Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fda7ca-a272-33a9-be6a-119b03828638.roa
File:                     d0fda7ca-a272-33a9-be6a-119b03828638.roa (raw, json)
Hash identifier:          eErEyxHpkClb7fyOt3fF/KdcUiQnTOCsI6AakkEbquo=
Subject key identifier:   A9:93:AE:8D:0D:89:B1:11:FC:EF:6C:45:CB:E7:DD:47:9D:2D:23:9C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628EC6847ADCA32F78D77480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fda7ca-a272-33a9-be6a-119b03828638.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2602:107:4420::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:c6:84:7a:dc:a3:2f:78:d7:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=17161d8a-22ac-4ab7-bbc3-12b707c50a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cf:9a:8f:95:e3:38:89:00:94:7a:fa:97:e1:
                    03:ef:17:b9:5c:e1:22:4f:3f:c2:1d:e9:cd:d5:e1:
                    b2:19:9e:f1:08:94:ce:a0:a8:6b:e7:ab:78:0e:e5:
                    9b:e4:88:3d:39:fb:f6:d3:6f:91:fa:04:eb:fc:a1:
                    b5:c5:cf:47:10:78:ca:df:63:e3:63:f8:be:05:a3:
                    64:87:28:3c:86:02:49:d8:d3:76:b7:8c:58:af:54:
                    6c:fb:0e:26:df:f6:a9:9c:ff:e5:f2:da:f7:e3:3d:
                    9c:f5:35:ef:64:71:1e:30:7d:0a:f5:ed:25:36:b0:
                    dc:2c:4c:36:0c:9b:4e:ea:32:56:38:e9:11:86:63:
                    e9:a2:bc:c9:6e:63:e5:20:8c:68:c3:bb:23:06:ba:
                    56:b6:eb:c2:f4:32:18:eb:70:03:3b:f6:8a:7e:7f:
                    64:9f:92:13:97:b0:92:17:9a:bb:3c:45:72:b2:b0:
                    b4:59:f6:58:e8:20:5c:6d:2d:5f:b2:b1:52:96:89:
                    ab:0b:80:f7:70:c7:6b:3a:f1:84:b2:53:5d:68:cf:
                    a9:d5:c4:b6:30:8b:1d:2a:ee:f4:b5:bc:6b:b9:cd:
                    63:95:2c:2c:4e:fe:52:68:8a:e3:d8:81:a7:c3:33:
                    ca:0a:49:e0:f9:c3:c9:49:7a:13:12:b8:9b:12:47:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:93:AE:8D:0D:89:B1:11:FC:EF:6C:45:CB:E7:DD:47:9D:2D:23:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fda7ca-a272-33a9-be6a-119b03828638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:4420::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d6:6c:3b:d6:e3:4f:06:77:b2:39:de:ef:a2:3e:d8:a2:e3:
         c5:31:67:b9:68:41:ef:33:01:77:c7:77:ec:d1:d3:10:4f:0a:
         bd:04:3d:09:3f:02:b5:9e:a8:da:9f:70:e4:a4:af:56:09:c2:
         4e:b1:9a:23:d5:53:3d:c0:ca:44:6a:1b:94:ec:96:1b:b1:c7:
         0a:7d:a5:8d:0d:5e:ad:ce:e6:6f:da:85:1e:36:87:56:58:47:
         cb:be:bf:ba:64:14:9c:7c:38:fa:0a:45:63:8f:dc:a4:84:62:
         97:24:15:07:a1:1c:c3:b2:8e:8a:ad:ed:aa:b1:8c:15:64:0e:
         8b:aa:3a:93:5c:0b:1d:5d:dc:f2:bb:c5:fd:9d:14:57:cc:67:
         51:2a:cc:e0:36:e1:07:c3:ab:16:78:55:fc:9a:1b:59:42:08:
         35:40:7f:e5:b4:41:c0:37:6a:74:70:11:c4:c1:cf:07:ba:68:
         ed:33:a6:fb:66:29:ff:ab:cd:99:54:05:78:aa:90:1e:ea:e9:
         6a:13:fa:30:85:8d:42:ee:42:16:ab:cf:03:1b:de:6f:d8:4b:
         17:52:99:94:d6:53:0c:d5:0d:93:5c:10:0d:52:fc:4c:80:26:
         ae:f9:91:e2:6d:f7:a0:04:ee:a0:eb:0b:9a:d2:b1:a7:c0:64:
         07:84:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:46:07 2024 by rpki-client on console-fra.rpki-client.org