Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/80691033-d2ac-30a6-b14b-7e3d2d14a10e.roa
File:                     80691033-d2ac-30a6-b14b-7e3d2d14a10e.roa (raw, json)
Hash identifier:          e/EPE4150iewyz15NuJEbkaWg9GJDPYePMBsRGukQMY=
Subject key identifier:   0D:8C:57:70:CE:F8:2C:44:A3:4A:7C:D5:AC:7A:CD:9D:5F:F2:22:AA
Certificate issuer:       /CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
Certificate serial:       010D0C9F432858476F6634CB960F233B9B543D40
Authority key identifier: E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/80691033-d2ac-30a6-b14b-7e3d2d14a10e.roa
Signing time:             Sat 05 Oct 2024 01:00:31 +0000
ROA not before:           Sat 05 Oct 2024 01:00:31 +0000
ROA not after:            Fri 03 Jan 2025 02:00:31 +0000
asID:                     397709
IP address blocks:        2602:fdca::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6f:66:34:cb:96:0f:23:3b:9b:54:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
        Validity
            Not Before: Oct  5 01:00:31 2024 GMT
            Not After : Jan  3 02:00:31 2025 GMT
        Subject: CN=f3db6319-8708-4fc0-9bfe-283d485c2a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:9c:ed:8d:36:67:1a:ca:e7:d1:ef:13:6e:
                    40:d7:b9:9b:6a:59:af:21:27:b8:fa:73:a1:43:f1:
                    31:cb:a6:fd:87:77:7a:4f:72:3c:b6:3d:9f:3d:e0:
                    12:60:1c:e5:f3:da:d9:cf:67:85:a6:d8:8f:cf:af:
                    0e:53:2e:5b:53:a3:18:a6:b9:ea:9e:2d:89:e3:3c:
                    0a:fe:63:41:93:63:4c:da:d3:5d:1f:90:66:4e:0a:
                    55:a7:39:76:6f:bc:86:b3:62:95:0f:5f:c0:1e:15:
                    a0:dd:b0:a7:e2:24:bd:44:c0:0e:6d:e2:fd:c9:83:
                    6a:b3:90:80:1e:42:b4:60:c0:54:d1:f1:79:1d:77:
                    aa:c8:7f:0d:80:89:85:74:11:af:12:aa:7a:40:f0:
                    47:ba:bc:64:e1:9a:32:67:25:69:9d:fd:dc:48:3f:
                    eb:6c:ea:f4:fb:1c:d1:df:c3:39:59:e3:3c:dc:d2:
                    a2:d0:a3:11:80:00:67:5a:94:3d:cf:f4:bc:cc:36:
                    34:d2:4d:61:9a:3b:5f:dc:10:ec:30:dd:3b:75:90:
                    d6:f1:37:b3:5b:bb:78:66:76:b3:3b:b9:d1:ae:b9:
                    f7:7a:d7:c7:55:b5:be:68:c9:85:8c:14:d0:f7:c1:
                    9d:6c:28:a4:d3:3c:30:2b:d3:62:7c:2e:b2:8b:39:
                    29:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8C:57:70:CE:F8:2C:44:A3:4A:7C:D5:AC:7A:CD:9D:5F:F2:22:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/80691033-d2ac-30a6-b14b-7e3d2d14a10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl

            X509v3 Authority Key Identifier:
                keyid:E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdca::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:08:be:ba:28:fb:4b:d4:a9:be:c4:19:60:ed:53:67:ba:c6:
         c4:b9:36:9b:4c:24:8b:d3:a3:cb:b2:d5:3d:67:3b:8c:5d:64:
         f4:05:48:32:86:f2:58:04:41:10:6e:21:f3:df:84:bf:34:13:
         24:5e:1e:18:eb:de:ff:3c:8d:69:f1:9e:02:5c:ed:c7:d1:86:
         70:1e:63:e9:d5:a9:6c:9f:b1:d0:f3:a5:bd:c8:ff:e7:1f:3d:
         b3:cc:48:1f:d9:18:34:5b:33:45:6b:3d:57:39:27:63:60:f1:
         38:ad:df:3e:55:8a:0e:95:3f:ad:73:5e:a9:dc:e1:97:13:96:
         3f:3a:ab:97:d5:1d:59:ab:39:0a:34:e8:82:c2:c0:3e:3c:37:
         0d:2c:60:68:21:0a:01:aa:08:b8:ba:e4:ba:55:24:f7:0b:1f:
         dd:74:99:c4:69:9e:d5:9b:8a:c2:ca:ce:56:ad:a9:b7:e7:c9:
         cf:3f:01:ea:f2:90:62:eb:ec:45:04:4a:ee:93:3e:68:f8:25:
         61:84:e0:84:c8:59:a6:60:94:37:4d:db:e3:41:06:50:38:83:
         c3:b6:78:88:e1:78:8b:40:1b:58:37:5e:dc:f6:2f:cd:18:2f:
         c4:51:ff:8a:bc:9b:45:23:a3:04:f6:e2:9c:02:a7:c1:a1:05:
         66:fa:b1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:04 2024 by rpki-client on console-ams.rpki-client.org