Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa
File:                     a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa (raw, json)
Hash identifier:          kGIPF+5/QjjnlpNC5+mTxE6KGR3sQNM97ZJkiLp/AHQ=
Subject key identifier:   6A:2D:07:C5:74:92:6E:96:B7:A8:3D:C4:00:45:58:60:12:7F:D6:07
Certificate issuer:       /CN=97e6dc25-3cc3-4f4e-ad93-6bcf11c844da
Certificate serial:       010D0C9F43285847A5D6A96CC7CB5A818EB4C680
Authority key identifier: 74:F3:80:33:A5:3E:5F:68:0E:7F:C5:24:F2:B4:7B:2A:8B:76:52:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     395915
IP address blocks:        2602:811:4000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a9:6c:c7:cb:5a:81:8e:b4:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e6dc25-3cc3-4f4e-ad93-6bcf11c844da
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=2bacdb54-6bb4-438c-8cd3-fd3a74ee8f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:dd:e9:92:6a:bd:0e:3c:e5:c1:98:c3:d7:
                    2f:bb:d3:5c:68:ea:bf:44:6f:87:f6:00:de:db:32:
                    63:1c:0b:ed:18:03:4e:d1:e4:1a:5c:97:81:79:31:
                    13:94:86:b1:95:3c:e2:55:ab:f8:31:fe:54:43:a2:
                    de:cb:66:36:d2:42:fd:8f:98:5e:1b:05:0f:0e:26:
                    65:89:cc:ce:24:de:8f:08:0b:50:6c:2c:b4:bf:d0:
                    a9:ec:91:6a:98:bd:f2:f8:e3:51:31:16:1d:3c:5f:
                    83:54:05:08:e4:39:c0:ce:91:82:c3:de:96:d0:13:
                    d3:c3:fb:da:b0:28:74:cd:a9:e0:81:2e:dc:ce:d7:
                    a1:0e:9d:b2:aa:92:85:7e:ba:1a:bd:ef:7e:dd:d3:
                    99:c3:7e:64:1c:86:a1:7b:da:ac:4d:5f:9b:36:6e:
                    7d:e6:a6:81:c5:9c:e5:70:68:fb:0c:92:c2:c2:6d:
                    af:d6:04:35:b2:cc:a8:7a:38:1e:53:1f:71:72:9a:
                    31:8a:8d:f2:3b:f5:39:ae:80:3b:f4:1c:40:2f:33:
                    16:0c:98:35:52:6a:da:0f:5f:c7:43:b9:05:02:ef:
                    b5:90:ec:9b:7b:d6:c0:3c:01:d4:a7:01:63:2c:66:
                    76:00:78:58:96:d7:d0:a8:8f:e6:15:6e:fa:68:a8:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2D:07:C5:74:92:6E:96:B7:A8:3D:C4:00:45:58:60:12:7F:D6:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.crl

            X509v3 Authority Key Identifier:
                keyid:74:F3:80:33:A5:3E:5F:68:0E:7F:C5:24:F2:B4:7B:2A:8B:76:52:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:811:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:60:b1:98:82:95:db:b6:01:bf:a5:f9:23:e6:f3:23:1e:5c:
         9a:ef:b4:40:dd:9b:6c:5e:6f:53:b5:db:da:32:2c:a6:63:ef:
         54:28:ef:b1:05:11:74:60:1d:0a:93:34:85:dd:4d:ed:d6:03:
         1a:69:b2:c1:cf:f2:6a:97:e0:ff:0b:ed:a7:7b:1d:3b:0c:a8:
         85:93:e1:a1:e3:ad:7a:80:a7:f7:68:3c:70:22:6a:58:01:71:
         2c:da:ef:1f:bd:db:19:b6:3b:9a:0c:b3:ea:55:61:0e:44:23:
         d6:1c:8a:5b:0c:af:5e:a5:e7:b4:ad:c4:8f:5e:a4:d6:cc:27:
         fb:a6:be:76:23:e9:38:1f:5a:23:aa:05:f2:e9:69:56:5d:61:
         39:86:aa:ac:7f:3e:fa:f7:7f:eb:bf:97:d1:95:db:4f:4f:06:
         16:07:0b:85:c9:87:2e:0e:7a:ed:6b:e0:d1:60:4b:f6:d9:76:
         3c:d2:3e:eb:2b:91:05:79:b1:b8:7b:73:9a:e5:b2:53:88:e9:
         10:5a:f6:41:74:c2:47:59:8a:7c:5c:28:ac:6e:ef:06:08:53:
         b9:dc:c3:3b:b3:39:2b:ae:56:30:84:93:9b:41:cb:84:2e:db:
         cb:ff:84:2c:74:e6:3e:88:01:ab:84:28:47:e2:46:7b:47:07:
         ae:46:99:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:12 2024 by rpki-client on console-fra.rpki-client.org