Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/b7b1282b-6b3d-35d2-8d00-dfa74b61bf0b.roa
File:                     b7b1282b-6b3d-35d2-8d00-dfa74b61bf0b.roa (raw, json)
Hash identifier:          8I3K38w3YT379oDt6ATES8bTPpBr8vwfcemxDEMC1rI=
Subject key identifier:   B8:1B:A8:99:B6:63:9F:73:C3:B0:D0:8F:E5:58:7C:56:95:60:61:E4
Certificate issuer:       /CN=a97ec683-752f-402c-9901-cad9c007976f
Certificate serial:       010D0C9F432858452C1D3FDDC05F8BCB4AEC3880
Authority key identifier: D4:79:40:E9:8A:39:8D:AE:C3:51:4B:CE:C9:9C:1C:9B:92:CF:AA:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/b7b1282b-6b3d-35d2-8d00-dfa74b61bf0b.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        2602:812:b000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:3f:dd:c0:5f:8b:cb:4a:ec:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97ec683-752f-402c-9901-cad9c007976f
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=39ee2ffb-b305-450c-89ed-cfc71a5d4e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:37:0b:c7:cd:54:94:9b:04:e9:8e:fd:4d:
                    5c:81:b3:20:05:31:f3:39:91:85:20:37:a5:97:28:
                    68:a3:d1:49:73:f9:90:70:be:06:78:d1:8c:af:01:
                    79:52:ab:9d:ab:e1:6e:63:a0:51:76:e0:34:0e:7d:
                    cc:dc:c9:d3:6d:6c:66:29:da:55:54:1a:08:45:36:
                    c4:51:a8:25:e0:f4:02:2d:31:a3:04:60:b3:6b:a0:
                    d4:ab:14:80:14:38:fd:51:73:74:83:08:c2:cd:ac:
                    a5:6e:81:72:a1:a8:89:82:2c:93:93:51:10:13:c4:
                    b9:f3:a3:81:ad:d5:91:02:88:27:3c:e8:f4:bb:5a:
                    8d:c0:1f:76:eb:5e:dc:fc:a6:85:7f:2e:e8:4f:43:
                    9e:85:7c:04:98:f3:fb:02:cb:9f:16:9d:13:d1:ae:
                    8d:6f:df:33:f2:53:cd:8a:59:66:ba:85:84:87:76:
                    a9:ce:4e:df:b6:41:f2:18:dc:70:58:f5:22:f5:89:
                    14:d8:e0:3e:de:b9:54:c9:70:44:80:ba:d8:50:5f:
                    09:3f:23:53:13:5b:bc:d0:93:c6:c3:c5:4a:43:bc:
                    52:64:a4:ca:37:8b:d5:6c:15:82:3b:15:0b:d1:8c:
                    ff:43:2c:40:97:fb:d7:69:f0:9c:95:54:ff:79:43:
                    a4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1B:A8:99:B6:63:9F:73:C3:B0:D0:8F:E5:58:7C:56:95:60:61:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/b7b1282b-6b3d-35d2-8d00-dfa74b61bf0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:79:40:E9:8A:39:8D:AE:C3:51:4B:CE:C9:9C:1C:9B:92:CF:AA:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:812:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:43:6f:4d:44:36:c7:f2:10:07:ea:53:17:ca:8d:98:3c:2c:
         89:96:03:c5:9b:ee:45:20:15:06:c4:24:41:d7:6d:9a:bd:bc:
         69:d4:f7:2b:48:e6:b3:57:7a:5e:6c:4a:3d:72:29:0b:00:11:
         6f:25:d2:af:05:d7:b8:be:37:5e:f3:ea:ee:08:a9:48:d9:a3:
         81:bd:2a:8f:5b:97:f6:50:1b:b9:04:b2:70:c8:be:d7:15:f5:
         2a:67:10:d0:96:fb:98:cb:85:5a:18:71:e8:6d:bd:36:40:8c:
         ec:19:98:bd:5a:2d:73:f5:8d:57:24:a7:21:63:6d:5a:71:ad:
         06:a2:d9:fc:9f:6c:7a:44:77:8e:38:53:ac:2b:03:b5:a0:99:
         85:dd:b1:0a:99:26:60:66:ad:20:f1:fc:a3:fc:07:40:9b:13:
         0a:be:7e:cf:b8:67:dc:ad:8b:14:fd:44:5b:c1:30:ab:b0:7f:
         db:3c:05:04:88:e5:4a:06:f7:c5:e9:a3:35:06:aa:c3:f8:1b:
         37:1d:7e:8a:46:1c:86:17:4b:35:52:d0:fb:94:ad:4f:a0:ec:
         7f:cc:3f:45:34:cf:78:b8:dd:ee:69:7c:67:8b:ea:f4:9a:0c:
         a3:4a:aa:eb:ba:2e:bd:a7:0c:c2:6c:0b:e8:89:4e:3a:88:dd:
         b7:74:e7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:01:30 2024 by rpki-client on console-ams.rpki-client.org