
        Subject: CN=793ba852-e188-4bdf-8b88-0528de3e5a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:10:27:8e:c3:0f:31:2c:fc:eb:5c:3f:b5:
                    88:d2:fc:c5:9d:88:18:0d:9b:a1:05:02:5a:76:1e:
                    7f:58:62:42:5d:3e:65:18:56:0a:36:db:fe:ed:d6:
                    9c:b3:55:f3:a0:72:0e:fe:37:50:f4:68:94:39:0b:
                    4f:a3:1d:ad:0a:1f:44:2b:f7:e2:b1:a6:c0:37:2d:
                    b1:05:e0:b9:51:73:a1:9e:2a:4c:be:35:76:9c:54:
                    ec:4f:27:77:a9:c6:2c:74:32:d2:6d:b4:6c:45:56:
                    df:46:48:29:12:55:f6:14:0a:e8:88:94:f6:2c:3e:
                    cf:91:a2:5f:77:10:f7:ee:26:00:a2:f7:99:df:e9:
                    87:a3:ee:8f:ed:b4:9d:dd:84:0e:2b:4f:bf:c1:29:
                    f4:8c:62:db:f6:65:87:e4:c5:5f:3a:db:39:45:84:
                    6b:03:52:6e:fa:8e:ed:bd:f1:68:e3:8b:be:27:65:
                    0c:43:4a:09:57:03:9e:03:06:f7:f5:b3:20:30:21:
                    e6:0a:57:2b:32:5b:0d:28:22:d4:e4:66:ba:1b:92:
                    a6:28:47:06:40:af:48:e2:df:07:17:de:a2:d1:d0:
                    dc:56:0d:00:84:b3:23:c2:6b:59:1e:07:c0:30:67:
                    12:de:fb:23:a5:93:05:9e:a9:37:d0:6e:3d:2c:03:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0E:50:48:1C:99:7D:82:0C:97:E3:C4:12:ED:09:E3:3D:CF:47:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/b7fdab78-e78e-3f0d-a9ed-97af290a9671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa42:fd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:12:a9:d0:ef:00:65:73:11:e9:41:5f:4e:13:90:d8:62:3d:
         2d:d7:44:ff:be:63:fd:92:2e:48:08:6d:8e:0e:75:ed:45:5c:
         6b:9c:08:af:af:a8:64:d8:80:78:56:fc:f0:66:e0:d5:16:33:
         29:fa:1c:63:df:c7:0c:e0:ae:ba:e8:7a:3e:d9:40:0d:fc:e1:
         a8:d2:1f:74:e8:4c:5f:1a:14:c4:2b:43:69:12:13:9e:21:45:
         66:60:35:4a:a2:5f:f0:08:ca:29:7c:e1:cc:c1:ec:da:cd:27:
         34:46:3a:4d:16:6f:58:d9:67:ef:0f:f3:b6:7e:ad:1b:08:91:
         4b:d4:b6:8d:8a:dd:f7:fb:a8:d7:68:c7:83:9b:5f:57:f9:4a:
         53:e9:ae:47:75:4f:d0:e6:72:85:69:ba:bd:35:1a:22:90:9b:
         2d:47:19:f5:59:f1:9f:17:ca:aa:e4:25:13:e7:0a:f7:cd:f2:
         3d:d9:19:d9:da:50:4c:2a:56:c1:30:1b:c2:37:94:a0:9e:f7:
         07:39:b0:fe:89:a5:e5:69:be:92:6a:04:b0:70:f7:92:0d:99:
         5d:0f:d8:9d:37:a7:9a:cf:7d:ec:2e:50:5a:aa:23:bf:dc:a9:
         72:15:65:3a:3c:9d:08:a1:a1:e3:7d:cb:48:e9:94:24:06:dc:
         14:1b:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:35:06 2024 by rpki-client on console-ams.rpki-client.org