Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/36a05eef-8157-387d-b045-5b3094c12404.roa
File:                     36a05eef-8157-387d-b045-5b3094c12404.roa (raw, json)
Hash identifier:          aAAkUPc8JFTAwPsPwbSjJPTfa51ED8loFmWzwqEzHtA=
Subject key identifier:   6C:69:3C:B5:C8:F8:FC:F4:06:EF:FD:43:36:56:03:5A:88:43:EE:7C
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F432858453A12A8525A4A31BEC7F9A100
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/36a05eef-8157-387d-b045-5b3094c12404.roa
Signing time:             Sat 16 Mar 2024 13:00:31 +0000
ROA not before:           Sat 16 Mar 2024 13:00:31 +0000
ROA not after:            Fri 14 Jun 2024 13:00:31 +0000
asID:                     210630
IP address blocks:        2602:fc24:18::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3a:12:a8:52:5a:4a:31:be:c7:f9:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: Mar 16 13:00:31 2024 GMT
            Not After : Jun 14 13:00:31 2024 GMT
        Subject: CN=b344fb72-4742-4a1b-b1fb-25b6ab4c8be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:fa:98:66:53:eb:c1:f4:1e:22:9b:75:44:
                    9b:62:eb:90:3e:ca:96:9a:2a:08:83:c4:45:68:a2:
                    a8:66:24:1c:9e:92:80:45:fd:89:7e:69:4a:08:9e:
                    39:e2:d1:d3:98:9c:df:a8:ef:4d:4d:3d:82:0c:37:
                    48:b1:bf:5d:00:05:72:0b:56:bb:50:49:3f:98:22:
                    c0:39:a9:71:b4:52:0b:08:7d:62:a2:b9:91:16:2b:
                    1d:60:4d:b2:24:16:2a:15:a7:6f:60:ac:5f:3c:c9:
                    28:a5:f6:8a:d1:68:02:1e:84:67:de:07:d4:19:2c:
                    a9:07:9f:fa:83:84:08:b7:eb:a2:ae:0c:55:22:98:
                    90:70:cd:45:d1:7a:58:00:2c:55:8f:da:ea:99:5f:
                    7d:a1:6a:c4:69:ae:00:84:d5:ec:cc:1b:25:7d:ce:
                    51:48:59:40:48:81:a2:25:8a:09:ee:b2:03:13:05:
                    84:ea:34:ae:e4:3d:b1:66:57:c2:a3:43:f6:38:d9:
                    2e:b4:96:e5:c3:b6:f6:bf:27:6b:34:58:df:00:4f:
                    5e:88:52:be:86:1d:1d:c4:15:bf:e4:18:67:5c:bf:
                    ca:a9:bf:f9:63:4d:5f:5e:60:3d:c2:96:11:6e:c8:
                    d7:31:88:ea:d5:75:1e:73:87:91:62:8d:07:88:bc:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:69:3C:B5:C8:F8:FC:F4:06:EF:FD:43:36:56:03:5A:88:43:EE:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/36a05eef-8157-387d-b045-5b3094c12404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc24:18::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:63:5e:9c:c3:72:72:31:f6:22:33:d5:b1:6f:4e:ab:69:8e:
         58:95:77:58:cc:00:02:16:db:9b:39:52:70:ba:5d:3e:ca:3e:
         22:f9:d6:e4:7a:25:ac:95:9d:8b:85:8e:02:5b:1d:f6:19:38:
         5c:e1:64:fc:5e:13:a9:55:9a:50:d3:84:e1:16:35:92:34:c6:
         72:af:05:60:2d:cf:8a:cb:09:5e:f6:92:59:8a:15:4a:c1:65:
         e4:b8:f9:6b:a2:ae:5e:90:50:91:79:e2:c3:ee:4e:d3:64:59:
         d9:d3:1e:3f:15:17:d6:57:31:cc:f4:93:f2:9c:52:91:b3:28:
         8f:89:19:5f:97:cf:a7:e0:0c:1e:bf:2d:b1:53:c5:3a:5c:64:
         cd:87:8c:bc:2a:b6:94:75:2f:42:f4:6a:a1:48:20:c3:d8:71:
         06:09:65:ed:94:8b:ef:cc:11:93:c0:81:75:f6:5d:8c:08:05:
         88:77:ec:3f:d2:74:c2:c7:80:a3:5d:8c:86:f7:33:d9:e2:0b:
         0b:7e:1d:37:cc:84:d1:f9:be:3f:91:65:09:b5:95:0a:71:45:
         ec:2f:5c:2e:31:e8:b2:be:ab:9b:63:c1:5e:26:f8:87:c6:b2:
         95:7a:c8:d3:8d:18:eb:6b:71:c6:29:1c:7e:dc:68:3c:b0:d8:
         28:21:e4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:43:40 2024 by rpki-client on console-fra.rpki-client.org