Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/d676238e-417d-384e-9a31-32a2efd3c5be.roa
File:                     d676238e-417d-384e-9a31-32a2efd3c5be.roa (raw, json)
Hash identifier:          szK7QK2waTOulpNxlja7L83emvA/nOwr+Mzn7wtV2V0=
Subject key identifier:   30:04:77:D7:07:A6:6A:16:09:09:65:48:07:A6:C5:76:45:59:6A:73
Certificate issuer:       /CN=090cf75b-f998-45e2-a8ea-c4d882201d24
Certificate serial:       010D0C9F43285845D933AA9D3FA034B83ED56900
Authority key identifier: 14:9C:C7:07:9A:90:D7:69:1D:47:04:E9:AD:6D:E7:D7:CE:2C:7D:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/d676238e-417d-384e-9a31-32a2efd3c5be.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     11805
IP address blocks:        2602:fd63::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:aa:9d:3f:a0:34:b8:3e:d5:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090cf75b-f998-45e2-a8ea-c4d882201d24
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=4fd6af47-c087-4905-99ab-bf57f1e1a040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2f:b5:34:f6:b8:d0:2f:fe:12:10:43:61:3d:
                    30:12:bc:95:95:aa:db:3d:4b:52:8c:46:f4:e4:2c:
                    99:91:36:18:65:06:f7:10:69:e8:b8:f6:e5:75:c4:
                    ec:43:b8:6d:f4:de:f5:2d:b0:d7:cd:26:14:bc:6d:
                    50:f4:dc:9a:03:d9:31:27:df:9d:e4:0f:0f:bd:4e:
                    69:7e:ef:18:7b:2f:64:c6:58:0f:d9:f3:ed:a2:da:
                    40:68:59:ca:39:70:a8:05:8d:4c:93:29:87:f7:85:
                    51:0f:0e:af:3c:f3:a3:a9:3a:4f:75:00:93:bb:4f:
                    89:cc:6d:7d:b6:75:3c:56:0c:a2:bc:23:9f:fc:ad:
                    e0:32:df:dc:3d:18:4f:36:88:83:2b:71:0a:88:95:
                    5b:84:b5:dd:1b:6e:a0:ff:03:1c:11:cb:26:c9:17:
                    dd:c0:d0:d4:17:23:8c:03:7f:39:92:26:57:89:3d:
                    51:fd:3f:bb:25:6b:3d:90:db:f0:84:3c:d5:0b:e0:
                    db:ca:ae:55:0b:51:b6:02:1b:f3:8c:97:a5:b1:92:
                    3f:64:e9:78:45:da:b6:24:a1:3c:b7:38:9e:bf:30:
                    59:65:4a:db:36:37:8a:c1:d3:d3:7b:07:9c:8e:29:
                    05:ad:02:db:e6:03:a4:35:0c:17:18:61:11:3f:30:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:04:77:D7:07:A6:6A:16:09:09:65:48:07:A6:C5:76:45:59:6A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/d676238e-417d-384e-9a31-32a2efd3c5be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.crl

            X509v3 Authority Key Identifier:
                keyid:14:9C:C7:07:9A:90:D7:69:1D:47:04:E9:AD:6D:E7:D7:CE:2C:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd63::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e7:94:2c:b2:92:b3:9f:c2:3f:02:03:a2:9a:f7:1e:fe:32:
         f1:e2:da:13:d5:71:7d:03:ea:f0:42:bd:c5:c6:b4:0f:ca:a5:
         8b:bf:98:ca:78:61:12:c8:88:ff:3a:d9:2f:ac:28:71:31:6e:
         db:b6:90:11:72:fc:66:e2:13:e3:27:48:e6:73:5d:ba:54:69:
         73:ef:86:37:5b:9a:58:fb:f7:7d:05:88:7d:8b:02:04:29:c4:
         0e:03:fc:b2:9c:d1:dd:ae:64:68:14:d9:36:78:af:85:cb:d9:
         f4:b9:21:2f:af:45:84:f0:73:76:a9:2e:3b:35:23:27:6a:c3:
         c3:a5:73:3a:9a:b0:65:5c:cc:77:88:3b:50:68:16:20:62:d5:
         5d:1f:c0:d1:1a:70:60:1e:c0:fb:21:88:a4:fb:66:3b:c5:a6:
         09:eb:54:27:a3:de:d4:55:d3:26:19:58:b0:52:cf:64:8d:65:
         16:16:3b:41:80:23:1c:b6:9f:ed:26:33:60:dd:e0:9a:97:ca:
         9d:69:9e:bb:9e:87:00:77:75:7b:34:c1:0b:ea:44:a2:7d:d7:
         af:59:e5:36:55:07:4f:c5:a2:40:f8:43:f8:92:21:98:63:9f:
         3b:be:b6:48:7a:60:55:1d:0e:4b:95:ae:7c:15:dc:11:d7:27:
         9e:cc:c3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:38:47 2024 by rpki-client on console-ams.rpki-client.org