Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/490b46b1-8f83-348d-bade-f22a16f26092.roa
File:                     490b46b1-8f83-348d-bade-f22a16f26092.roa (raw, json)
Hash identifier:          q/oXgF0TVicXfD0nIwvfUIO+qi1Rcs390wmLgns0AbI=
Subject key identifier:   52:F1:C8:3F:7D:CF:8A:A2:86:FC:F7:66:3A:8B:EF:F2:F7:FF:3F:3F
Certificate issuer:       /CN=98fa46f5-eef1-4569-9795-c233e7e74658
Certificate serial:       010D0C9F4328584563F314299ACD0B4EEA9A3680
Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/490b46b1-8f83-348d-bade-f22a16f26092.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        2602:802:2007::/48 maxlen: 48
                          2602:802:2008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:14:29:9a:cd:0b:4e:ea:9a:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=35b57db8-b5b5-49fc-b6d5-3fb38a5487f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:37:91:52:40:6a:09:a1:34:3a:93:40:30:a7:
                    09:17:69:94:85:e7:9a:a0:c4:0b:38:43:9e:b9:a6:
                    72:f6:6d:7f:8e:db:80:e5:97:28:c7:a8:3b:7a:a6:
                    c8:4e:50:1e:3c:c6:c0:49:fb:9c:d2:c3:62:90:97:
                    ac:55:9b:c2:15:4a:5c:59:6b:3c:aa:40:07:b8:0c:
                    ed:10:a6:a3:01:e3:94:42:ae:55:9f:96:db:8e:c5:
                    7a:02:61:47:50:bf:83:07:4c:8b:45:10:47:12:4c:
                    ab:f9:9c:94:51:d6:b5:32:5d:e4:64:7e:b0:e2:dd:
                    89:3e:ca:f9:78:d4:75:11:bd:79:1c:29:76:d7:6f:
                    aa:a4:b4:ad:05:08:0e:81:e8:2a:51:7b:63:73:7c:
                    5c:71:dc:7c:b1:ed:ae:f5:92:7c:3d:6e:56:af:56:
                    17:b1:72:f7:a0:61:1a:a8:10:be:77:fd:e8:b4:59:
                    27:ee:6e:e2:c6:74:f1:67:1e:47:7f:ec:5a:da:1c:
                    8f:23:95:e9:b1:45:18:df:36:26:c0:59:90:9e:f3:
                    2e:83:89:7d:72:05:1c:78:84:90:06:e2:21:20:92:
                    b1:7b:7b:48:93:01:5f:05:66:68:35:97:30:cf:88:
                    8a:dc:fd:86:74:4b:48:c9:3a:36:f6:d3:b2:4c:7f:
                    fc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F1:C8:3F:7D:CF:8A:A2:86:FC:F7:66:3A:8B:EF:F2:F7:FF:3F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/490b46b1-8f83-348d-bade-f22a16f26092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl

            X509v3 Authority Key Identifier:
                keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:802:2007::-2602:802:2008:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:1c:19:94:a3:03:59:8c:5e:9c:25:1b:4a:84:b9:3b:e9:ad:
         96:23:1c:fc:3c:9f:11:51:b7:32:70:69:e8:ea:7c:29:f9:b2:
         70:84:63:ba:16:76:81:f8:82:71:1d:ac:ed:20:ac:2c:1d:f6:
         d3:bb:15:83:dc:ae:d9:16:4e:5b:0c:7d:3f:8b:a6:2f:04:38:
         44:cd:8e:2b:48:b8:d1:a8:b3:1c:cd:33:73:28:c1:86:19:f6:
         12:5e:2a:f3:32:83:64:47:cd:ab:01:e3:c3:7d:9a:9c:19:1d:
         6d:36:56:0c:58:ad:5d:ff:1a:7d:58:df:89:a0:d9:92:1c:3a:
         41:9a:23:26:6d:99:ae:98:20:2d:0f:ec:6c:df:b6:20:35:06:
         7f:6e:57:30:35:ac:1f:98:3d:32:db:9b:f6:0a:d0:8b:54:29:
         2a:b7:05:4a:a4:36:be:f2:3e:b0:7a:a8:a9:04:c2:5a:a0:b2:
         63:a2:1c:57:0b:e1:f1:1b:43:c5:0a:88:14:44:b0:6f:b7:04:
         0b:65:b9:22:6d:42:93:ef:b9:60:df:4f:ce:52:b9:0f:d2:43:
         c9:99:03:fd:8b:91:fa:93:6e:f5:55:f7:a7:1c:2c:16:cc:da:
         70:4f:37:7f:97:e9:4f:41:7a:0b:c5:b3:5a:b9:18:8f:54:77:
         de:21:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:59:59 2024 by rpki-client on console-ams.rpki-client.org