Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7eac08af-876c-4fdf-9567-b427c3078311/528212b7-630c-3950-b0ab-12617997cd96.roa
File:                     528212b7-630c-3950-b0ab-12617997cd96.roa (raw, json)
Hash identifier:          dp2srMd59TfrU1JfJhJJRRYhzxXFubXHDZNRBv8MrKE=
Subject key identifier:   FD:2B:F9:2F:97:6D:DD:F0:60:DF:12:AD:6D:AF:8C:5E:EE:15:68:75
Certificate issuer:       /CN=7eac08af-876c-4fdf-9567-b427c3078311
Certificate serial:       010D0C9F43285847DF2F5878614CCBCE384EBE00
Authority key identifier: 26:C0:31:8D:3E:BA:BF:89:3B:27:6D:90:B0:C6:83:FC:AB:01:62:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7eac08af-876c-4fdf-9567-b427c3078311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7eac08af-876c-4fdf-9567-b427c3078311/528212b7-630c-3950-b0ab-12617997cd96.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     29774
IP address blocks:        2602:f93d::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7eac08af-876c-4fdf-9567-b427c3078311/7eac08af-876c-4fdf-9567-b427c3078311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7eac08af-876c-4fdf-9567-b427c3078311/7eac08af-876c-4fdf-9567-b427c3078311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7eac08af-876c-4fdf-9567-b427c3078311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:58:78:61:4c:cb:ce:38:4e:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eac08af-876c-4fdf-9567-b427c3078311
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=49fd3e05-d72f-48cb-93f9-e75cf28c7bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d3:2a:4c:0b:c5:d1:f6:f8:38:f1:6e:9f:99:
                    65:61:74:0a:b0:3b:84:f1:a9:15:75:10:a3:3f:2c:
                    87:cf:6c:41:1f:d7:d2:91:93:e3:4c:48:8d:9d:b8:
                    e0:a2:6d:d7:2b:79:ed:a1:78:1c:97:36:69:e3:92:
                    fe:eb:41:cc:da:c5:63:89:13:ce:f4:48:7e:c4:dd:
                    54:c1:ce:56:85:53:b8:9f:73:62:4b:dd:d3:68:99:
                    74:f0:5a:c8:16:de:c3:e3:8f:46:b2:31:52:4f:42:
                    66:29:3b:9a:43:90:27:83:25:66:82:48:78:6b:96:
                    9b:fb:b1:5f:c5:b0:b8:8c:4a:4a:24:34:cd:8e:20:
                    0e:0a:ae:31:f0:b2:ce:a6:1a:84:ad:15:d5:e2:80:
                    47:fb:bf:21:a3:05:52:a7:6a:38:66:b4:ef:d3:d1:
                    3c:aa:da:56:ff:0d:58:64:9f:50:1c:ab:82:3f:ec:
                    2b:18:10:5e:cc:b8:b7:34:f3:da:eb:40:26:16:fa:
                    76:19:88:67:d7:cc:24:50:ab:92:93:a5:34:65:1a:
                    a4:03:6c:56:cd:9e:fa:3c:51:ae:86:bc:6d:f6:b9:
                    64:5f:b1:02:38:63:74:54:73:41:fa:70:96:e1:c6:
                    6a:8b:0b:d6:b3:e1:d9:e4:13:a2:fa:d5:73:78:7b:
                    84:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2B:F9:2F:97:6D:DD:F0:60:DF:12:AD:6D:AF:8C:5E:EE:15:68:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7eac08af-876c-4fdf-9567-b427c3078311/528212b7-630c-3950-b0ab-12617997cd96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7eac08af-876c-4fdf-9567-b427c3078311/7eac08af-876c-4fdf-9567-b427c3078311.crl

            X509v3 Authority Key Identifier:
                keyid:26:C0:31:8D:3E:BA:BF:89:3B:27:6D:90:B0:C6:83:FC:AB:01:62:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7eac08af-876c-4fdf-9567-b427c3078311.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f93d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:53:5c:61:a6:89:b0:18:63:8d:91:e3:42:43:70:5e:0f:5b:
         d3:57:c7:c4:7e:34:6e:0f:00:c0:96:f5:d6:99:2e:f1:0f:3e:
         eb:2d:88:de:8c:72:30:65:ab:3e:16:bd:a0:ce:c2:d7:4d:f0:
         2e:09:36:5a:74:c2:34:ad:09:ab:72:35:6a:ed:57:57:39:85:
         0b:dd:a4:d1:8e:56:35:b6:98:15:1d:2f:4d:09:c9:a8:19:fe:
         7d:be:66:e4:d9:4f:70:76:2c:47:c2:cd:8a:01:69:c0:c1:9f:
         93:c1:23:f6:09:26:42:c8:91:63:15:8c:4d:83:a0:66:73:dc:
         82:3b:60:aa:c3:57:89:03:91:80:68:3a:63:40:8d:61:d4:e1:
         b1:1a:9c:fb:41:fb:37:4c:b0:f3:e6:30:5b:5f:5a:3b:e3:3a:
         01:d9:03:a0:b8:fd:a5:e4:a3:3e:ed:b2:ac:ce:2d:af:bd:01:
         fb:06:29:68:7f:4e:fa:24:89:a3:1f:77:55:ed:20:10:c0:be:
         0f:e3:a0:e9:e0:ca:81:52:3e:d4:c7:9c:2b:53:a7:82:d0:32:
         5b:a9:6f:ec:1e:9e:c7:ef:bb:f4:20:50:92:fe:5b:21:dc:e3:
         6c:ff:cb:9d:3b:70:9b:97:0f:a7:b3:fa:e4:29:37:07:a0:66:
         2d:8c:91:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:01 2024 by rpki-client on console-fra.rpki-client.org