Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/a7657824-c051-321c-8734-3026e72e5a25.roa
File:                     a7657824-c051-321c-8734-3026e72e5a25.roa (raw, json)
Hash identifier:          BJA+VcwCh2A7aeLC2cf1h9iR+GpvEfOLFYb24hFyKY0=
Subject key identifier:   F1:A9:62:08:81:AF:C2:F1:98:C3:EC:31:EA:5B:14:FC:E2:E6:49:01
Certificate issuer:       /CN=492092dd-7457-4265-80ee-c447496a414c
Certificate serial:       010D0C9F432858458C6DD73F97FFBA79BE230780
Authority key identifier: E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/a7657824-c051-321c-8734-3026e72e5a25.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     211562
IP address blocks:        2602:fc26:68::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d7:3f:97:ff:ba:79:be:23:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492092dd-7457-4265-80ee-c447496a414c
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=ef85a6e9-2468-40f5-8c01-bbe83bc0faf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:ff:e4:51:d3:aa:c7:92:18:06:2a:04:45:
                    4b:22:a0:c5:43:bf:86:3c:54:4f:97:a3:d9:35:78:
                    75:13:ef:5b:c1:a3:f0:02:b6:7a:5e:a2:3f:f3:78:
                    2d:bb:c0:e5:10:4b:77:28:d8:c2:44:b6:96:ad:a3:
                    ff:1a:25:a8:49:5a:45:5b:9b:9e:16:3b:1c:70:f9:
                    df:96:c6:3c:fa:7f:cc:9c:56:cd:0c:cb:98:63:59:
                    61:ad:87:fb:2a:c7:67:63:86:a3:68:5f:18:fd:c3:
                    ab:f1:52:79:8d:74:89:00:14:ef:f7:8e:4d:9f:52:
                    f9:85:e7:39:38:b7:81:68:c6:45:13:03:f3:e1:62:
                    db:68:cc:32:85:7b:8b:fa:eb:7e:c5:4e:d9:fc:ea:
                    6f:82:fd:08:e0:33:e8:d5:1b:b1:e9:42:ab:71:01:
                    d7:99:a0:39:7a:fc:31:9a:56:d6:25:c3:de:88:5b:
                    9b:f0:c0:a0:e3:a3:03:75:57:7d:ec:16:06:ab:d2:
                    5f:73:54:bd:6c:f5:cf:94:f4:a0:8b:e7:94:52:74:
                    ad:6d:93:36:cb:6a:9e:b8:9b:27:19:63:e8:0a:63:
                    12:00:52:53:2b:d9:e5:74:e2:12:7d:43:40:43:a0:
                    44:eb:60:ca:7b:0c:11:52:92:56:d0:51:46:5d:4b:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A9:62:08:81:AF:C2:F1:98:C3:EC:31:EA:5B:14:FC:E2:E6:49:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/a7657824-c051-321c-8734-3026e72e5a25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc26:68::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f6:de:53:1e:e8:57:a9:ee:e3:3d:2c:4b:42:6c:9a:b1:f5:
         b5:f6:42:a8:61:bb:88:d9:9c:94:26:43:70:9d:54:50:be:f2:
         6b:15:37:04:1b:e2:2d:1c:f0:b2:2e:39:d4:6a:7f:89:c6:13:
         5c:8c:ab:6f:8a:e0:3c:48:2d:24:03:81:f6:52:01:3e:3f:14:
         4a:cf:1c:cd:cc:dd:1f:6d:0e:bf:03:57:64:2c:5c:15:4f:1d:
         fb:3a:b3:7f:37:6f:f4:f4:95:61:4f:79:13:1f:c8:01:4c:bf:
         bc:be:48:00:04:ce:8a:64:a4:07:a6:2e:ef:f0:b2:70:b3:d1:
         dd:df:ac:e6:a8:05:33:91:45:27:42:55:ad:86:af:48:96:fe:
         8b:59:b3:c2:26:6b:b2:17:65:ea:e0:8e:ec:d0:d8:c9:a6:e3:
         f5:ba:3b:47:42:cd:e3:7a:e9:1a:10:d6:31:ce:8f:c1:a0:67:
         2a:70:e0:a6:90:c7:f0:4d:0a:72:b1:30:9e:2a:ca:9b:b1:13:
         a1:09:46:da:eb:98:78:0f:09:05:8c:90:e7:f6:d0:58:d4:d7:
         ec:3c:a3:17:cd:15:ba:31:a9:64:b6:a5:98:64:c4:c1:7f:64:
         b0:37:62:be:0e:17:bd:8f:35:55:c9:b7:3c:29:26:ac:1d:2c:
         27:3a:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:34 2024 by rpki-client on console-ams.rpki-client.org