Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/cf80a798-57d9-394c-acba-b312af7cffba.roa
File:                     cf80a798-57d9-394c-acba-b312af7cffba.roa (raw, json)
Hash identifier:          tfzA+JzjDAvtCfAPzkT2PKiK+eaa4ebZNr3nohUOB7E=
Subject key identifier:   08:F8:B0:AD:6A:AA:A5:3F:73:D1:E1:B8:EA:CA:74:F1:CE:CF:C4:3D
Certificate issuer:       /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial:       010D0C9F43285847792BADD1781A97C8A1284400
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/cf80a798-57d9-394c-acba-b312af7cffba.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        2602:80f:9000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:ad:d1:78:1a:97:c8:a1:28:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=4544b1c9-4b72-4cfb-82e6-de9364379ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:c5:b2:e7:25:e4:41:0e:76:db:6c:69:fa:
                    c8:4d:42:f6:b4:a2:97:dc:2d:a3:24:68:c6:c6:ef:
                    cf:e0:d8:5f:34:6c:6e:b8:12:71:75:e9:58:da:51:
                    a8:76:ae:9d:e1:43:11:02:3a:5e:bc:fe:91:d7:7c:
                    65:cc:87:dd:8c:67:cd:4c:31:f3:b0:80:2d:49:6a:
                    59:46:90:73:ca:3f:a4:fa:38:35:2c:00:52:60:c2:
                    1e:88:ef:40:7c:79:7a:d3:8e:3f:32:c4:78:69:e6:
                    c0:1a:bf:b3:1f:f3:5e:31:ab:39:8a:9b:3b:45:28:
                    d7:fb:58:93:01:ab:2f:91:6e:99:77:eb:53:ea:55:
                    d5:ef:c3:4f:96:c2:79:cd:ac:08:32:95:67:9a:7d:
                    8b:2d:7c:13:41:f5:e7:af:00:b4:f0:aa:58:3c:34:
                    56:15:ea:95:0e:1b:05:5c:89:79:47:be:e2:f5:24:
                    6f:ae:cf:a3:59:49:63:c5:fa:a2:03:79:fb:b1:30:
                    90:bb:36:d3:cd:55:d8:37:a2:75:dc:74:eb:25:fe:
                    89:4a:09:80:33:78:75:37:37:9a:0b:7a:1e:00:d9:
                    84:06:e7:72:8a:3e:7d:88:4b:fb:64:49:be:ed:8f:
                    7f:7c:cc:aa:82:97:5f:52:1b:be:ff:47:dd:a8:4c:
                    de:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F8:B0:AD:6A:AA:A5:3F:73:D1:E1:B8:EA:CA:74:F1:CE:CF:C4:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/cf80a798-57d9-394c-acba-b312af7cffba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl

            X509v3 Authority Key Identifier:
                keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80f:9000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3d:e4:fd:32:b5:3c:22:c0:09:d4:fe:ac:5b:f1:f2:ae:b0:
         0d:00:db:7f:13:4b:26:f0:f2:a8:eb:44:08:cd:bb:06:6d:c1:
         0c:6f:ab:28:4e:18:8b:9a:18:e3:91:b0:61:ad:7e:f0:5f:e9:
         1f:07:48:b9:56:83:7d:ed:7d:7a:ad:00:74:aa:fa:12:23:68:
         ee:1b:75:a2:41:35:88:4d:4a:e7:84:55:88:fc:09:b1:2b:91:
         04:90:38:b6:7f:4a:50:70:5f:fc:7d:79:f8:e8:48:39:b3:a4:
         e0:eb:70:15:36:21:44:e8:1d:15:5e:bb:c1:19:64:5b:5f:6d:
         95:dc:a8:91:33:69:ca:ca:0d:ee:66:81:15:ea:d3:38:22:6d:
         8a:ce:58:fa:9d:83:aa:80:47:fd:ae:dd:6a:0d:ca:83:a1:a1:
         4d:eb:e2:ae:41:4d:fc:c9:bf:43:c3:47:1e:53:90:2e:dd:87:
         51:d4:f9:db:90:f4:09:51:d9:51:e2:f4:ef:41:c2:0a:48:34:
         86:0d:54:b0:67:36:57:9e:a1:9b:d0:50:53:21:6f:61:13:65:
         b5:ca:7b:ec:53:73:4c:1e:c2:3e:b7:19:f5:e5:67:34:19:27:
         8c:07:b2:52:ba:ff:f8:99:65:52:6b:28:af:ff:52:e8:10:bb:
         b0:6f:4f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:58 2024 by rpki-client on console-ams.rpki-client.org