Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6b68391d-edd1-3765-936c-281608f3a8db.roa
File:                     6b68391d-edd1-3765-936c-281608f3a8db.roa (raw, json)
Hash identifier:          krnK/9X+ranQy/MFEOpAbWMRTVj/GPqhJF49OsmBOls=
Subject key identifier:   37:4C:71:DD:99:4F:22:05:1F:B4:43:29:C7:FB:28:80:FA:B2:EF:30
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845B4E8D892FDA2FF99793F0140
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6b68391d-edd1-3765-936c-281608f3a8db.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     20001
IP address blocks:        2602:107:4e00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d8:92:fd:a2:ff:99:79:3f:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=f0aefe37-4fbc-4165-b52a-b6fe4a604f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:cd:68:bc:2f:b3:d3:8e:e4:ad:80:f8:2a:
                    77:fb:f2:88:41:c5:3e:23:bc:7d:20:29:e3:78:3f:
                    21:73:61:5f:79:86:84:fc:5e:31:73:8f:ad:1b:6a:
                    14:bc:5c:8b:0a:39:98:7e:25:fe:f3:f6:f3:5a:00:
                    10:b0:2e:a2:80:ea:31:09:34:93:7c:30:cd:2b:5e:
                    f2:5e:49:39:3d:45:d0:87:d8:fc:f6:9f:40:bc:57:
                    32:20:25:8b:72:8e:9c:17:bb:59:3d:8d:6e:b1:53:
                    9a:71:00:20:9a:9d:cc:bc:8e:59:51:35:86:d4:b6:
                    5d:ab:57:40:4a:22:1b:39:fb:cf:d8:df:e6:80:c8:
                    6b:39:93:63:66:48:9b:28:fc:ae:3f:b0:cd:57:cf:
                    36:f6:6b:38:13:a6:39:44:77:0c:32:77:e8:87:18:
                    a1:41:08:57:3f:b6:e4:18:7f:9c:72:5a:70:9f:f4:
                    6f:20:a1:a2:1a:82:2a:d9:ff:80:96:2e:62:a9:74:
                    80:60:a5:e1:ca:14:89:4d:c2:1d:18:62:0d:49:0e:
                    6c:3a:b8:be:4c:50:b7:f5:ef:2d:5b:dc:f2:92:69:
                    f5:84:76:9c:8f:c9:e6:18:90:76:29:26:8f:97:81:
                    5b:05:03:9a:78:f3:58:9b:df:c0:ae:47:5e:af:19:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4C:71:DD:99:4F:22:05:1F:B4:43:29:C7:FB:28:80:FA:B2:EF:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6b68391d-edd1-3765-936c-281608f3a8db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:4e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:9e:ee:e5:6f:72:d5:8e:ae:c2:4c:67:6c:cc:68:b0:cd:99:
         5d:23:19:54:56:15:f2:a1:37:ac:3c:6e:58:3f:b3:65:84:bc:
         67:f5:1b:7b:86:1e:63:77:70:c5:36:2c:9d:31:92:aa:5f:c8:
         5f:cf:58:60:d8:14:dd:0d:eb:05:a6:17:23:be:79:8d:ce:d4:
         da:0b:04:d3:17:c6:af:44:f0:07:50:4f:b8:62:aa:59:86:43:
         34:08:76:69:34:44:de:e0:c8:75:78:74:99:e8:ac:9d:f0:74:
         ec:6b:80:a8:c4:de:2f:5a:fa:e4:1d:e7:9b:cc:27:1b:51:dc:
         80:a7:54:37:95:d2:7a:75:71:44:e8:5e:ea:d7:53:e0:0d:aa:
         49:4b:fc:a5:01:d9:0c:f5:43:2d:21:1e:bd:af:81:ba:17:13:
         e7:38:eb:cc:52:b4:50:2b:90:1a:d8:f1:47:1b:26:4b:22:31:
         fd:02:d1:d3:0b:7b:58:ef:d2:10:a4:f3:c7:52:f0:44:39:e2:
         27:65:3e:32:35:9c:20:26:d5:c0:68:d5:cc:2f:19:98:de:01:
         63:bf:c0:3f:e3:df:58:28:b8:f9:fe:af:05:eb:2a:9a:2f:fd:
         1b:df:62:4d:f5:81:4a:ab:af:c4:91:7a:35:c1:49:ba:b4:7b:
         ea:be:8e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:45:57 2024 by rpki-client on console-fra.rpki-client.org