Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/30e1b526-edb4-3408-90ff-b3883c8f9b14.roa
File:                     30e1b526-edb4-3408-90ff-b3883c8f9b14.roa (raw, json)
Hash identifier:          Gl1bGL5uBfdn7RyI8/aMIFqCr0hELaD+NZgSxtdnlUM=
Subject key identifier:   01:CA:6D:68:B0:D5:BF:A9:2F:22:BB:71:42:4F:C2:3C:9A:42:D0:E7
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F43285845CB2C858EE43805AFAAB5E1C0
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/30e1b526-edb4-3408-90ff-b3883c8f9b14.roa
Signing time:             Tue 07 May 2024 12:24:53 +0000
ROA not before:           Tue 07 May 2024 12:24:53 +0000
ROA not after:            Mon 05 Aug 2024 12:24:53 +0000
asID:                     142594
IP address blocks:        2602:f919:101::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:2c:85:8e:e4:38:05:af:aa:b5:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: May  7 12:24:53 2024 GMT
            Not After : Aug  5 12:24:53 2024 GMT
        Subject: CN=37ab037d-b13c-4f8d-9e80-609be886ee5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4f:ac:cb:0d:f4:27:16:8b:f3:13:0d:68:a3:
                    03:02:25:8e:98:cf:31:ff:d6:7d:a0:36:53:37:e7:
                    7b:42:c1:b8:7c:11:8f:b6:07:13:4a:ca:41:4b:9a:
                    50:84:ac:2f:51:1d:5a:8b:af:44:48:d7:e8:4e:69:
                    2f:4a:98:35:88:88:43:ba:2f:0a:c4:b4:3f:3b:88:
                    60:ea:57:3d:9a:7c:72:c7:b2:2c:44:02:6f:a6:86:
                    13:f7:3b:61:00:a0:cb:81:4b:39:e3:7d:c8:bb:94:
                    fc:08:90:2b:98:46:fe:e0:4e:d3:1d:d8:cc:6d:7a:
                    5e:53:e4:d5:5d:dc:ce:b1:cf:3c:53:7a:bf:2d:7a:
                    9a:c0:35:98:83:c9:8d:66:25:02:41:54:30:75:b7:
                    d7:68:9b:49:84:29:84:9e:f5:ea:4b:17:b9:7b:53:
                    ec:e6:fc:09:77:5e:ac:8a:c6:a3:f5:28:71:33:b4:
                    f9:dc:cb:ed:b0:d4:c3:df:21:66:d7:14:e5:c8:49:
                    29:3d:70:db:11:f4:e3:dd:74:59:17:7b:15:8e:a0:
                    0c:8c:8b:e8:ca:31:ee:70:1a:d3:8c:60:12:9c:5e:
                    29:61:93:cc:bd:cb:a9:0f:ff:8f:2b:68:89:e3:f0:
                    12:97:06:e5:f0:ce:82:15:b7:ff:42:97:e7:6b:0e:
                    69:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CA:6D:68:B0:D5:BF:A9:2F:22:BB:71:42:4F:C2:3C:9A:42:D0:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/30e1b526-edb4-3408-90ff-b3883c8f9b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:72:07:35:76:84:7c:4a:25:a4:4f:5e:18:4a:5f:88:a7:d2:
         1b:1c:cc:b9:10:e2:c3:55:bd:77:f6:60:e8:b0:c1:b4:f1:e8:
         18:c9:8a:92:08:0d:95:b8:bb:b1:45:ec:95:7f:dd:91:10:12:
         70:c0:2b:9e:59:ef:99:7f:58:48:06:f5:c7:90:60:70:49:1b:
         a6:41:86:9e:cb:80:53:40:7c:8e:96:e8:e5:75:78:b5:9b:1f:
         da:5b:a2:08:68:13:70:a7:c4:58:62:5e:53:b9:2d:1e:17:90:
         9c:65:d8:c1:6c:02:f4:36:f6:18:a4:c0:4f:41:fb:75:f9:24:
         27:f3:1d:31:47:fc:6f:b2:e8:65:22:04:ca:9d:d7:d7:30:14:
         c0:70:ce:c3:01:14:7c:d5:2a:09:e8:13:57:22:de:60:83:ad:
         c7:fd:32:29:f5:94:d3:8f:79:1f:ef:54:cb:44:63:36:80:29:
         29:b2:5b:29:6f:7b:5e:6e:09:a4:94:6e:53:43:b3:5f:6b:22:
         a6:bf:07:ec:18:b3:4b:5b:2d:aa:7c:d5:da:8f:4a:03:db:44:
         87:fa:5c:04:91:78:ca:d4:ff:56:80:70:dc:04:3a:db:8b:bc:
         63:c4:e9:2a:fc:e5:4b:81:ca:e8:fc:10:d7:ef:f7:42:d6:56:
         8d:3d:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 22:55:08 2024 by rpki-client on console-ams.rpki-client.org