Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa
File:                     cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa (raw, json)
Hash identifier:          sddpjU5a1cSLI30nm4EZYHOANpv6GjGkvRHRf8Up23E=
Subject key identifier:   32:C0:E0:FE:F5:C5:E8:30:03:0A:10:15:98:95:03:6D:87:93:6D:C7
Certificate issuer:       /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
Certificate serial:       010D0C9F43285847B696B8E0C9D878B08D73E100
Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     32604
IP address blocks:        2602:fa9c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:b8:e0:c9:d8:78:b0:8d:73:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=05ec6298-7b66-4651-b7b9-ca79e4b7e971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:e7:c6:d0:b7:66:f4:ef:f8:ae:2d:99:60:
                    3f:df:3b:ee:70:8a:8b:07:c1:c1:cc:73:e0:3e:d4:
                    07:2a:04:0a:6b:79:5a:90:b7:f0:61:c1:8c:76:84:
                    b1:49:66:71:47:1c:3f:5a:92:f4:8e:5d:3b:b0:15:
                    6e:27:1a:04:f7:14:b6:38:80:ab:96:c6:bd:51:0b:
                    6b:a0:d3:b4:ae:0c:f9:28:d8:6e:62:d6:26:16:f5:
                    12:48:a2:a7:80:06:c7:ad:6b:32:79:6a:37:6d:ab:
                    7b:7c:2f:6c:25:03:15:99:f2:e7:78:3e:19:10:c1:
                    85:0f:08:6c:d5:51:de:dd:0d:12:67:df:fc:a6:d2:
                    1c:c9:73:88:e1:9a:ea:c8:31:46:e0:66:c0:1f:00:
                    dd:74:33:58:1b:a7:05:fb:4a:6d:40:e9:e4:53:56:
                    85:b9:94:56:ac:0a:46:cc:6b:ff:10:e1:20:74:7c:
                    02:6b:5c:6b:46:f3:86:fb:11:d8:4d:e0:dc:a0:b0:
                    16:28:61:76:ff:f1:11:7d:6e:89:eb:98:b5:23:25:
                    2a:f4:2c:39:b0:fc:73:9d:d9:78:8b:6a:97:8e:3e:
                    c4:54:cc:71:64:ac:2d:71:64:40:5e:75:27:47:77:
                    d6:d5:b9:c4:77:59:3d:fe:a3:85:59:1f:fa:15:09:
                    04:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C0:E0:FE:F5:C5:E8:30:03:0A:10:15:98:95:03:6D:87:93:6D:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl

            X509v3 Authority Key Identifier:
                keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a8:ad:f6:33:68:b5:d3:bd:ed:f3:1e:16:9d:8c:68:21:38:
         59:ce:36:bb:2d:c4:31:9a:0d:c0:60:04:85:c4:f5:fb:40:84:
         c7:32:bb:87:89:cc:5b:d9:e5:70:bc:03:ad:e2:76:c6:18:b0:
         d8:c9:ef:b4:4f:a6:cb:8c:59:fe:f4:da:af:69:c9:8d:9e:3c:
         19:45:83:96:d4:cb:05:64:cd:36:04:e3:7d:15:b0:c5:8f:06:
         3d:2e:91:43:26:40:36:79:e7:f8:66:eb:d3:e7:e2:2b:03:db:
         f4:cc:74:b1:fc:fa:5f:98:33:b2:6b:70:ad:bf:c5:c4:0f:3b:
         a7:9e:12:9e:c9:0f:34:1d:f5:df:e1:2d:89:62:92:ee:2d:71:
         e3:70:30:eb:4c:2c:fe:89:5d:aa:47:bd:44:11:bf:8c:bd:50:
         2a:40:8b:90:f1:17:8d:14:29:83:54:d8:58:ca:76:26:a2:91:
         62:4a:01:aa:78:65:d8:b9:4b:71:87:43:fb:64:91:2d:57:e2:
         13:59:06:0f:d4:75:5e:a0:eb:0c:2c:de:02:42:86:4c:34:b1:
         f9:04:fe:7d:6d:d6:80:fb:6a:5e:40:ac:6f:73:e8:ba:e3:98:
         c9:ea:2b:0b:38:0a:b3:ea:04:27:0f:41:fb:16:72:b3:35:fc:
         e2:9d:77:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:41 2024 by rpki-client on console-ams.rpki-client.org