Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa
File:                     c8b738ed-fedf-3c78-8f42-d6417729ca05.roa (raw, json)
Hash identifier:          V86kNVCTeiVGM21PqAx6DsINJ0jOQ/EtI3yvUOShsKc=
Subject key identifier:   7E:0E:16:10:93:89:69:C7:7C:A4:62:DD:EC:3F:C8:65:51:50:23:05
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F43285847F2BA2A0D3077175E12191510
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     206216
IP address blocks:        2602:fb54::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:2a:0d:30:77:17:5e:12:19:15:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=bdea4eee-e4de-4b5f-95bd-dafb5384472c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:4b:aa:2e:37:bb:b8:1a:8d:04:95:e4:ff:
                    98:44:fe:e9:3d:d5:82:df:8b:3e:7d:ea:e0:e6:28:
                    6e:0f:d4:15:02:58:5c:52:17:07:88:cd:91:9b:f5:
                    be:09:db:d9:3e:b8:48:76:05:93:81:93:3b:19:78:
                    3a:51:69:08:2d:99:2c:fc:68:3f:0c:4d:87:74:b6:
                    ca:46:98:f5:a4:8c:60:da:fd:39:09:84:77:d5:fb:
                    b2:2d:c8:52:45:e1:ea:74:bd:55:5c:46:34:27:a9:
                    2f:c0:62:cd:6d:f9:b4:84:8c:e4:bd:51:db:ec:7b:
                    8d:d0:5d:de:38:a8:da:e1:fc:91:18:9f:19:03:1c:
                    6a:b1:3e:d1:b8:08:e7:54:90:95:3e:10:e3:10:f4:
                    96:0f:ed:a4:1f:a4:ed:d0:b4:d9:c9:e1:fb:c9:23:
                    9c:a3:47:1a:37:7e:9c:1b:3e:50:62:49:c7:ca:64:
                    85:cd:86:2c:74:d3:b3:a5:85:aa:3f:e0:a6:d2:d9:
                    2b:34:97:f9:82:15:96:6e:1d:0c:a7:9a:3c:90:34:
                    40:b2:90:ed:bc:1a:6d:6e:bf:78:f2:30:cf:71:77:
                    94:79:ac:ec:ea:14:dd:7c:87:36:08:b7:25:ff:4f:
                    45:0c:9e:91:33:db:a1:a1:ea:43:da:43:d5:c3:2b:
                    c3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0E:16:10:93:89:69:C7:7C:A4:62:DD:EC:3F:C8:65:51:50:23:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:db:ce:d9:cb:02:76:a1:8c:c1:97:44:c4:31:b0:c3:d4:73:
         77:36:6d:37:e8:ad:f9:9e:c9:32:cd:1a:d3:62:81:82:b4:25:
         77:c3:28:3c:7f:f6:6f:40:33:0d:89:00:46:4e:08:bf:af:8f:
         fb:f3:e5:3b:24:9e:74:5b:81:a5:00:ca:17:5c:1c:18:16:26:
         39:c7:ff:e6:08:1a:ec:5c:76:f9:51:d1:4f:2c:64:0b:52:c5:
         b6:2d:fa:a1:da:9e:59:89:27:b1:ca:0e:ae:8e:ad:3f:63:4e:
         3f:20:f0:e5:fa:c5:2f:a8:0b:4c:33:d3:9d:ba:cb:d7:a1:2b:
         43:20:da:ea:bd:74:37:57:66:b0:18:72:78:c8:47:37:cb:ee:
         7d:1e:72:86:09:30:d0:62:7b:f7:f7:1f:2e:98:80:6e:b9:1b:
         46:68:49:bd:dc:24:b4:d9:cb:57:88:2f:20:a6:94:a1:0d:f3:
         0b:f5:af:91:ea:88:3c:16:ca:4e:cc:cb:e3:40:85:d3:fe:84:
         42:d8:aa:57:8d:c0:ea:ef:3e:9e:04:f1:d9:82:9e:f0:c1:7d:
         96:d6:06:89:6c:e2:2e:65:c6:ca:ae:be:9b:f3:b1:6e:69:74:
         bb:f7:ed:ea:f7:28:fd:76:a5:75:7d:4d:2c:e3:62:5d:b1:a1:
         de:f5:d9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:22 2024 by rpki-client on console-ams.rpki-client.org