Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/2be21bfd-2e80-3175-83f3-b5a0029c1f98.roa
File:                     2be21bfd-2e80-3175-83f3-b5a0029c1f98.roa (raw, json)
Hash identifier:          KjOlNz5OpHiNkEMWl4CyTa4+l7n3I5Pzi5uPq+iaWok=
Subject key identifier:   C5:AD:A1:3E:FC:9C:AE:62:94:B5:90:88:2F:BA:4F:DC:0A:11:2D:06
Certificate issuer:       /CN=ac1e47a1-31bf-43f6-a3f2-1fc978c92117
Certificate serial:       010D0C9F432858473790812076799CA6745D8380
Authority key identifier: E6:01:DF:84:CC:05:6F:05:9E:EB:C8:AC:2B:04:A4:9A:87:5A:FA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/2be21bfd-2e80-3175-83f3-b5a0029c1f98.roa
Signing time:             Sun 15 Sep 2024 01:00:30 +0000
ROA not before:           Sun 15 Sep 2024 01:00:30 +0000
ROA not after:            Sat 14 Dec 2024 02:00:30 +0000
asID:                     63437
IP address blocks:        2602:f94a::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:37:90:81:20:76:79:9c:a6:74:5d:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1e47a1-31bf-43f6-a3f2-1fc978c92117
        Validity
            Not Before: Sep 15 01:00:30 2024 GMT
            Not After : Dec 14 02:00:30 2024 GMT
        Subject: CN=caa20f22-d37f-4f91-a8f0-e89a12568d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:af:93:09:13:f6:30:cb:6a:7d:ab:fd:66:8f:
                    e4:7c:c8:60:76:09:e6:f8:19:14:3d:52:80:bf:5d:
                    8b:ee:36:bc:b4:55:ac:70:ea:96:a0:5c:84:72:2e:
                    f5:e6:d6:b3:87:f4:ed:05:8a:9b:f2:29:90:9f:50:
                    6e:38:f0:cb:a4:bd:56:06:87:0f:2b:99:af:07:6b:
                    ca:8e:a6:2c:94:23:b2:f7:56:58:56:13:b4:53:54:
                    c1:23:f2:c8:b6:6e:d2:76:7a:da:fd:d3:90:e7:f7:
                    8e:7a:89:d9:d9:09:d0:ac:62:d4:b1:21:ce:31:15:
                    33:28:25:a6:9b:ca:3a:38:33:68:a0:c9:75:06:5e:
                    7c:89:2f:ae:5b:ef:90:77:f3:1d:ab:e9:94:14:4c:
                    bf:ec:1c:98:a5:af:06:15:dc:06:49:84:11:68:ff:
                    1f:7e:d3:15:56:64:f2:6e:5e:63:e9:e8:57:a1:12:
                    ac:b2:8d:3f:ca:47:18:42:9c:b5:26:c5:5b:b1:53:
                    f1:c7:92:9d:14:2c:a2:d5:5b:d3:97:90:cf:4b:02:
                    00:4d:bc:50:ef:da:1e:26:41:ec:66:fb:e7:10:95:
                    f6:61:7e:f6:f7:00:1f:a8:87:4a:9c:e3:a8:b4:10:
                    cd:71:c3:f3:09:bb:ec:69:be:44:d3:8b:e0:3d:e1:
                    ea:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AD:A1:3E:FC:9C:AE:62:94:B5:90:88:2F:BA:4F:DC:0A:11:2D:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/2be21bfd-2e80-3175-83f3-b5a0029c1f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.crl

            X509v3 Authority Key Identifier:
                keyid:E6:01:DF:84:CC:05:6F:05:9E:EB:C8:AC:2B:04:A4:9A:87:5A:FA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f94a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:51:c5:da:2e:72:fd:e0:22:84:79:2e:00:30:f2:c6:31:13:
         4f:c3:b1:83:3e:06:1e:c0:5c:7f:4c:53:2f:31:e4:72:ce:91:
         65:f6:58:64:4f:dd:ae:28:dc:16:c4:cd:68:64:46:e2:98:21:
         af:ec:4c:35:c6:b1:5a:45:1a:1e:24:37:96:7e:9f:2a:65:92:
         78:42:8b:39:c7:86:63:30:b3:26:29:fe:cf:a5:c6:50:a9:3e:
         74:58:69:e4:dc:04:93:66:77:2a:10:bd:5c:b7:43:c3:63:d6:
         a2:8a:c1:5a:3e:b5:0c:3e:ec:ff:49:2c:89:49:fb:6e:b2:11:
         16:9c:1b:00:07:79:76:a4:c4:f8:f8:0b:20:16:32:b5:61:1f:
         ad:64:ac:bd:ed:93:35:23:c0:43:dc:3c:93:cb:c4:d6:e9:9c:
         e2:4e:0e:97:16:54:1f:7c:df:c3:00:fb:a1:8c:57:d1:14:83:
         c5:e3:d7:90:cf:49:a0:b1:f6:fd:eb:83:e1:2e:bf:a7:64:f0:
         52:16:1e:61:09:12:f5:fb:10:61:e9:09:ae:ea:0d:82:50:cd:
         5a:25:fe:37:67:28:5f:4e:61:54:6b:61:e9:f5:85:58:07:d3:
         9e:09:46:23:5c:f1:b0:15:80:a3:a9:ca:2c:0f:bb:ed:dc:04:
         a1:14:42:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:46:07 2024 by rpki-client on console-ams.rpki-client.org