Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/abaecb82-3c77-3112-ae1d-040a8c948f96.roa
File:                     abaecb82-3c77-3112-ae1d-040a8c948f96.roa (raw, json)
Hash identifier:          2P9JwncSr7Txcmx3Pjr+Hh1qhEQ1OkZdzkY5iz1jvpI=
Subject key identifier:   74:B5:AE:D6:4F:5B:70:50:29:63:AF:C4:C7:E1:71:DE:3A:6F:C0:4F
Certificate issuer:       /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial:       010D0C9F43285847B9617BFE366D0D23292F4490
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/abaecb82-3c77-3112-ae1d-040a8c948f96.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2602:fc88::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:7b:fe:36:6d:0d:23:29:2f:44:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=6293ffd6-536e-4a52-b4e8-eb2768244124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:17:4f:df:5c:6a:1e:c4:76:a2:f3:6f:df:57:
                    6d:5a:af:21:b4:b9:24:b8:5d:c3:0d:ec:09:74:5f:
                    a7:52:11:04:b1:9b:f7:d7:84:45:d9:d1:b7:fc:3e:
                    4e:d6:32:f0:5b:0c:6e:28:c8:fc:03:3a:3d:16:00:
                    cf:d0:da:c8:2e:3b:46:ff:7b:ae:f9:dc:c1:bb:6c:
                    4c:d2:16:17:b9:cb:e2:5e:2d:87:0e:87:d6:af:b1:
                    e1:75:63:a4:c7:3c:18:51:ef:47:a6:f9:07:10:d4:
                    c7:de:28:17:f0:c9:ce:12:7c:b7:3e:a3:c9:bd:48:
                    c6:8f:b5:d1:2c:fd:af:9a:69:5f:b4:6d:88:72:49:
                    04:eb:1e:84:cb:5d:56:a1:64:c7:2f:3d:6b:9c:35:
                    d8:52:5e:ec:03:30:a7:f7:ba:c3:df:55:8c:ea:f0:
                    40:c5:27:2f:ab:74:03:65:3f:da:51:3e:d0:75:f0:
                    54:ad:fc:c3:f1:e9:9a:60:df:10:1d:7c:5a:a3:ff:
                    35:82:da:a2:32:b8:ba:6b:98:6b:22:20:c9:1e:d3:
                    25:5b:16:ff:ff:dc:b9:62:6b:9c:17:97:c0:f7:9e:
                    98:39:d0:51:f2:d9:2f:17:43:84:87:f5:40:7b:7a:
                    3d:ea:4c:1e:5b:2b:95:ad:d6:a8:36:a9:86:f4:da:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B5:AE:D6:4F:5B:70:50:29:63:AF:C4:C7:E1:71:DE:3A:6F:C0:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/abaecb82-3c77-3112-ae1d-040a8c948f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl

            X509v3 Authority Key Identifier:
                keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc88::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:2d:8c:85:78:19:65:b5:9c:30:4f:d7:c1:22:0f:26:89:45:
         4e:23:5e:01:62:97:d3:f1:60:05:6f:6a:67:fa:16:76:a1:45:
         dd:ac:76:37:02:40:57:78:94:57:10:8f:47:68:52:e5:4d:75:
         f8:99:79:bf:d3:52:71:4e:ea:e5:9a:26:90:cf:cc:f2:7b:3f:
         c5:3d:12:42:98:af:3f:ed:e3:7e:54:21:ec:4a:e0:6f:ea:ee:
         2e:c2:dd:b4:ed:85:28:9f:be:fc:81:72:ac:b2:a9:1c:05:a5:
         ef:8f:00:b7:32:14:85:99:2e:1a:8c:71:58:0e:71:39:e3:4b:
         74:22:63:e3:dd:a2:ed:b0:cd:a5:82:9e:e1:ea:e3:24:31:97:
         35:1c:df:90:21:0d:49:a9:84:d0:74:b3:ee:72:fe:6a:0e:9b:
         1d:fc:2e:4d:3f:f9:d5:b3:9d:11:45:32:2c:4a:25:7c:da:3f:
         47:f2:28:55:12:4f:94:cb:03:50:8d:01:be:59:c7:aa:bc:f2:
         66:8f:0e:5e:49:70:4c:e6:6c:01:09:df:af:92:03:c6:65:ed:
         90:6f:eb:b8:82:35:ce:e7:37:ef:2a:93:40:98:3b:47:39:8d:
         0b:b8:b2:15:d4:df:24:bc:8f:df:d5:51:4f:ee:7f:74:e8:3c:
         1d:d3:a8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:23 2024 by rpki-client on console-fra.rpki-client.org