Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/e79010f1-e45f-3297-b37c-c24e052529e1.roa
File:                     e79010f1-e45f-3297-b37c-c24e052529e1.roa (raw, json)
Hash identifier:          z6K4C2wWb07Baa6lgtglD4Fl6ME2/s/9oPVtiMZ+b9o=
Subject key identifier:   95:29:4D:3C:09:64:67:AF:5E:63:A7:2C:C9:09:93:97:62:35:5C:E1
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F43285845D503CB9EEAAFD24F2D986500
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/e79010f1-e45f-3297-b37c-c24e052529e1.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     23428
IP address blocks:        2602:fb68:c0::/42 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:cb:9e:ea:af:d2:4f:2d:98:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=5e495f23-cba7-40fe-8810-59dcec316782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8f:3d:0b:2c:2b:4f:ef:f5:8e:94:15:5d:ab:
                    9b:61:ba:d7:97:71:31:3d:c8:17:8b:ec:98:e5:d2:
                    42:fe:6f:74:07:68:d9:97:79:28:c8:29:ca:17:43:
                    94:cd:ed:3b:70:75:53:26:0c:b5:3d:99:27:32:8f:
                    34:83:4c:fe:cc:63:6b:63:2b:29:53:78:e4:2a:7e:
                    91:ad:67:25:2b:3f:eb:fa:4b:d9:7f:b8:ca:17:73:
                    3e:f3:fc:f1:7e:f9:ae:86:33:4e:c2:5b:4f:c2:40:
                    07:48:ce:76:59:f7:cf:90:85:87:58:03:9b:d8:6a:
                    50:fb:f3:e1:bb:f9:f8:f1:29:78:08:22:51:1f:25:
                    b2:0e:6c:1b:01:81:05:d3:04:f4:f0:14:98:ea:3a:
                    f9:7a:7b:6a:bb:74:0a:54:dd:3a:32:e3:b9:09:d7:
                    9a:a0:5f:3a:64:31:fc:2f:32:b3:c7:b6:a2:95:b1:
                    e7:51:87:6e:a4:d5:46:a9:fc:41:ae:d6:00:0f:4c:
                    34:ec:48:b1:df:46:87:d5:34:20:9d:af:f3:bb:81:
                    c1:a8:35:9d:5e:3e:f9:b4:c5:32:bd:6f:2a:fa:02:
                    e0:52:3c:aa:24:42:45:cb:b5:90:a2:74:b0:2d:54:
                    f5:84:8a:c9:ea:00:76:25:11:98:b1:14:ec:26:33:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:29:4D:3C:09:64:67:AF:5E:63:A7:2C:C9:09:93:97:62:35:5C:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/e79010f1-e45f-3297-b37c-c24e052529e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb68:c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:68:2f:79:48:c6:d1:61:52:77:5f:e4:c0:47:f1:72:87:8f:
         cb:73:0d:cb:9f:25:8c:8e:7b:e6:68:98:0c:e9:56:5c:62:ac:
         0c:33:54:ec:86:3a:56:3c:54:1e:47:4d:04:51:09:5d:02:cf:
         cc:95:57:2b:72:76:5e:98:eb:56:61:cc:5d:db:31:0c:cb:a0:
         ae:ad:a5:f5:d3:4b:48:25:c3:5a:1b:38:80:bf:7a:0f:34:b1:
         d0:6a:42:b7:6e:60:47:51:ea:32:0e:0c:05:3f:b3:51:cb:9e:
         5e:1d:19:2e:8a:9b:63:85:0d:3a:1b:84:02:c9:54:9c:4f:1e:
         f3:8d:44:f3:6e:77:9b:dd:2d:f6:b0:f5:b7:3c:4e:bc:1e:00:
         c4:3e:2b:ad:3d:65:d5:9f:a7:fb:f0:d3:81:86:61:9f:4d:d1:
         6b:d4:4f:ef:8e:c3:50:e6:9d:66:90:2b:d2:20:be:07:08:47:
         42:9f:5c:46:73:a4:e6:62:4f:9a:18:cc:bc:17:20:a6:af:65:
         3a:f3:79:54:3d:c1:a2:51:bb:b1:3a:91:6e:d0:db:7b:9f:14:
         ef:c8:d6:54:57:d7:b1:20:d1:eb:f1:1a:56:3c:51:41:51:df:
         6f:55:02:f9:37:fd:7e:d1:63:a5:ed:23:b3:54:65:5a:e9:83:
         8a:ff:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:37:43 2024 by rpki-client on console-fra.rpki-client.org