Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/602bdbad-4add-3c5e-b46e-9417aedc7e02.roa
File:                     602bdbad-4add-3c5e-b46e-9417aedc7e02.roa (raw, json)
Hash identifier:          oswc+LsJQcEOiauGfNBZTmOREMW/qux3b/G11DiEPcY=
Subject key identifier:   F6:55:1F:63:DB:B8:29:08:12:ED:23:E1:34:14:8B:85:61:E7:E8:DA
Certificate issuer:       /CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4
Certificate serial:       010D0C9F4328584726D061A65D4893130CFA33E0
Authority key identifier: 5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/602bdbad-4add-3c5e-b46e-9417aedc7e02.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     401190
IP address blocks:        2620:14:2000:1::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:61:a6:5d:48:93:13:0c:fa:33:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=ab10ba3e-3008-4fbf-ac3f-7861dddd65ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:79:42:e9:6f:6c:1c:cd:72:7a:21:77:38:b6:
                    66:8f:6c:81:e0:f5:fc:44:c4:54:09:80:63:1d:92:
                    1b:03:d8:96:83:90:53:c5:19:6d:1d:66:17:76:0e:
                    ac:87:d6:e0:9d:91:ee:d9:63:9e:b4:f9:0e:ae:01:
                    a2:33:aa:eb:4e:dc:be:84:d1:a0:8d:5f:f7:0f:f6:
                    28:1b:6a:06:ef:c7:13:72:74:f4:5e:51:60:e4:d3:
                    0a:60:bb:ad:91:86:b5:68:52:dd:3c:da:6e:d2:4d:
                    8a:55:13:87:80:7b:45:46:af:66:6b:83:8c:c3:ba:
                    38:c2:eb:89:dc:21:88:af:ce:8f:e0:90:f8:eb:16:
                    41:1c:24:b8:21:2b:0b:d0:48:d5:ea:2c:4e:b9:cb:
                    66:49:bf:74:82:29:f2:8e:66:11:20:1d:cf:af:ad:
                    8b:c5:88:b4:6f:b8:ba:ec:c7:f7:f0:4c:8a:97:f4:
                    23:39:5e:32:01:67:7d:3d:52:96:6d:01:d1:a1:f0:
                    af:3a:12:ba:36:01:c8:d1:b3:6e:3d:8e:31:24:29:
                    fc:f1:94:3f:ed:b6:20:5d:cd:bd:2e:71:0e:ae:c6:
                    34:64:21:03:45:67:bc:ef:30:f3:b0:cc:c0:88:cf:
                    84:bc:a9:aa:b8:4d:cd:bb:d5:aa:52:5a:55:4a:f2:
                    39:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:55:1F:63:DB:B8:29:08:12:ED:23:E1:34:14:8B:85:61:E7:E8:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/602bdbad-4add-3c5e-b46e-9417aedc7e02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl

            X509v3 Authority Key Identifier:
                keyid:5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:14:2000:1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:32:98:60:54:55:a5:27:68:c2:97:08:dc:9f:da:70:8f:94:
         09:ce:1a:d9:4e:a1:6a:9d:19:b1:3c:e8:5c:e1:74:d3:91:0d:
         c7:ba:66:40:a8:34:d2:47:16:0f:67:5f:78:60:34:df:3f:f9:
         fb:b9:e8:82:ad:89:d4:24:d3:6b:e6:bf:8f:92:5f:50:b4:33:
         62:51:2d:e9:84:2f:61:b8:6d:ba:c5:a8:74:ee:20:21:97:e1:
         33:fd:21:d6:b0:04:10:71:fb:fc:f6:82:e3:82:ec:17:19:1a:
         5b:9d:64:75:65:85:28:bf:80:06:be:d0:84:c0:4b:e8:6b:e4:
         a1:1a:8f:78:01:cd:fb:40:e4:1d:6f:b0:27:76:a4:2f:bc:6b:
         50:85:96:27:ce:ea:0e:f8:4c:42:fb:97:bb:c4:d4:d7:c0:6e:
         ad:89:3d:aa:a8:60:ee:b2:fb:15:64:00:94:25:d5:16:4e:38:
         28:24:4c:d3:66:7a:b1:cf:ce:54:1b:db:10:44:e3:9f:df:43:
         fc:af:b3:4d:60:27:07:2c:8c:c6:23:62:cd:e7:64:81:64:f6:
         c7:0b:14:01:21:87:8f:d4:58:b3:1d:13:f1:0c:ea:47:10:30:
         9e:19:7c:9b:6f:4c:df:02:10:c4:6a:81:ec:d9:f9:74:59:59:
         51:04:4d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:31 2024 by rpki-client on console-ams.rpki-client.org