Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/467816f8-d692-3a30-9a77-8e6fb95b50a6.roa
File:                     467816f8-d692-3a30-9a77-8e6fb95b50a6.roa (raw, json)
Hash identifier:          T/Pg13zbAEzb5m50IkXzxcXluR1bYknpdnNemmVfceE=
Subject key identifier:   F1:C4:E9:B9:48:D4:16:9C:29:83:14:48:62:B5:AB:7A:C2:6A:FA:B3
Certificate issuer:       /CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
Certificate serial:       010D0C9F43285847A73BE1AF78118062E1BB2100
Authority key identifier: D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/467816f8-d692-3a30-9a77-8e6fb95b50a6.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        2602:fb10:40::/44 maxlen: 48
                          2602:fb10:50::/44 maxlen: 48
                          2602:fb10:60::/44 maxlen: 48
                          2602:fb10:70::/44 maxlen: 48
                          2602:fb10:80::/44 maxlen: 48
                          2602:fb10:90::/44 maxlen: 48
                          2602:fb10:a0::/44 maxlen: 48
                          2602:fb10:b0::/44 maxlen: 48
                          2602:fb10:c0::/44 maxlen: 48
                          2602:fb10:d0::/44 maxlen: 48
                          2602:fb10:e0::/44 maxlen: 48
                          2602:fb10:f0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:e1:af:78:11:80:62:e1:bb:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=60d04c7f-a57d-4be4-aa83-ae6628cfb6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2c:b5:20:e7:e2:6a:8d:6f:90:c3:11:da:37:
                    91:e0:c1:6d:0d:3f:d0:46:88:19:44:9d:3c:18:73:
                    7a:b9:16:ce:59:7f:09:6a:8d:49:ec:db:02:b5:cf:
                    5a:6e:0e:07:b5:dc:05:1b:1b:1b:15:f5:37:28:e9:
                    de:10:1b:ed:6a:d2:a2:b6:b3:16:24:a3:99:14:78:
                    bf:f4:59:aa:d0:7d:60:86:71:61:a8:d2:04:0b:01:
                    ae:53:fb:cd:41:0a:be:48:16:1f:3f:48:72:fe:ce:
                    fe:dd:1c:aa:58:6f:97:43:dc:ae:20:b4:2f:f5:4d:
                    8b:b0:78:f1:e7:3b:2d:74:30:f8:00:36:46:d0:5d:
                    63:4c:0e:e9:5d:6c:76:0a:79:17:af:9b:3c:c3:a3:
                    8e:4b:d2:80:c2:fe:1b:fa:d9:3f:10:b5:19:30:ad:
                    5c:7c:d1:b7:18:15:2a:e9:18:95:e3:91:e6:6d:e8:
                    60:fe:6a:ab:d9:a5:96:99:43:cc:c5:8a:3a:df:c7:
                    52:63:13:62:53:90:a9:45:83:0c:29:94:43:1c:e1:
                    09:04:5b:ce:6f:a9:25:7f:38:01:64:25:de:8f:98:
                    71:9f:af:1f:a3:17:a7:cc:84:94:2e:71:41:bf:35:
                    62:34:24:2f:0e:66:ba:5e:d1:1a:26:b5:ce:98:64:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C4:E9:B9:48:D4:16:9C:29:83:14:48:62:B5:AB:7A:C2:6A:FA:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/467816f8-d692-3a30-9a77-8e6fb95b50a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl

            X509v3 Authority Key Identifier:
                keyid:D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb10:40::-2602:fb10:ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:1c:37:f0:40:83:de:dc:90:96:88:70:6b:21:5d:7d:aa:81:
         11:ab:5b:96:30:92:25:ab:67:7b:32:67:a1:24:df:f3:79:17:
         16:31:23:6e:33:55:d7:9c:ba:7d:36:3f:d0:1a:8f:0c:46:1c:
         f2:2a:db:8f:75:b6:67:4d:8b:82:ba:31:65:59:10:fb:ad:43:
         b6:6f:82:97:87:ac:1a:61:d7:f7:81:23:a6:e6:69:8f:93:aa:
         a4:f4:2f:6d:0a:4c:8a:66:4b:95:1a:4e:11:23:75:ac:10:32:
         33:7a:69:4a:9f:dc:13:b2:dd:e6:32:80:17:1b:e2:69:ff:88:
         1b:ed:f4:42:07:b2:54:17:56:9f:0c:3f:39:68:2a:0e:64:e7:
         17:6b:d1:fa:e2:ec:b5:21:e2:7a:8c:74:62:5a:10:e2:34:d7:
         23:57:30:63:4d:c5:9e:be:5b:c1:09:0f:b9:43:a4:b3:6d:a9:
         42:76:23:ac:ae:dc:88:1f:a0:c7:63:00:c9:ae:37:69:20:a6:
         e4:57:cc:cf:d5:46:1c:de:c7:b2:51:97:2b:bc:a5:dd:b0:bb:
         2d:48:f4:88:e7:07:2a:2c:17:df:36:8c:65:59:cd:ee:31:6d:
         3e:42:db:b5:8e:ff:9e:13:4d:8a:7d:2b:e5:53:48:2a:49:8e:
         09:76:c2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:30 2024 by rpki-client on console-fra.rpki-client.org