Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa
File:                     4e00c024-f493-3f70-9db1-bef788678325.roa (raw, json)
Hash identifier:          MQYCwq28Zw0kCKj5aT4ZMeCwpsr/h0oajUre0uJ/9lo=
Subject key identifier:   A0:01:B2:EF:0D:FC:40:BF:3E:85:E2:01:F7:A1:9D:DE:14:3E:AF:0A
Certificate issuer:       /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial:       010D0C9F43285845DEC9149429AF51BF9A189AE0
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     210645
IP address blocks:        2602:2c9::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:14:94:29:af:51:bf:9a:18:9a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=eb6a6e5a-31b1-4a7b-bd99-2701babcb97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e9:22:73:e0:06:09:dd:fe:a0:a1:b9:1e:28:
                    59:ee:fe:ec:92:f9:7f:29:73:c9:c4:a0:d5:cd:bf:
                    7d:22:4d:c4:4e:6e:2f:e1:b7:cd:97:d8:a5:79:94:
                    24:99:09:4d:6a:50:3d:81:81:d0:34:ac:55:21:8d:
                    ee:4f:78:a5:2d:49:a8:ab:cd:f7:ea:fc:16:0d:4c:
                    ec:76:93:3b:20:f9:da:bf:6a:75:bc:a1:a9:f6:9e:
                    78:12:3f:c1:b8:f7:9e:9b:26:60:82:89:ca:b2:44:
                    49:e8:df:a6:2d:84:1e:39:c2:5f:ca:54:b6:8d:ad:
                    68:9f:ea:9f:95:2b:02:d2:bc:fe:1c:9c:10:17:9e:
                    7a:42:42:c5:ac:36:72:f4:2d:40:34:b5:3c:c7:49:
                    65:ba:0a:95:c9:17:6d:75:d3:f7:f6:3f:80:d5:3f:
                    fd:18:8a:02:19:c7:9b:70:89:ab:8f:d9:23:16:4f:
                    de:bc:1a:46:bb:e3:9c:1a:ff:55:f6:5e:6b:85:33:
                    d5:86:4e:58:08:78:55:7f:6f:cc:9b:90:04:a5:17:
                    3c:b4:54:67:27:2a:ac:d6:c2:45:1a:f1:18:bc:5c:
                    0c:df:fa:f0:b2:72:53:40:f7:93:00:07:3f:92:88:
                    d2:a7:32:b3:0e:37:7b:a1:2f:09:ae:af:ac:c1:d7:
                    06:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:01:B2:EF:0D:FC:40:BF:3E:85:E2:01:F7:A1:9D:DE:14:3E:AF:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c9::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:3d:43:45:2e:59:a2:b0:62:00:f6:a3:26:56:1f:dc:c6:e9:
         86:3c:de:9e:e0:70:74:04:75:ab:cd:40:b0:c9:bc:6d:89:0a:
         f6:21:18:65:cd:57:11:74:eb:83:43:58:7a:10:10:0f:33:fe:
         cf:c0:48:13:1a:73:b4:03:7e:ed:83:18:1c:22:92:83:b3:bb:
         d9:f6:38:46:c5:d7:3c:67:8e:2f:59:a2:db:17:ff:43:42:81:
         b4:9e:01:d0:74:13:39:16:12:09:22:4d:c4:5f:9a:60:d2:66:
         a3:4f:70:b4:ba:5e:c1:cd:65:d8:98:34:59:71:8c:e4:ec:48:
         c6:84:c8:a6:d6:aa:99:e4:36:3f:31:5d:e6:e7:e8:de:23:2b:
         b3:c2:e1:f4:d0:b9:c2:38:d9:dc:fc:7e:4e:f4:d0:6f:82:2e:
         a7:02:8f:d8:f9:d1:51:6c:da:c6:40:8f:27:5b:25:58:12:33:
         f9:61:f9:6f:d4:66:a9:6c:cc:e2:03:95:93:5b:f5:8e:4c:48:
         6e:ee:b7:dd:7f:80:a5:c6:39:5f:ea:ea:5d:96:9c:2d:3a:9d:
         a7:7c:41:96:a6:e2:83:1e:f2:a7:26:a9:ab:22:4e:46:1c:41:
         17:24:08:47:78:6e:0b:4a:2a:45:68:d6:3c:d2:fd:98:3b:d7:
         1e:26:71:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:35:48 2024 by rpki-client on console-ams.rpki-client.org