Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/bfcdd663-08b3-346e-ada1-b6829e7360ce.roa
File:                     bfcdd663-08b3-346e-ada1-b6829e7360ce.roa (raw, json)
Hash identifier:          1YG9zNJOxzOfConDbHn8qXSnfEDiU1qhwIEkYUNtdFo=
Subject key identifier:   2D:5F:CB:2E:05:C5:7B:53:21:DB:CE:45:5D:F5:C1:D1:86:BA:B6:14
Certificate issuer:       /CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
Certificate serial:       010D0C9F43285847D6CF498C98CED322FE4FEC80
Authority key identifier: CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/bfcdd663-08b3-346e-ada1-b6829e7360ce.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        2602:812:2003::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:49:8c:98:ce:d3:22:fe:4f:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=6c85ac22-bd6a-4874-9284-517b1712ff19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d1:76:e3:49:df:f3:97:94:fb:d8:64:ab:69:
                    8d:e9:30:8a:d3:21:28:a3:ad:91:af:44:f8:9c:05:
                    fc:52:34:4c:93:77:a4:7a:bf:9f:3d:4d:7a:e7:51:
                    5d:ea:d5:93:8a:39:16:b1:d4:ee:2c:a9:30:07:d6:
                    91:4e:b2:d7:cf:30:5c:73:5d:4c:ab:22:fd:90:9e:
                    b3:62:84:9b:e3:5c:e6:1a:93:79:f7:bc:35:5f:0c:
                    2f:5f:66:bc:05:88:48:c5:0e:23:a8:48:4e:7c:a4:
                    58:da:5e:52:f4:84:99:5c:f3:be:f2:b0:52:54:aa:
                    af:48:fa:e6:4f:b5:36:fc:a9:3a:b8:0a:f5:dd:83:
                    c5:e7:b6:aa:fb:ec:db:fe:3f:ea:0c:59:73:50:2a:
                    ae:09:ee:da:59:7c:45:fa:62:32:a2:18:9f:03:2d:
                    88:66:28:dd:0d:0d:1f:11:8b:e9:2f:ec:d7:b1:6a:
                    2a:f3:a3:65:dd:07:06:90:1b:1c:1d:aa:1a:3d:60:
                    bd:b7:9b:5c:36:47:ad:db:0d:44:9c:74:bc:6f:f3:
                    32:94:e8:21:a7:e8:cc:19:b9:24:55:55:3b:47:48:
                    05:57:2d:aa:da:2c:3e:d7:d6:d8:46:ad:02:11:a8:
                    33:38:d8:3b:d3:b3:88:6b:46:68:39:cd:9b:ae:e4:
                    b3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5F:CB:2E:05:C5:7B:53:21:DB:CE:45:5D:F5:C1:D1:86:BA:B6:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/bfcdd663-08b3-346e-ada1-b6829e7360ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.crl

            X509v3 Authority Key Identifier:
                keyid:CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:812:2003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:86:dc:e5:b8:5f:4c:39:a6:88:24:75:66:16:de:36:2a:9c:
         d8:a6:f7:7f:08:02:47:e4:ea:b7:3d:4f:7f:9a:2b:24:d0:67:
         9b:04:dd:fe:1c:d4:bc:dc:b3:1a:03:ec:aa:12:87:41:10:4c:
         2e:94:5b:81:c9:12:5f:99:b1:bb:50:4e:94:3b:5e:e9:f7:a5:
         93:db:c7:4e:ae:4f:68:98:c5:2c:dd:f3:40:c3:a2:71:cf:cf:
         87:b2:00:3f:35:31:b1:e8:62:76:4d:bc:57:53:a0:c2:07:6d:
         57:b9:4d:aa:7e:bf:20:b4:c1:db:69:31:d0:29:ef:f2:3d:3a:
         1f:17:4e:74:58:e7:d1:58:d0:36:c9:25:be:14:d1:96:1e:28:
         b0:57:ef:f5:67:f5:60:f3:14:28:9c:6d:d8:60:26:4c:97:f2:
         e8:91:c7:61:24:aa:38:bb:73:39:34:ca:1a:c2:99:1a:83:e8:
         7f:83:00:f3:8d:7d:2e:e9:59:a4:59:24:8a:56:9a:1d:70:b5:
         d2:c1:68:76:80:84:39:be:b0:a3:0a:c3:f0:87:69:dd:2e:33:
         2a:20:70:06:b3:aa:57:be:9c:b8:29:ee:ea:7d:3e:da:f7:b3:
         b6:87:58:e7:62:df:ed:2a:aa:ac:cf:d5:ec:85:f7:7c:a9:05:
         9d:61:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:07 2024 by rpki-client on console-fra.rpki-client.org