Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/026a1815-8148-3893-a7e3-ba7197fae04e.roa
File:                     026a1815-8148-3893-a7e3-ba7197fae04e.roa (raw, json)
Hash identifier:          j6tUU4zO525EkDbF6oTl+wfEux5gQiqjyobeh7KQXPE=
Subject key identifier:   96:D4:8B:30:77:0B:B7:09:1B:27:3A:C4:A3:B7:D4:43:BE:56:1D:BD
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F43285847924BD0D13C43CB979B987700
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/026a1815-8148-3893-a7e3-ba7197fae04e.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        2602:fdeb:15::/48 maxlen: 48
                          2602:fdeb:16::/48 maxlen: 48
                          2602:fdeb:17::/48 maxlen: 48
                          2602:fdeb:18::/48 maxlen: 48
                          2602:fdeb:19::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:d0:d1:3c:43:cb:97:9b:98:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=4d066106-fba3-4f46-9808-e1acc719b0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:bf:6b:bb:cf:52:52:be:ab:ea:7f:1e:a7:
                    db:7f:e3:c0:ec:ad:19:0c:d8:cf:8b:ad:ac:da:ce:
                    1a:4a:6a:37:46:8f:c4:16:13:52:1b:7d:64:60:48:
                    7f:d5:52:6c:0a:f0:27:64:5d:8d:10:01:53:e2:0c:
                    ee:b5:f0:ca:54:52:65:61:9a:95:dc:95:0b:59:db:
                    a6:2d:a9:fc:a0:23:be:44:e3:09:96:7a:d6:61:78:
                    60:10:ee:ec:c9:a4:98:ca:5e:75:75:33:0e:57:58:
                    de:d8:ff:20:d3:ac:0e:b6:32:e5:b1:97:c3:24:57:
                    14:8a:0e:9e:df:9c:9a:25:2e:f6:64:bd:85:97:9b:
                    a8:9a:4e:d7:96:9e:62:7b:19:65:16:09:b4:22:59:
                    ad:d3:12:1d:c3:12:1a:a2:a7:df:34:58:e7:dd:40:
                    34:00:8a:ca:f2:a3:bf:42:74:c5:34:d1:91:e8:93:
                    68:aa:06:c8:eb:34:b9:aa:7d:00:30:1c:cf:85:e2:
                    07:82:19:8b:6b:72:b3:0e:f5:80:e5:1a:b5:e8:54:
                    8c:9b:2e:09:4e:c6:b3:cb:d3:7b:3f:76:dd:2e:25:
                    a5:3a:67:fe:c5:2e:1c:82:83:eb:a2:e8:2d:85:41:
                    f0:f3:ee:2b:88:8c:0d:c3:f0:4b:65:1e:48:7a:b5:
                    6b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D4:8B:30:77:0B:B7:09:1B:27:3A:C4:A3:B7:D4:43:BE:56:1D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/026a1815-8148-3893-a7e3-ba7197fae04e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:15::-2602:fdeb:19:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:6a:0d:c7:1c:0c:28:c4:9b:9f:53:0e:69:d3:16:15:1f:57:
         eb:de:9d:16:e8:31:34:3b:ef:6e:eb:c0:38:5a:6c:7a:19:8b:
         f7:f4:cd:3f:0f:bf:1f:09:ed:ac:6f:33:da:ac:75:34:46:90:
         f5:90:02:79:1a:ac:fe:9c:92:06:7d:a2:48:35:ef:cc:ee:25:
         ee:20:54:7d:4b:39:45:eb:a4:d2:68:b6:a5:5a:80:6d:69:ff:
         da:c5:5e:3f:6f:ec:49:93:12:9b:e8:bf:c5:26:f2:c8:ca:67:
         9a:d1:41:a3:2c:d4:15:d6:52:03:f2:3f:36:03:36:83:25:99:
         a5:a6:71:30:cf:12:39:82:5e:3b:14:4d:11:fb:dd:06:42:7a:
         f7:e6:4b:95:0b:45:bd:df:0d:09:c9:4b:9b:71:d6:11:5d:b6:
         47:f3:bc:58:77:61:21:b0:2b:0d:ab:83:ff:8d:a5:4e:46:e4:
         e3:ca:96:d8:13:c4:e1:8b:9d:dd:1f:5a:ce:c3:e8:1b:bc:2f:
         32:68:73:64:7b:91:22:5e:58:91:16:69:22:c6:5b:0b:e0:1c:
         35:9d:6d:53:a5:0f:47:e7:26:56:55:62:e6:a9:a7:1e:36:b2:
         cf:2b:f0:8f:09:52:3c:fc:04:7c:85:49:7e:da:ce:db:d6:47:
         6e:bd:34:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:49 2024 by rpki-client on console-fra.rpki-client.org