Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f9457e98-5423-3f04-90ee-67760a3cd563.roa
File:                     f9457e98-5423-3f04-90ee-67760a3cd563.roa (raw, json)
Hash identifier:          WL2FRiMRN08LA+mdjDV/JHJ39AXb3nIvvvQ5p5PozKs=
Subject key identifier:   51:A1:D6:D2:A5:FF:B8:C9:49:4F:2A:4F:0E:13:39:28:57:48:43:B3
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F43285847C06412F0D2F42D13EBBADE00
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f9457e98-5423-3f04-90ee-67760a3cd563.roa
Signing time:             Sun 03 Nov 2024 01:16:47 +0000
ROA not before:           Sun 03 Nov 2024 01:16:47 +0000
ROA not after:            Sat 01 Feb 2025 02:16:47 +0000
asID:                     63150
IP address blocks:        2602:f988:40::/42 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:64:12:f0:d2:f4:2d:13:eb:ba:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Nov  3 01:16:47 2024 GMT
            Not After : Feb  1 02:16:47 2025 GMT
        Subject: CN=29101c4e-1a3d-4bcd-bc44-e4d16488b317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4c:60:c4:2f:85:df:f9:72:8e:88:a1:eb:44:
                    58:4e:d8:ff:40:3b:d9:da:d2:e5:0a:c9:c9:1d:82:
                    a4:a2:7c:e4:63:12:4f:c2:a1:64:7f:ed:e7:af:be:
                    c9:75:3d:01:82:ea:7d:48:5c:36:5b:2d:ae:3a:72:
                    30:ff:c3:c8:67:f4:c5:19:16:8d:a9:cd:bc:8a:d7:
                    c1:3b:6e:54:3a:45:48:31:c9:de:02:07:89:54:0f:
                    d4:71:46:63:a8:b7:f8:24:38:8b:6d:7c:2c:5a:4d:
                    a6:bc:f7:47:cd:1f:02:61:cb:b8:b1:a1:6d:af:78:
                    02:c0:a0:b5:6f:7a:c1:2d:98:aa:9d:e4:0c:7f:2c:
                    ed:0b:95:11:ee:c0:55:5c:0a:b0:97:59:2a:3d:38:
                    9f:74:be:59:6e:2a:f8:66:90:7e:ad:04:91:4b:5a:
                    62:bb:10:58:bd:d2:b4:de:e9:39:97:25:aa:f9:7a:
                    9d:d0:ab:7b:2b:f0:92:54:27:3e:82:75:2c:d9:ee:
                    f0:e3:9f:bf:bc:3f:a1:8e:8c:6a:e0:93:ea:87:db:
                    61:56:a0:7c:f7:47:c3:6e:f5:8d:04:5d:2a:78:66:
                    7b:c8:5f:04:5a:40:6e:0d:1a:a9:d2:43:1a:c9:21:
                    a1:18:ec:3c:c2:55:d8:36:8a:73:32:b6:ed:2e:70:
                    ef:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A1:D6:D2:A5:FF:B8:C9:49:4F:2A:4F:0E:13:39:28:57:48:43:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f9457e98-5423-3f04-90ee-67760a3cd563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:de:83:90:bb:4d:f2:bc:3f:35:ba:d4:8d:25:af:11:47:6d:
         93:5c:e8:b1:a6:c9:3c:0a:f6:7a:02:ad:57:cb:f2:ce:e7:41:
         74:ae:65:f0:31:9e:86:ae:64:02:dd:f0:ad:e3:6b:a9:41:ab:
         91:a4:aa:ea:f4:b6:3b:6a:fe:62:6c:bd:25:40:31:80:95:3d:
         a6:95:0f:6b:99:ad:c4:c7:c4:9b:b2:7b:64:62:72:13:a3:d3:
         90:1a:2e:d8:f0:dd:d3:9c:76:de:49:dc:39:da:dc:cd:3d:1c:
         ba:84:37:b1:8b:6e:fe:db:dd:16:24:36:73:21:61:25:b5:ae:
         00:03:58:20:a2:1b:2d:42:8f:2b:b1:19:55:9b:36:52:c8:78:
         f5:31:a0:7b:dd:d4:b7:db:df:e1:5a:aa:d2:12:71:b2:2d:cd:
         d9:10:4b:72:17:32:51:3f:81:04:b9:d2:0d:22:c7:25:9e:6c:
         4c:d5:65:c8:58:4f:21:48:41:80:91:6c:d7:5a:bb:3d:c4:82:
         d8:2e:b9:95:0b:ff:f0:c1:18:5f:5a:4f:21:7f:d0:06:8b:e2:
         4f:f1:4b:bb:4a:ff:7a:7e:bb:55:27:dc:7d:f0:74:2b:80:f0:
         39:20:1a:12:e8:e5:bb:be:1a:07:c4:a9:b7:36:f2:0b:2a:52:
         32:10:03:58
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfAZBLw0vQtE+u63gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMThhOTI4ZWItNDhhNS00NTYwLWEyMTctMzZjYjFlYTMy
NjQ4MB4XDTI0MTEwMzAxMTY0N1oXDTI1MDIwMTAyMTY0N1owLzEtMCsGA1UEAxMk
MjkxMDFjNGUtMWEzZC00YmNkLWJjNDQtZTRkMTY0ODhiMzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiExgxC+F3/lyjoih60RYTtj/QDvZ2tLlCsnJ
HYKkonzkYxJPwqFkf+3nr77JdT0Bgup9SFw2Wy2uOnIw/8PIZ/TFGRaNqc28itfB
O25UOkVIMcneAgeJVA/UcUZjqLf4JDiLbXwsWk2mvPdHzR8CYcu4saFtr3gCwKC1
b3rBLZiqneQMfyztC5UR7sBVXAqwl1kqPTifdL5Zbir4ZpB+rQSRS1piuxBYvdK0
3uk5lyWq+Xqd0Kt7K/CSVCc+gnUs2e7w45+/vD+hjoxq4JPqh9thVqB890fDbvWN
BF0qeGZ7yF8EWkBuDRqp0kMaySGhGOw8wlXYNopzMrbtLnDvWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFGh1tKl/7jJSU8qTw4TOShXSEOzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xOGE5
MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNiMWVhMzI2NDgvZjk0NTdlOTgtNTQyMy0z
ZjA0LTkwZWUtNjc3NjBhM2NkNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMThhOTI4ZWItNDhhNS00NTYwLWEy
MTctMzZjYjFlYTMyNjQ4LzE4YTkyOGViLTQ4YTUtNDU2MC1hMjE3LTM2Y2IxZWEz
MjY0OC5jcmwwHwYDVR0jBBgwFoAU9H6x3C6P5f0Uj3qixMZGdbQwqzgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xOGE5MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNi
MWVhMzI2NDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL5iABA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJjeg5C7TfK8PzW61I0lrxFHbZNc6LGmyTwK9noCrVfL8s7nQXSu
ZfAxnoauZALd8K3ja6lBq5Gkqur0tjtq/mJsvSVAMYCVPaaVD2uZrcTHxJuye2Ri
chOj05AaLtjw3dOcdt5J3Dna3M09HLqEN7GLbv7b3RYkNnMhYSW1rgADWCCiGy1C
jyuxGVWbNlLIePUxoHvd1Lfb3+FaqtIScbItzdkQS3IXMlE/gQS50g0ixyWebEzV
ZchYTyFIQYCRbNdauz3EgtguuZUL//DBGF9aTyF/0AaL4k/xS7tK/3p+u1Un3H3w
dCuA8DkgGhLo5bu+GgfEqbc28gsqUjIQA1g=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:29 2024 by rpki-client on console-ams.rpki-client.org