Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/17cdcd49-7e62-3a9a-8a9e-32635b8448b5.roa
File:                     17cdcd49-7e62-3a9a-8a9e-32635b8448b5.roa (raw, json)
Hash identifier:          fgwHe+LKvWCP40C+ent5WURcU8hfswrrksNjKQpZ5hM=
Subject key identifier:   2D:30:37:DB:87:C7:03:1B:F1:B3:E9:80:45:15:78:D4:7A:E3:87:DE
Certificate issuer:       /CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed
Certificate serial:       010D0C9F43285847EA5A0330FA15A7894F585980
Authority key identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/17cdcd49-7e62-3a9a-8a9e-32635b8448b5.roa
Signing time:             Mon 18 Nov 2024 02:00:27 +0000
ROA not before:           Mon 18 Nov 2024 02:00:27 +0000
ROA not after:            Sun 16 Feb 2025 02:00:27 +0000
asID:                     46109
IP address blocks:        2602:fa64::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:5a:03:30:fa:15:a7:89:4f:58:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed
        Validity
            Not Before: Nov 18 02:00:27 2024 GMT
            Not After : Feb 16 02:00:27 2025 GMT
        Subject: CN=ccbd3166-d376-4775-8e55-75bf66031c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:11:85:a5:85:00:67:f4:3d:e3:4d:44:a5:5d:
                    26:b1:ee:c4:3f:7c:ec:b8:55:72:eb:04:7e:53:93:
                    1d:fa:ed:71:0a:58:43:18:0b:59:78:5e:17:06:3c:
                    9a:16:b0:f0:c5:ed:1e:83:26:b9:b6:3d:a2:5d:a1:
                    9e:e0:e8:0d:6e:27:85:e0:08:a6:0e:10:0f:c3:0d:
                    9c:85:83:d9:c5:15:be:85:be:df:92:ca:ec:34:08:
                    4f:9c:e0:a5:94:e5:ea:bc:51:7d:8e:72:d7:43:33:
                    8e:1a:4e:fe:a6:51:37:31:f9:f4:42:71:8a:a8:6d:
                    71:89:d6:8c:21:66:3d:27:19:c3:8f:73:50:a5:bd:
                    67:3f:ff:8c:95:da:ec:16:47:a9:20:86:15:c2:ab:
                    95:5c:fd:7b:2f:09:0f:d8:21:86:08:33:02:4d:5a:
                    35:5c:4f:e5:cb:d5:87:89:32:eb:59:cc:9d:34:85:
                    0a:45:0f:e5:2c:c6:9e:b0:3d:01:c2:ec:85:51:33:
                    01:1c:d1:ed:2c:6f:97:35:9e:67:ba:1d:b3:d5:3e:
                    39:46:88:0c:ed:45:6c:d6:5b:7b:b3:67:54:3e:fc:
                    24:0b:8e:3c:00:a3:5b:5a:83:0e:9a:11:d2:da:ae:
                    9a:d9:e2:ff:6d:db:c7:51:26:8b:ad:3a:22:72:b2:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:30:37:DB:87:C7:03:1B:F1:B3:E9:80:45:15:78:D4:7A:E3:87:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/17cdcd49-7e62-3a9a-8a9e-32635b8448b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl

            X509v3 Authority Key Identifier:
                keyid:06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa64::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:35:a9:a4:7e:41:9b:dc:02:c7:4b:58:7d:9f:35:c5:da:0a:
         f2:ef:ee:48:6a:d6:31:f4:c4:df:82:b8:86:f5:78:59:72:2f:
         55:5b:d9:46:04:71:f0:15:cc:e1:40:f8:2d:0d:f5:eb:98:08:
         6c:3c:c1:36:19:70:4f:0e:c0:56:72:3f:92:45:80:3f:06:9e:
         2a:0d:0d:b9:c5:2f:7b:bd:1d:1b:d2:ad:b0:19:ab:69:09:28:
         2e:81:3d:b1:32:28:c8:09:56:42:9a:98:6a:92:a4:9d:09:7b:
         05:f6:75:39:df:0e:56:05:05:96:29:46:a1:30:14:1d:29:41:
         29:22:59:43:32:d9:f1:78:f1:c4:cd:ec:4c:b9:35:e7:46:1b:
         c1:18:7b:ec:4a:f1:91:55:4f:1c:e0:cc:f9:82:42:eb:b2:99:
         5c:8b:95:40:78:74:d4:8a:fd:fd:90:41:2d:71:7e:06:f4:9c:
         51:18:2a:df:d7:dc:40:13:c0:a0:f5:b5:8c:ed:ea:09:e9:f0:
         27:26:7a:fb:b2:9b:a4:d2:ef:15:51:31:63:da:3d:01:df:08:
         07:f2:0a:b9:70:0d:ba:b4:32:02:7e:4e:c6:6a:18:04:dc:54:
         e9:48:9c:ff:cd:e9:94:40:4d:2c:e9:c8:aa:29:f5:d2:91:e3:
         26:c5:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:11 2024 by rpki-client on console-fra.rpki-client.org