Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf/3a015928-ee8e-3138-adf8-3a94df3634ad.roa
File:                     3a015928-ee8e-3138-adf8-3a94df3634ad.roa (raw, json)
Hash identifier:          6kvsISv+Ju1+deITflXJRH0kzzURY0/+SIMUUYPgzSc=
Subject key identifier:   06:6D:DE:95:11:5B:9C:0B:C5:12:07:53:39:D1:CC:A8:15:89:80:CC
Certificate issuer:       /CN=9455e8a6-f627-42bc-bc72-fcb5209dffbf
Certificate serial:       010D0C9F4328584529528E789DCDF39DE23A1A40
Authority key identifier: B2:59:F8:B8:AB:22:CA:08:0E:44:01:A3:44:AA:CB:0E:A8:83:55:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf/3a015928-ee8e-3138-adf8-3a94df3634ad.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     13536
IP address blocks:        2602:faf7::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf/9455e8a6-f627-42bc-bc72-fcb5209dffbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf/9455e8a6-f627-42bc-bc72-fcb5209dffbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:8e:78:9d:cd:f3:9d:e2:3a:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9455e8a6-f627-42bc-bc72-fcb5209dffbf
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=a7734217-4276-4293-94d5-3882c579dc62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3a:eb:fc:e6:4e:90:00:6e:b0:bc:ef:dd:38:
                    50:87:42:b1:0f:79:cd:3f:10:90:d4:a0:f5:24:75:
                    51:4a:84:9d:28:98:b1:fe:4d:d1:6e:39:d5:a4:79:
                    36:f9:f9:a8:b3:90:9f:84:ea:5e:9b:e9:2d:90:26:
                    29:a3:74:0f:4c:65:47:94:cf:e6:53:5c:28:de:88:
                    c3:36:6e:bb:84:9c:98:45:09:a0:c0:d6:de:32:d3:
                    cb:16:8c:78:07:dc:3c:8e:f5:48:5e:c6:26:e7:5f:
                    85:a7:32:9a:7b:14:c9:a7:9e:5d:d0:79:e3:79:dd:
                    0e:69:31:62:21:86:1c:a1:ac:fc:5a:33:5d:10:52:
                    b3:0d:f7:60:01:78:38:6a:5e:2d:05:04:7b:5e:07:
                    53:2d:0d:7d:73:47:cd:30:58:15:4a:6b:ff:f6:e8:
                    a7:aa:a9:c5:57:0f:6c:8a:9e:da:44:9b:fd:26:15:
                    aa:4a:bf:5a:1d:d6:f3:af:3b:c8:34:41:a4:47:80:
                    b2:a0:b8:dd:d4:0f:b5:15:db:18:eb:43:1b:e0:e4:
                    15:c8:f7:84:2e:95:fa:8e:b6:ec:b5:d4:65:1b:bd:
                    1d:27:5e:27:73:b9:b2:77:e7:39:d2:11:7a:85:ba:
                    25:d9:a7:67:23:02:98:3e:5c:ee:fd:fe:d6:7c:1f:
                    4d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6D:DE:95:11:5B:9C:0B:C5:12:07:53:39:D1:CC:A8:15:89:80:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf/3a015928-ee8e-3138-adf8-3a94df3634ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf/9455e8a6-f627-42bc-bc72-fcb5209dffbf.crl

            X509v3 Authority Key Identifier:
                keyid:B2:59:F8:B8:AB:22:CA:08:0E:44:01:A3:44:AA:CB:0E:A8:83:55:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faf7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:82:b4:30:9d:50:93:72:12:16:ba:b4:e7:41:17:a9:fa:eb:
         29:a1:c9:84:77:a8:60:c9:f6:03:f0:56:06:d9:77:77:77:51:
         2e:cf:76:1b:ef:d6:ff:9e:ee:c3:1c:f7:4c:c8:f8:61:c1:d4:
         10:22:76:c7:66:de:8c:58:92:b7:ae:81:af:6e:8b:39:cf:78:
         ae:4a:85:b0:68:a8:f0:4e:e0:27:e9:7e:83:ef:2f:8b:71:e0:
         a5:bd:65:19:94:3f:11:84:15:be:96:9a:e6:aa:4f:04:b6:b5:
         5e:67:05:62:6e:aa:78:2d:73:9b:1f:17:aa:f3:3e:49:91:61:
         5a:72:7a:ef:31:ac:4b:79:e2:01:d1:5f:42:29:2c:33:9c:10:
         79:e8:da:6e:ce:0f:05:d5:5d:37:a4:a5:21:8e:d0:ae:49:80:
         43:6d:da:db:e5:bb:7e:7e:c4:45:ae:4f:88:26:d0:a8:80:94:
         38:3d:fb:b8:87:f5:a6:e3:1b:47:7a:bf:35:dd:43:9c:a3:21:
         ae:9d:3f:90:28:4e:f0:75:c7:f4:bc:92:72:ee:9d:82:3d:ba:
         e1:96:ec:11:b9:19:d8:06:e0:6a:0b:90:c8:94:42:ca:5d:65:
         45:df:6e:c0:6a:a7:0b:d4:7d:c6:c0:57:e7:8b:b7:31:30:f8:
         d9:9a:01:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:00:06 2024 by rpki-client on console-ams.rpki-client.org