Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa
File:                     829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa (raw, json)
Hash identifier:          c5MTaHHST1ZFIVlZY3evQhArVQ5zSH0TPJhay3mgOdk=
Subject key identifier:   51:50:1C:EA:05:D2:BE:B7:87:10:60:90:C0:82:AF:C0:5F:62:80:14
Certificate issuer:       /CN=4b9027e9-0517-4775-a6c4-35522e65e4ad
Certificate serial:       010D0C9F4328584558C840740F5E937983264960
Authority key identifier: 68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     398697
IP address blocks:        2602:fcdd::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:40:74:0f:5e:93:79:83:26:49:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9027e9-0517-4775-a6c4-35522e65e4ad
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=8ec612a7-c9a0-47ed-abe9-1322b7b0e64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d0:66:92:41:72:61:2f:cb:0f:64:7f:bf:6f:
                    d0:41:ed:1f:d7:1d:e1:8f:0a:d7:47:d6:05:3d:88:
                    1f:eb:20:0c:32:72:6f:69:cc:15:8e:55:1b:f4:64:
                    8d:ce:91:62:c5:e5:f0:5a:db:27:17:46:75:1c:1e:
                    54:bf:5e:f4:95:67:36:79:27:a8:3c:bf:6b:bb:b1:
                    36:8c:ea:cd:72:d7:0c:b8:36:df:4f:38:8f:61:07:
                    58:58:c5:f5:26:3a:91:de:72:18:32:dd:fd:e4:9a:
                    e0:00:2f:5c:5c:56:93:b5:bf:b6:81:6e:ec:f5:d1:
                    9b:91:60:9a:f2:62:01:29:4f:6d:a8:75:c0:4e:87:
                    e5:0a:dd:95:3a:d0:26:71:11:7d:55:d2:a7:11:36:
                    b0:92:8a:e5:30:6a:74:27:a3:e2:84:86:d7:60:4b:
                    78:b8:89:34:d7:1f:29:ad:44:f3:b6:fa:31:62:a8:
                    5e:65:6f:78:e1:57:56:0d:93:23:55:da:45:50:2e:
                    5a:ef:d2:de:e2:98:fb:7d:90:ba:d9:af:d9:dc:2e:
                    39:7f:f9:dd:03:9e:a5:b6:38:8a:f5:fa:a4:eb:51:
                    d9:53:69:60:a6:bb:62:ae:1b:87:88:79:da:d4:ef:
                    9d:a0:ee:03:31:30:4a:38:94:1b:ea:99:0b:5d:f0:
                    49:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:50:1C:EA:05:D2:BE:B7:87:10:60:90:C0:82:AF:C0:5F:62:80:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl

            X509v3 Authority Key Identifier:
                keyid:68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcdd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:9a:78:13:b0:e1:e4:53:7f:dc:20:2e:39:df:51:a8:60:e3:
         af:f8:f5:27:d5:ad:4e:3c:ca:8e:97:13:d6:cb:c2:55:e4:fd:
         0f:43:6c:f2:d2:cb:cc:c0:36:fc:90:54:9f:61:5d:67:62:58:
         57:ea:3a:e3:02:dc:83:60:ca:be:1f:08:83:48:c6:9d:34:ac:
         15:69:fa:1f:b1:37:e0:fc:28:cd:b2:44:82:66:8b:23:91:fe:
         07:8c:ae:2d:26:38:1c:b3:6a:3f:0f:9e:28:86:89:2b:de:df:
         8b:0c:74:9a:95:4d:37:b1:a7:9d:a5:7c:81:39:c4:71:5d:09:
         04:b8:a7:42:a6:64:20:3e:c3:f6:12:75:3f:76:33:45:fd:6c:
         a5:5f:91:dc:fe:d1:24:3e:3d:ae:ef:10:1e:0c:dd:c7:a3:23:
         43:d5:3c:09:80:7e:75:3a:e8:02:5f:79:1c:70:fc:88:9f:0b:
         84:ee:0e:84:47:58:fe:7c:0b:ec:e4:21:02:7d:cb:ef:cc:87:
         78:c5:a7:cd:79:87:46:9f:4b:db:23:d8:8f:e5:9c:c8:07:a5:
         12:72:3d:bf:4d:3f:b3:8c:6d:e7:00:0f:02:72:1a:24:37:b1:
         98:42:40:cc:22:54:27:03:41:51:df:e8:42:df:09:0a:73:32:
         15:97:a0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:27:42 2024 by rpki-client on console-fra.rpki-client.org