Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/5ec277e8-8768-3c93-8a9b-08be6e33c5a5.roa
File:                     5ec277e8-8768-3c93-8a9b-08be6e33c5a5.roa (raw, json)
Hash identifier:          nlRSJoxyTFREkpNYmrQeycqRseUkh4db8ST/UogQ/w4=
Subject key identifier:   6F:7A:2D:55:21:11:DB:22:24:D1:C8:83:02:83:BD:60:A7:FF:D7:62
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F432858458B088D92AEB33E59660F6000
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/5ec277e8-8768-3c93-8a9b-08be6e33c5a5.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     3257
IP address blocks:        2602:fbb6::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:8d:92:ae:b3:3e:59:66:0f:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=4523e360-0426-460f-bb40-02cf3a57afd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bd:e8:66:c2:ac:04:6b:55:f9:93:44:14:64:
                    07:fb:ba:23:0a:56:74:c1:b2:0b:2b:79:f4:3b:35:
                    92:41:4c:db:5f:2f:ef:2b:53:8f:f3:ad:00:48:a3:
                    a4:b7:f5:03:19:4a:bd:11:4c:c6:bb:0a:e1:a8:ae:
                    cc:10:33:ad:44:3e:95:a5:11:df:87:74:c8:fd:52:
                    bb:76:e9:1b:c8:03:37:50:ba:82:c2:1c:6f:69:85:
                    47:86:61:e2:38:60:aa:16:9d:61:00:72:4e:96:1f:
                    08:5d:f5:26:71:12:e1:91:54:41:70:94:71:53:25:
                    a6:d5:12:cb:0c:c5:af:ad:2e:b3:cc:52:c6:8a:b0:
                    d7:36:66:43:47:99:67:fb:86:5d:bb:3c:d6:fb:06:
                    9c:73:69:61:5d:89:5b:0e:b4:af:42:89:c9:01:3e:
                    32:4c:8e:a8:8c:a5:52:9c:df:fe:b9:17:01:ef:d9:
                    ff:88:20:39:64:b9:10:99:ec:a8:5d:0f:48:98:eb:
                    62:6b:cc:7b:23:f3:cf:ba:90:71:a5:e6:75:6b:2d:
                    2f:f3:ae:89:44:e0:b8:1f:8a:cf:7d:bc:58:16:51:
                    3a:85:41:66:99:16:23:33:aa:7a:96:35:f9:ac:59:
                    77:6a:ae:2a:00:0f:11:38:cd:7a:06:a9:99:02:6c:
                    89:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7A:2D:55:21:11:DB:22:24:D1:C8:83:02:83:BD:60:A7:FF:D7:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/5ec277e8-8768-3c93-8a9b-08be6e33c5a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbb6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f2:99:75:c7:fc:47:3b:ca:79:94:66:13:e2:5d:bd:3f:f4:
         12:3e:dc:b6:a6:8c:d7:88:6d:c5:b4:e0:da:9a:79:7d:2a:01:
         f5:fe:d0:3c:ef:c5:e3:bd:61:a4:2c:7b:07:0d:a2:d0:08:1d:
         cd:65:25:cb:5f:c9:eb:c0:69:f7:92:5f:a9:19:71:be:c7:76:
         0c:2a:85:f3:ca:02:89:25:83:65:2b:6a:e3:63:ed:ad:1e:7d:
         a9:d6:29:06:5d:50:84:a2:9a:12:dd:a2:0b:8d:11:53:1f:c8:
         a0:27:f6:ef:f8:7f:aa:43:e0:09:19:ea:b5:fe:75:27:c4:9d:
         2b:fd:82:c8:c2:63:dc:f5:b0:2a:bd:eb:c6:e0:bf:58:22:b4:
         d9:91:11:e3:5c:99:90:60:2e:66:93:f3:c5:32:70:33:e1:81:
         e1:48:a0:a6:2b:0f:10:f6:8c:34:5b:29:9e:5b:d9:6c:29:cb:
         c3:bd:4d:2a:64:bc:4e:c0:9d:c4:1b:ab:7d:09:fe:ac:f4:cc:
         84:f0:61:b3:a5:d1:1f:75:f3:96:66:38:59:78:ba:cf:56:32:
         0a:88:3b:1d:68:f0:b4:ac:5d:1f:20:1f:34:cf:cb:a5:d5:e0:
         6f:73:c3:d1:63:50:ca:de:13:86:23:e3:b5:b5:aa:38:2d:4b:
         68:5f:5e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:36:24 2024 by rpki-client on console-fra.rpki-client.org