Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/d4641ccb-a449-3d7b-a997-e490d56418fe.roa
File:                     d4641ccb-a449-3d7b-a997-e490d56418fe.roa (raw, json)
Hash identifier:          WWN//Jw77PP/zUcTHeMDs8B8YJAiqyhpmquWfOocRiM=
Subject key identifier:   F5:1C:EC:F0:FE:6C:2B:0A:DF:7E:CE:14:58:93:FA:E3:57:7A:E3:14
Certificate issuer:       /CN=74b205b0-206e-45a4-8d98-55b99a30a8f4
Certificate serial:       010D0C9F43285847F584F3D055F3DDCCDE0E5900
Authority key identifier: F6:1C:B4:58:8A:47:30:C2:B8:C6:BA:47:E0:F6:EB:21:66:10:89:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/d4641ccb-a449-3d7b-a997-e490d56418fe.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     12155
IP address blocks:        2602:fe7d::/36 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:f3:d0:55:f3:dd:cc:de:0e:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b205b0-206e-45a4-8d98-55b99a30a8f4
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=d1b94c4f-7a8e-4351-bf46-932fe2536050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:57:11:46:2d:2b:d7:23:45:4f:b2:ae:08:
                    34:09:41:ed:42:03:64:ba:81:fa:7a:50:e2:7f:d9:
                    08:43:96:ad:7c:94:b6:d4:63:d4:82:fd:58:ce:75:
                    0e:f6:28:17:0e:20:57:e5:ea:d7:bf:04:a4:2d:3b:
                    7c:8b:7b:63:b1:9e:c6:79:07:0c:f5:99:e0:ee:07:
                    8d:da:0c:4c:81:cb:6b:42:d1:cc:ec:2b:d6:80:94:
                    b5:17:ca:30:96:fc:d7:ce:40:ff:9a:1a:71:59:a2:
                    09:a2:1d:d8:b1:3e:8f:10:d0:21:75:87:2e:9d:f3:
                    da:50:ee:2f:d2:a1:4f:14:08:15:96:a4:c6:0b:53:
                    ac:50:56:75:56:2b:91:d8:4d:ee:55:b1:71:9f:ed:
                    e7:d2:d9:b2:57:b9:3e:69:fa:29:fb:a3:ca:9e:b9:
                    a0:74:ba:39:5b:6c:14:4e:30:b0:17:c8:31:67:f3:
                    8f:db:3a:73:0a:65:3b:8d:bf:c1:73:33:1e:03:3f:
                    ca:e4:aa:d4:d5:06:1c:d1:60:e8:9e:ed:76:26:d7:
                    8e:1a:7b:75:24:0f:50:24:cf:5e:45:f4:20:90:88:
                    e0:13:14:5f:00:9f:47:10:5d:01:74:3f:3e:7b:08:
                    cd:d0:ff:fe:a6:f8:2e:0c:48:b1:55:23:19:12:33:
                    5b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1C:EC:F0:FE:6C:2B:0A:DF:7E:CE:14:58:93:FA:E3:57:7A:E3:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/d4641ccb-a449-3d7b-a997-e490d56418fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.crl

            X509v3 Authority Key Identifier:
                keyid:F6:1C:B4:58:8A:47:30:C2:B8:C6:BA:47:E0:F6:EB:21:66:10:89:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe7d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f2:47:55:e5:49:2c:76:1d:1c:8c:cc:97:1b:f3:38:05:f0:
         55:1a:6a:7a:50:a4:05:11:4c:71:70:c9:16:b8:38:36:d5:bb:
         e3:e7:01:3b:40:cd:57:96:fa:a4:cf:b9:81:ab:78:fd:56:88:
         e0:89:f6:b2:bf:da:fc:cb:c7:34:0b:ff:80:cc:8e:f3:f7:f6:
         7e:b0:d1:f7:18:77:ed:d7:63:c6:93:0c:3c:78:45:95:2f:be:
         61:91:26:22:c5:85:c7:6e:e1:b9:16:87:28:a5:a0:67:ae:c6:
         04:9e:0f:f4:ac:e6:8e:17:51:3d:07:b2:df:e1:f7:69:b5:9c:
         f5:3a:b6:66:f9:10:fb:b3:39:40:ba:3d:5f:84:b8:8c:5a:cc:
         67:38:61:7e:16:5d:ee:62:4f:c5:a8:41:ee:6b:c9:f2:54:02:
         12:01:4e:68:5f:04:67:bf:4d:b3:f1:c4:92:68:da:d3:9b:bf:
         e3:80:be:d8:0e:0c:d9:25:97:67:23:ca:6d:34:95:32:56:27:
         0e:e2:7b:2d:c3:96:95:c8:b3:5f:a9:0e:42:3c:20:7f:4e:c3:
         21:7e:20:ac:50:d3:20:6e:b4:90:05:23:2e:43:09:d3:80:01:
         50:16:62:9f:f8:88:b1:be:1c:b9:14:74:a6:2e:fc:5a:2f:44:
         80:09:7a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:09 2024 by rpki-client on console-fra.rpki-client.org