Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa
File:                     fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa (raw, json)
Hash identifier:          x2fHJT1WD/RJOiw2fVNlEMKidSdya5b3jJMUpOrKq6w=
Subject key identifier:   B5:10:3B:8C:D4:A2:CD:36:F1:2E:30:2C:C9:E9:55:C2:9A:01:A5:AC
Certificate issuer:       /CN=e4f064d0-9017-41e7-be21-c7b9883020d5
Certificate serial:       010D0C9F432858457FDDDACFB6E76FA8CDB50400
Authority key identifier: 6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     21903
IP address blocks:        2602:fa6d:78::/47 maxlen: 47
                          2602:fa6d:70::/46 maxlen: 46
                          2602:fa6d:74::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:da:cf:b6:e7:6f:a8:cd:b5:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f064d0-9017-41e7-be21-c7b9883020d5
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=08b0b5e5-3630-4fc4-9c39-c5ff8fefbca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:e4:c8:12:ab:a1:f6:28:37:62:fa:c3:3f:
                    90:fd:eb:35:29:f2:af:c6:a4:1f:39:cb:54:e6:6b:
                    61:58:a1:cc:0f:b2:e9:a1:91:c6:c6:e0:c7:5a:9f:
                    ba:b2:f5:07:99:4c:09:f0:83:5f:b7:dc:c2:8e:ce:
                    41:ff:95:0b:68:0a:c0:af:9b:a9:2c:57:5d:76:ed:
                    02:35:68:0f:a0:eb:3a:77:d9:b7:dc:95:00:ac:a6:
                    93:ee:1c:d7:7f:b3:6c:09:e4:7b:8b:0e:cc:80:c9:
                    1b:27:04:9e:0d:bc:53:af:70:fc:7a:e2:69:b3:b7:
                    09:ff:a3:68:19:eb:a3:d9:cb:32:ef:17:36:f4:f2:
                    dc:0f:df:33:96:03:fa:b4:24:89:42:54:cd:26:ba:
                    03:f7:00:77:5f:a1:86:c8:ce:60:ef:84:05:52:67:
                    9c:e8:5c:3a:79:fe:01:cd:23:79:69:95:74:be:5c:
                    b5:db:93:9a:29:84:48:8e:10:4a:5b:b8:d9:7c:4d:
                    15:ea:60:0c:85:1f:6c:b2:14:50:8d:3a:d5:78:11:
                    5b:00:4f:72:cc:ed:79:ee:75:86:4a:c1:34:32:48:
                    7f:e9:a2:2c:81:c2:ff:91:ff:89:b5:9e:e0:68:a2:
                    84:e7:73:89:87:9a:ab:55:82:1c:84:89:2f:2a:13:
                    30:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:10:3B:8C:D4:A2:CD:36:F1:2E:30:2C:C9:E9:55:C2:9A:01:A5:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6d:70::-2602:fa6d:79:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ee:da:5d:27:cf:7b:1a:05:dd:ff:a9:d6:a9:11:d2:f6:8c:
         2e:63:ac:de:55:6f:f5:23:ce:ba:b2:04:a8:31:64:82:6b:fc:
         27:1f:0d:0f:6c:8e:54:75:7c:13:55:17:1b:31:30:1c:bc:9d:
         58:ee:cb:c0:f2:06:6a:43:31:53:37:0b:15:4e:38:00:df:f2:
         21:8b:41:36:ab:55:9c:54:b0:17:b6:11:5f:7d:65:16:b0:48:
         e7:f2:4e:17:71:d4:d2:4a:76:27:54:93:db:55:06:de:e8:30:
         46:49:e4:73:dd:ed:c3:8c:36:cc:5f:f9:cd:55:ea:a5:56:e6:
         7e:a2:50:b2:0a:97:3e:ad:5f:d1:93:9a:29:fb:d5:06:4f:fa:
         8e:a0:b4:d3:c5:03:b6:f2:3f:46:fc:ca:9b:16:f9:a5:11:89:
         45:08:66:31:49:ac:5a:de:2e:ae:3c:77:b3:79:37:b1:6a:61:
         6f:32:b9:68:2c:62:9b:40:af:df:fd:aa:40:3b:d2:63:ec:2c:
         a7:3d:ab:e1:36:33:fb:ba:3a:e9:66:70:e0:76:ff:16:bd:fd:
         b8:47:af:84:4a:17:84:36:43:02:88:17:84:0a:3c:6e:69:85:
         4a:e6:99:f0:d3:b9:f2:3a:2a:47:60:31:86:97:9a:54:49:f6:
         9d:04:32:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:44 2024 by rpki-client on console-fra.rpki-client.org