Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/7b6c1f92-112e-3e67-9d36-1f986623cf93.roa
File:                     7b6c1f92-112e-3e67-9d36-1f986623cf93.roa (raw, json)
Hash identifier:          RjtCRQmQLvXg7xEcs0Ip8BSAdIO7AzFHxyuiyu/dMME=
Subject key identifier:   29:3B:F9:DB:41:E4:3A:4B:79:B6:1F:CE:40:22:A1:B1:BF:E6:C5:83
Certificate issuer:       /CN=1dc547da-42a0-43ba-8d2f-21375737b95b
Certificate serial:       010D0C9F43285845211046805BCF21A238FAFA80
Authority key identifier: 3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/7b6c1f92-112e-3e67-9d36-1f986623cf93.roa
Signing time:             Thu 07 Mar 2024 14:00:32 +0000
ROA not before:           Thu 07 Mar 2024 14:00:32 +0000
ROA not after:            Wed 05 Jun 2024 13:00:32 +0000
asID:                     150698
IP address blocks:        2602:f9ca:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:21:10:46:80:5b:cf:21:a2:38:fa:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dc547da-42a0-43ba-8d2f-21375737b95b
        Validity
            Not Before: Mar  7 14:00:32 2024 GMT
            Not After : Jun  5 13:00:32 2024 GMT
        Subject: CN=97852121-3cc6-4115-b11d-1f23726b7a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:11:9c:00:87:75:9f:eb:28:74:0d:49:e9:5d:
                    9d:35:21:13:37:f6:b8:31:f7:97:81:fc:20:78:90:
                    b6:1a:e1:c4:d1:a2:71:20:44:e3:91:da:a4:85:1c:
                    ab:3a:48:60:6b:ec:0e:eb:b8:36:a2:12:33:6a:84:
                    f0:8d:65:95:94:a2:8c:ad:bd:06:24:b8:f3:9b:4f:
                    ed:ae:41:e0:8f:0c:86:1e:8c:ea:ab:2e:97:9b:70:
                    9d:eb:3b:0d:5a:b6:bc:be:69:fd:2f:39:3a:48:d5:
                    70:19:19:bb:ce:8d:a6:8a:5f:1c:5d:c0:f6:41:84:
                    4e:bc:27:25:31:59:5d:97:09:62:92:06:21:74:fa:
                    c4:8b:17:16:22:4b:8f:8e:41:f6:c8:64:2c:0b:0b:
                    95:11:d2:48:35:bb:d2:25:80:d8:e9:03:a0:f8:63:
                    ec:0b:ef:54:68:e5:bc:fa:15:03:44:fd:df:2c:4c:
                    1b:93:dc:f3:17:9e:de:db:b6:48:3e:d8:be:b2:f4:
                    da:3e:92:fe:39:fc:46:58:a0:73:63:0b:9c:93:d2:
                    72:54:b3:b0:eb:bc:0d:0d:50:d4:19:cb:13:1d:96:
                    2f:9a:2c:3e:ee:c8:8e:84:b3:da:b3:ed:b7:4c:20:
                    b5:14:14:3f:e6:59:7e:52:50:5a:f4:87:0f:06:ff:
                    a9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3B:F9:DB:41:E4:3A:4B:79:B6:1F:CE:40:22:A1:B1:BF:E6:C5:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/7b6c1f92-112e-3e67-9d36-1f986623cf93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ca:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:de:7d:a0:ee:6c:b7:cd:b6:0c:7a:ea:8c:9d:5b:8f:60:23:
         ed:a4:64:b3:7b:43:94:48:bb:3c:28:80:b5:e1:22:d8:35:f1:
         78:97:7f:a5:e1:57:61:66:37:16:34:57:50:8e:d7:10:3f:fd:
         cf:12:af:07:6a:33:e4:c2:b0:db:fe:b4:bc:99:8d:39:c3:75:
         ad:05:f0:dd:97:7a:ad:33:21:b5:cb:c4:f7:c2:95:5a:00:02:
         3c:b2:7a:0f:e2:76:55:1a:f0:77:db:85:12:9d:73:d2:b2:ec:
         15:44:1e:98:bc:a3:63:80:e6:ca:7c:d2:66:39:43:38:84:71:
         d4:59:79:6c:d5:22:58:54:93:c6:60:88:86:a3:4b:14:d1:e4:
         6c:c9:47:9a:75:81:7c:c8:db:ee:92:eb:d9:e4:07:2d:ce:e7:
         0f:34:d8:5f:d6:a5:67:72:a2:f9:ec:6e:8f:72:94:d1:09:d5:
         84:8b:0f:d5:96:c7:f0:6c:c2:53:09:cc:3d:72:95:bd:5b:bd:
         92:0a:29:60:e9:14:84:a1:92:79:07:36:69:0e:4a:17:b6:5b:
         da:06:b2:69:77:08:20:d0:7d:c0:93:8c:4a:c5:2c:00:6b:a3:
         bc:ff:6a:b4:46:93:f2:43:67:5f:fe:41:b8:41:28:c9:23:50:
         49:1b:66:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 01:35:29 2024 by rpki-client on console-fra.rpki-client.org