Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a779eb87-ca2a-3863-af7a-2c41e8f76df6.roa
File:                     a779eb87-ca2a-3863-af7a-2c41e8f76df6.roa (raw, json)
Hash identifier:          Hj/9i5K7dlIK8uzI7ph2sZWDXEE6stEzR2yQNx+R6r8=
Subject key identifier:   83:76:7B:48:99:5B:05:1A:F5:CC:1D:C7:9B:3D:1E:D8:17:8B:2D:51
Certificate issuer:       /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
Certificate serial:       010D0C9F432858429679065CCD857FEDB4BECB80
Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a779eb87-ca2a-3863-af7a-2c41e8f76df6.roa
Signing time:             Tue 18 Jul 2023 13:00:17 +0000
ROA not before:           Tue 18 Jul 2023 13:00:17 +0000
ROA not after:            Mon 16 Oct 2023 13:00:17 +0000
asID:                     33696
IP address blocks:        2602:fa8a:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Jul 2023 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:96:79:06:5c:cd:85:7f:ed:b4:be:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
        Validity
            Not Before: Jul 18 13:00:17 2023 GMT
            Not After : Oct 16 13:00:17 2023 GMT
        Subject: CN=de51bd03-1513-4f9e-9748-a4d2a4d108cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:20:85:88:18:a9:f8:82:f3:e5:df:8a:74:
                    41:9c:79:b0:75:96:25:77:6c:cc:13:ce:4b:12:b7:
                    f3:b6:3f:1d:c5:ad:4d:13:54:58:21:e2:40:d2:4e:
                    a4:9e:34:d1:c4:c0:45:05:d3:7c:cc:07:69:00:09:
                    31:36:d2:17:5f:97:b7:30:53:f4:74:b0:43:b0:a3:
                    b8:a0:32:58:39:3c:08:1e:62:94:e1:6b:56:8e:72:
                    20:01:65:39:89:4e:b5:de:6d:c3:2a:c4:7b:40:92:
                    ca:03:a2:bc:85:8e:28:ea:24:6f:a7:d3:da:65:42:
                    cd:57:0f:05:ce:d4:0f:ef:36:91:93:ad:53:94:76:
                    36:1f:a5:a8:16:94:73:c8:f2:cb:39:c4:f7:83:13:
                    80:f9:06:7b:f1:2a:28:3c:e9:83:66:5e:43:df:fb:
                    36:4c:37:02:82:25:5b:b5:d6:e5:14:52:32:92:27:
                    97:31:0a:e9:89:c8:a4:23:3e:1e:45:1a:88:a1:30:
                    57:c5:91:1e:e0:1c:0c:de:6e:de:87:23:ab:a4:f2:
                    68:6f:00:07:8b:fa:3f:67:5b:f3:ed:0d:97:ed:eb:
                    a7:7d:74:e7:93:8e:bc:16:96:2f:7a:3e:c3:f2:8e:
                    e9:19:e8:39:2f:3e:f4:aa:9a:71:3f:c5:6e:98:8a:
                    dc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:76:7B:48:99:5B:05:1A:F5:CC:1D:C7:9B:3D:1E:D8:17:8B:2D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a779eb87-ca2a-3863-af7a-2c41e8f76df6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8a:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a8:89:e1:80:30:6b:11:bc:a7:2b:15:13:4f:4d:71:a0:c6:
         61:ed:5d:ca:c1:32:06:c9:27:6c:91:59:62:20:6d:04:2c:62:
         ff:9e:20:2b:db:25:44:e5:33:0d:d3:64:e3:0f:4e:c6:00:20:
         56:7e:9e:26:76:0c:98:de:0c:5d:9e:a5:6d:ca:4a:7e:4c:c1:
         cb:82:a9:1d:d9:e0:b6:49:82:c8:75:6d:9d:78:4d:83:ea:dd:
         f8:0e:99:1f:a5:6a:ea:af:d0:a6:6d:95:55:dc:3d:3f:03:bc:
         92:59:bb:e0:c2:85:9a:8a:4b:6f:58:ca:af:94:6b:83:d6:ec:
         c8:35:cb:6e:96:34:41:a9:f3:d2:81:69:84:3b:0e:76:93:d0:
         8d:63:17:c5:00:af:8e:87:99:63:4b:ca:7b:9d:9f:3a:a8:2c:
         7e:dc:1c:8f:e6:2a:76:a4:7a:ee:85:e1:a6:90:72:1d:9e:e1:
         7b:ba:c9:ec:bf:0d:ea:a7:ae:6c:54:a3:2e:5e:11:1e:f3:1f:
         f3:38:f4:b4:dc:bd:09:b8:03:f9:13:52:2c:88:2e:a5:33:9a:
         6b:c5:95:5a:6b:cb:c1:15:c7:a4:b0:51:ae:fc:d6:ad:c4:c0:
         ac:b4:12:f9:a9:01:4d:30:5e:1e:0c:3e:b8:e7:11:ce:f6:18:
         2d:f4:bf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 22:42:21 2023 by rpki-client on console-fra.rpki-client.org