Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/4694d567-b90d-3acf-9655-996af58f9619.roa
File:                     4694d567-b90d-3acf-9655-996af58f9619.roa (raw, json)
Hash identifier:          ouG3mnNRj61By7FL+zZ081Yxc2A1y6WHBG53ZwX9+v4=
Subject key identifier:   ED:44:57:31:DA:D3:0C:99:7E:31:1E:87:2E:91:C9:3D:0F:23:82:FA
Certificate issuer:       /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
Certificate serial:       010D0C9F4328584500F56315C0D4FA65D28F2100
Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/4694d567-b90d-3acf-9655-996af58f9619.roa
Signing time:             Sun 25 Feb 2024 02:00:26 +0000
ROA not before:           Sun 25 Feb 2024 02:00:26 +0000
ROA not after:            Sat 25 May 2024 01:00:26 +0000
asID:                     399214
IP address blocks:        2602:fb0a::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:f5:63:15:c0:d4:fa:65:d2:8f:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
        Validity
            Not Before: Feb 25 02:00:26 2024 GMT
            Not After : May 25 01:00:26 2024 GMT
        Subject: CN=4c98f7d4-6cad-4291-a6cc-0e06e7c5a73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fe:85:26:29:56:34:ad:94:e4:17:2d:68:b1:
                    c7:e1:b3:13:11:8a:73:80:dc:9e:89:76:3e:fa:e7:
                    fa:75:77:a2:08:19:cc:55:dc:9f:c1:6d:10:f8:28:
                    5d:b2:02:84:70:83:c2:ac:ac:14:04:a3:24:52:ae:
                    11:8a:6b:06:ca:5f:a0:b4:8f:cb:4e:66:26:aa:e0:
                    be:23:71:4d:5c:7f:fe:10:53:9a:c9:59:2f:50:fa:
                    6a:bf:0d:d8:0e:fc:ea:82:b0:b9:e8:3e:38:b1:e1:
                    93:33:f8:bf:75:6f:75:7f:c1:13:e3:cc:08:77:cf:
                    55:9b:97:62:01:68:64:05:88:b9:d0:93:9e:a8:fa:
                    b4:b6:7e:07:20:9f:a6:70:c2:f1:f7:10:04:ee:52:
                    30:1f:75:42:07:09:57:cf:71:a9:24:86:63:04:eb:
                    1f:5d:75:53:19:63:b9:fb:e8:7d:7d:83:90:f9:27:
                    ac:ae:31:f7:4b:b9:f7:85:68:9d:40:d5:83:3c:0d:
                    0a:e2:6f:78:f3:ad:25:0a:cc:f2:d6:bf:d4:1d:7a:
                    cd:ab:b8:ff:80:7e:8e:57:2b:de:d8:c4:56:e9:ff:
                    39:85:dd:c9:26:ed:89:1e:b9:8f:a3:d6:82:b1:f1:
                    f8:ea:b0:0a:9e:b0:17:f2:36:d1:16:26:d3:47:cb:
                    56:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:44:57:31:DA:D3:0C:99:7E:31:1E:87:2E:91:C9:3D:0F:23:82:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/4694d567-b90d-3acf-9655-996af58f9619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl

            X509v3 Authority Key Identifier:
                keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb0a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:0d:53:a4:6a:a6:06:37:aa:f9:a3:62:ab:16:73:ab:68:34:
         54:25:99:b2:b2:2b:91:4f:2b:c9:2f:b2:18:04:09:f3:f3:65:
         61:ae:76:85:d3:4d:ac:b2:dd:11:9b:a0:7f:39:ef:88:91:9e:
         d9:1e:36:b7:03:de:3f:8a:b4:50:10:c4:cd:53:f6:1c:df:aa:
         a6:15:d7:b7:35:d5:b9:2e:59:42:1f:b8:00:02:cc:31:e7:d7:
         7f:69:5b:e9:98:08:75:1f:23:39:b2:b9:6e:9d:88:1c:32:9d:
         77:6a:b1:7a:4a:cd:8b:8c:9c:cc:e3:c8:b1:c8:f0:18:ef:82:
         24:55:5b:63:25:1f:86:27:45:2d:1d:7d:d7:ed:51:7b:20:bf:
         0a:e1:5e:8c:07:5e:cb:08:9a:e4:1d:f4:c5:70:62:db:da:87:
         96:ef:4c:4c:3a:8b:16:ba:97:99:4b:a3:77:6c:cc:d8:3f:7d:
         2c:35:3c:bc:53:c0:34:f4:ac:8a:a3:2f:43:44:35:79:c3:68:
         0d:45:ad:1a:08:31:47:ec:22:e7:cd:37:a7:b0:db:1f:71:56:
         d9:9c:78:56:33:81:49:a6:f6:2d:ba:fe:60:e1:ee:69:d9:b2:
         52:66:8e:84:9b:2c:cf:1e:d2:5a:39:fb:65:17:a7:f6:0e:ae:
         a5:3b:27:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:54:14 2024 by rpki-client on console-fra.rpki-client.org