Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a580f3dd-272d-3e80-87fa-7b0f87ccca77.roa
File:                     a580f3dd-272d-3e80-87fa-7b0f87ccca77.roa (raw, json)
Hash identifier:          mL4cCrmu7O//ZsF6m46IX2BfRRMX3FsQ+X8b6eee4S8=
Subject key identifier:   16:A0:CB:E7:0B:4E:77:96:CC:0E:30:9E:FF:0B:CA:B4:68:B5:80:1E
Certificate issuer:       /CN=a3e437f7-1e43-4bb4-be78-da876ad33518
Certificate serial:       010D0C9F43285845DEC9455DA7E1F3D8C21C8680
Authority key identifier: 2A:D1:EC:BF:34:6B:36:3C:63:B4:5F:34:83:80:5E:91:F8:72:52:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a580f3dd-272d-3e80-87fa-7b0f87ccca77.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     30002
IP address blocks:        2602:815:1000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a3e437f7-1e43-4bb4-be78-da876ad33518.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a3e437f7-1e43-4bb4-be78-da876ad33518.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:45:5d:a7:e1:f3:d8:c2:1c:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e437f7-1e43-4bb4-be78-da876ad33518
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=e1dda3fb-eb93-4e25-83d2-0bd7a27a9084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:f2:aa:ed:e6:9d:a5:9c:47:70:a0:8c:1b:
                    05:97:6d:7b:4d:67:9e:68:40:42:36:03:d4:c6:b8:
                    d6:c2:38:e9:1a:db:4f:5f:35:3d:25:d6:52:1e:d2:
                    b5:4a:ac:7f:c1:15:f4:f3:13:21:0b:f1:8a:49:e4:
                    a4:8e:df:c2:6a:d5:37:0d:c6:f8:94:0f:c9:60:c6:
                    31:05:ea:f5:e2:f6:73:e3:73:80:bb:3b:2f:2f:c8:
                    1f:63:93:de:a7:a6:d7:e4:d4:88:91:b9:a7:03:48:
                    d8:c7:28:cf:36:06:99:04:84:3b:36:fe:40:b3:49:
                    17:be:ae:99:96:22:9f:41:3d:b9:ca:be:21:da:c4:
                    68:01:59:74:1b:14:ea:5e:48:84:55:a8:ee:16:d2:
                    ce:13:5b:c8:ae:d0:8e:2d:55:13:01:3c:46:11:7f:
                    4c:22:85:30:d3:df:36:92:f3:f1:56:ee:24:57:e8:
                    e6:a3:c3:83:74:0e:32:87:5f:ff:bc:42:2b:07:ef:
                    03:63:fc:c6:ea:f4:6b:5d:d6:81:14:c6:7b:6d:df:
                    0f:cf:dc:3d:45:53:8f:a6:c9:b4:d6:6b:b5:02:64:
                    6f:95:24:86:4b:27:be:9d:8e:2f:11:78:c8:f1:0e:
                    2b:d3:9c:e5:0d:c6:ad:63:21:97:cd:f4:79:9c:7f:
                    f4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A0:CB:E7:0B:4E:77:96:CC:0E:30:9E:FF:0B:CA:B4:68:B5:80:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a580f3dd-272d-3e80-87fa-7b0f87ccca77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a3e437f7-1e43-4bb4-be78-da876ad33518.crl

            X509v3 Authority Key Identifier:
                keyid:2A:D1:EC:BF:34:6B:36:3C:63:B4:5F:34:83:80:5E:91:F8:72:52:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:9d:c9:ca:77:32:fa:e9:a4:c7:43:a5:6c:7c:94:a9:6c:c7:
         db:f1:c1:80:9c:1c:cc:40:f2:88:3e:ec:24:cf:68:be:de:31:
         cf:b1:93:49:b5:f4:a5:73:80:1f:c1:9a:13:cb:8e:96:4e:1a:
         28:08:ae:78:77:38:8c:54:93:2b:fb:af:03:ba:18:61:8b:58:
         b7:9a:8f:6b:0e:16:4c:ba:00:eb:2f:08:c4:ee:c1:f5:08:97:
         09:fc:df:f9:ff:1e:fc:12:ba:a6:af:6b:82:99:f4:8f:e9:f4:
         3d:bf:b1:9c:ce:19:51:9c:73:f6:c1:c1:f7:f1:e1:22:05:ee:
         3d:17:0d:bd:b0:b2:c0:0d:98:47:08:29:d6:05:1b:bd:e0:21:
         9d:6b:3b:fb:77:ba:6d:40:35:b4:3e:16:06:9f:18:67:a2:ef:
         0c:44:db:6e:f3:6e:f3:9d:46:dc:40:74:dc:5b:6d:0f:a2:54:
         e9:d5:2e:be:b0:64:d3:94:7c:e5:30:a8:87:48:62:5d:90:52:
         b1:23:68:08:a9:40:d1:c5:75:b5:33:21:16:ad:3f:71:cd:af:
         42:06:42:a2:7f:b1:06:e8:6e:d6:40:a1:6b:1d:d2:48:bc:73:
         50:9b:1c:16:74:89:3f:35:80:cd:d3:e0:e9:d3:24:e4:4c:3a:
         03:ea:7c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:21:33 2024 by rpki-client on console-fra.rpki-client.org