Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/9f7f1252-7085-3aa5-981d-13d4b5cdcfb4.roa
File:                     9f7f1252-7085-3aa5-981d-13d4b5cdcfb4.roa (raw, json)
Hash identifier:          hzvxNq9HX6oPEWSYEqPEXdGik+/G7aGsAIGfVks0Sow=
Subject key identifier:   97:5E:DE:22:50:D5:5D:61:58:6C:00:FA:D2:73:E2:18:7A:AB:F2:A0
Certificate issuer:       /CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
Certificate serial:       010D0C9F4328584569886BEFE53FA9D17786AE00
Authority key identifier: F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/9f7f1252-7085-3aa5-981d-13d4b5cdcfb4.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     400013
IP address blocks:        2602:80c:100f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:6b:ef:e5:3f:a9:d1:77:86:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=3cf74aee-3085-4972-8a60-7baf00ba819a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:4a:f1:8d:f3:39:f5:fc:1c:a5:f9:06:a4:
                    c4:b0:f9:43:0b:89:4e:ba:37:dd:a2:b3:d2:d0:07:
                    f8:07:b6:f8:92:f3:df:5f:32:2a:bc:3a:2d:d6:25:
                    8b:e9:3d:ed:29:5a:51:2c:1e:79:e3:08:39:79:1a:
                    da:11:89:71:1a:67:78:0f:c2:8e:e1:d5:27:db:9a:
                    40:e7:00:f5:6a:b3:df:36:1e:32:be:23:f8:33:a7:
                    e0:1c:ad:53:18:aa:89:62:93:1c:bd:10:4c:d7:13:
                    a4:f1:c7:16:ab:4b:9a:0b:1e:e7:4d:df:93:88:4b:
                    b3:72:eb:d3:92:a5:ee:e7:fb:f3:a1:43:01:83:58:
                    0a:d7:0e:fc:b6:69:58:fd:96:6c:34:ae:3b:30:92:
                    d5:22:bb:ee:c4:a6:b4:db:50:c9:24:74:42:53:21:
                    42:db:c9:89:bc:81:99:66:25:61:35:c5:ad:8a:ef:
                    a8:5e:92:82:42:c1:6d:50:2a:9b:e9:45:22:ef:a7:
                    0d:c8:e5:6e:21:93:7c:8f:ca:c9:9b:e5:43:f1:8a:
                    44:75:3c:eb:ce:e4:0d:b6:ac:3f:6a:a6:d3:5f:80:
                    70:3c:b6:bc:18:5d:cc:ff:0e:8d:cd:19:eb:e7:f1:
                    5a:d9:46:1c:3b:57:d0:6d:40:e3:84:9c:35:9c:b0:
                    93:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5E:DE:22:50:D5:5D:61:58:6C:00:FA:D2:73:E2:18:7A:AB:F2:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/9f7f1252-7085-3aa5-981d-13d4b5cdcfb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:100f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:58:b1:ac:3f:1d:12:33:0f:f0:a3:10:40:7d:e5:d4:77:cb:
         f7:8a:73:93:f7:77:96:74:f4:e2:27:fe:44:d1:22:f8:ac:42:
         f5:34:26:79:86:bb:6c:9c:72:7d:a1:0e:f8:a2:cd:93:33:2d:
         b3:f0:53:4d:28:89:81:8b:6c:72:13:72:e6:82:11:ea:2c:27:
         53:36:56:cb:e6:fb:8c:3e:0a:5b:d1:0c:d5:fb:6d:7f:31:2a:
         cf:7d:8c:d1:43:0c:55:da:4c:8d:2a:f0:32:00:f8:8b:f4:a1:
         35:88:89:72:43:82:3a:bc:d4:8b:e7:1a:ba:17:32:ef:5c:5f:
         fa:40:e9:e8:5e:eb:a8:60:b3:f9:e6:01:85:75:fb:98:d6:64:
         30:2c:73:c1:23:55:64:51:2b:8b:11:c2:07:b4:f3:63:ff:46:
         19:d6:47:4b:d7:21:a5:cc:9e:03:4d:12:eb:1f:8e:4f:ea:a2:
         03:c9:18:59:b5:c0:46:a2:dc:d9:61:f8:b0:f8:a8:55:f7:e0:
         5c:e4:b8:88:38:6b:6c:e3:f9:f3:d9:34:34:65:f5:0d:ce:73:
         1e:9e:d6:db:1b:ab:68:3a:9a:5a:a2:ed:ef:5c:6c:00:9a:eb:
         cc:ad:99:52:2f:24:a2:30:82:9b:53:1f:ae:8e:0b:0b:b0:27:
         ed:8a:da:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:37:12 2024 by rpki-client on console-fra.rpki-client.org