Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/7b10d9a5-8c6f-3592-b138-29e238ff65e0.roa
File:                     7b10d9a5-8c6f-3592-b138-29e238ff65e0.roa (raw, json)
Hash identifier:          qLUWLPdgNofb/GSaa7HM62DZJ6a6zvv8pD4gMSZLx/4=
Subject key identifier:   6A:2D:52:83:79:BE:C4:9A:4C:CD:E3:B3:CE:32:64:70:8C:A5:08:66
Certificate issuer:       /CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97
Certificate serial:       010D0C9F4328584769D0D1C7D64786CAFB0F9E80
Authority key identifier: 90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/7b10d9a5-8c6f-3592-b138-29e238ff65e0.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     7720
IP address blocks:        2602:fc1d::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:d1:c7:d6:47:86:ca:fb:0f:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=b30f6de4-42a3-4a8c-82ba-bd768b9a33ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ab:cc:1b:e7:75:05:41:0f:5c:96:3a:39:24:
                    ca:09:8f:56:c9:ed:55:dc:a4:2e:d7:8f:ed:1f:79:
                    57:82:32:79:2a:05:bb:04:24:b8:d4:38:f1:66:81:
                    e2:22:9d:5b:3e:1a:a0:a1:8f:84:ea:f2:2e:8d:b7:
                    28:a1:8e:4d:9a:b1:c6:95:19:71:54:c8:92:8f:8d:
                    5f:57:29:25:8b:9d:8c:7c:66:65:fa:0c:a2:ca:c1:
                    30:28:75:0f:f9:18:f2:79:93:8f:f3:e2:8c:a8:6c:
                    6c:43:5c:ce:6b:d5:74:e8:ca:b9:c0:2d:3a:f1:c1:
                    45:3a:b9:10:a8:d6:45:7a:03:ea:6e:62:a9:3f:09:
                    1f:e7:3f:a8:36:31:59:e4:d9:3a:80:70:c4:2f:22:
                    3c:44:86:2a:d3:4b:79:a0:a3:fe:fd:6b:69:81:62:
                    d5:03:01:8d:28:18:1d:13:12:30:88:47:a1:c7:c2:
                    00:cd:ba:1b:ea:58:53:ba:ea:08:9a:d3:4b:45:33:
                    4a:da:95:88:91:26:4e:59:60:92:bf:e1:5f:ff:ad:
                    ee:eb:39:0a:7e:0f:fa:fc:5b:ef:aa:83:b4:74:94:
                    d6:fc:8b:0c:e9:3a:c9:ad:f3:8f:89:6d:4e:7c:94:
                    f3:43:fd:ee:1b:dc:b4:7f:ee:01:45:13:4c:b9:c4:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2D:52:83:79:BE:C4:9A:4C:CD:E3:B3:CE:32:64:70:8C:A5:08:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/7b10d9a5-8c6f-3592-b138-29e238ff65e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl

            X509v3 Authority Key Identifier:
                keyid:90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc1d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e2:82:e7:69:6f:b0:77:90:4f:1f:0d:c5:89:7b:5c:d9:db:
         f0:ff:11:05:c1:97:64:8b:af:fe:bf:52:77:b7:f6:4c:e7:ed:
         81:c1:59:90:3a:f8:e7:5e:8d:ed:52:f2:44:e2:9b:5c:3b:3f:
         04:92:a1:e0:84:c1:8c:7d:d9:8a:1f:d6:20:17:44:3c:82:06:
         82:d0:5c:d7:d6:ca:99:87:b9:86:18:dd:79:dc:69:b9:94:13:
         88:20:35:e3:c4:28:76:2d:64:3a:20:95:77:ca:b2:e6:b2:81:
         20:56:75:7c:26:bd:03:ab:2f:68:63:7e:c3:94:95:34:cb:e8:
         ee:36:83:91:25:16:43:fe:0c:0e:c2:53:f6:3e:55:d2:2a:6a:
         d7:a3:a9:1f:6b:2a:93:95:98:a9:63:b5:86:20:65:ff:df:25:
         af:0b:37:44:94:69:d5:23:37:b6:fc:27:5a:c1:cd:b5:b2:42:
         91:95:d3:e6:50:48:83:2f:3e:22:0e:da:83:39:f1:a3:b1:d5:
         f9:3b:49:b0:b2:b4:be:e6:5e:63:17:fa:8a:61:f9:d2:d4:34:
         ce:0c:2a:b1:e7:43:09:69:12:b0:ac:d4:ff:40:81:1a:d0:79:
         2e:cd:aa:09:a5:67:0c:0b:d9:9a:52:ac:51:d8:53:b2:99:ba:
         83:21:32:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:39 2024 by rpki-client on console-fra.rpki-client.org