Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d66d5c1e-0cdc-3920-b5dd-efad788cd220.roa
File:                     d66d5c1e-0cdc-3920-b5dd-efad788cd220.roa (raw, json)
Hash identifier:          gInNpAB1GMotRj8KnRVO0MbsIuFFyJ5z4IJwfhdgFN8=
Subject key identifier:   ED:40:FF:1C:3B:14:D5:65:4C:4A:44:16:66:01:37:D4:C8:82:52:D7
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584774FBAA2D832084A58FB68D22
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d66d5c1e-0cdc-3920-b5dd-efad788cd220.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     399976
IP address blocks:        2602:80c:205e::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:aa:2d:83:20:84:a5:8f:b6:8d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=eb203fd3-ef64-4b6a-972f-9ca1e029dddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:8a:39:85:ba:0b:0a:76:3e:c4:41:a2:e5:
                    20:d1:e7:94:43:19:82:05:a4:ab:cb:11:e1:06:25:
                    86:4f:a4:9f:fd:98:cf:48:92:20:93:e6:b9:48:ec:
                    2a:52:19:05:a7:2f:a7:c2:ed:34:99:1f:cf:70:22:
                    ca:60:f5:e6:7c:b7:16:59:00:90:ec:ed:98:87:c5:
                    90:dd:e8:8c:14:63:f5:d7:30:dd:8d:bc:ae:af:a3:
                    a8:55:a1:5a:47:b1:09:21:86:8a:ac:d9:72:5c:63:
                    1f:39:1d:37:87:d0:56:e5:36:37:15:3c:d6:4f:1b:
                    be:4d:4d:e8:d6:b8:6f:35:dd:01:77:01:9e:af:13:
                    3b:1c:0d:52:1f:a6:d0:38:7a:17:2d:0f:61:6c:94:
                    3d:d3:8c:78:13:52:eb:b2:4d:82:dd:27:36:35:50:
                    95:33:3b:42:92:e9:ad:e7:50:30:0d:26:cb:da:54:
                    01:de:5f:1c:ba:60:df:d2:fb:68:97:b7:c8:e9:17:
                    ef:55:b7:06:90:e6:ec:9c:bd:64:54:0b:95:08:3f:
                    41:67:09:00:5a:57:52:74:9e:3f:73:f1:c8:b1:df:
                    ae:ca:5b:90:8c:76:d6:c8:1f:8d:2f:a2:22:5e:15:
                    6c:cb:56:d5:cf:f0:7c:0c:d0:7e:52:59:63:df:71:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:40:FF:1C:3B:14:D5:65:4C:4A:44:16:66:01:37:D4:C8:82:52:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d66d5c1e-0cdc-3920-b5dd-efad788cd220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:205e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a3:85:cd:59:99:11:eb:0c:9b:19:be:4b:9d:68:ad:a9:f8:
         cc:ea:0e:a5:20:58:e2:c9:af:5a:19:7b:cf:1c:f7:bc:8b:d4:
         2f:2b:a1:80:12:f2:94:c9:79:43:89:49:78:da:0f:7a:aa:d4:
         35:db:20:69:a8:fb:07:f3:17:29:58:09:d0:75:23:bd:1e:44:
         96:b1:35:6d:0e:76:9f:d0:d1:4a:b4:c1:78:aa:23:12:28:09:
         25:e2:2d:67:88:48:d2:9b:36:28:28:a5:aa:b8:bd:3f:a6:5c:
         ad:75:5e:36:cb:76:3b:d7:ac:61:e8:98:c2:52:21:45:3b:98:
         f8:5d:4d:db:9a:0f:8d:d5:5d:27:0e:2d:7e:3b:f2:15:c7:a1:
         02:59:86:04:f1:21:b0:69:c0:b7:70:ba:5d:66:89:de:76:72:
         ef:8d:24:ba:eb:30:32:a6:2a:b6:c8:a3:c2:8a:7e:54:93:8b:
         01:c1:58:ad:cc:9f:b3:08:e3:37:55:7a:11:09:60:83:01:e1:
         52:b5:4d:f0:be:c8:4c:64:93:04:b7:09:36:4c:26:d2:db:68:
         2d:65:ea:6a:03:11:95:8a:6d:d4:8f:e9:69:d9:83:d7:5e:a6:
         e1:d3:14:fb:68:5b:76:66:82:30:d4:a3:94:80:f6:47:79:c0:
         35:f9:36:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:07 2024 by rpki-client on console-ams.rpki-client.org