Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/fe490bdc-2de1-36ad-bcf0-46889237f409.roa
File:                     fe490bdc-2de1-36ad-bcf0-46889237f409.roa (raw, json)
Hash identifier:          Dkt83vNgnizHLr2CFAR7rDK3jD+z+PQqp6Uo9X5bTSU=
Subject key identifier:   B7:5D:C0:94:BB:9D:9E:7B:21:63:90:26:40:72:07:45:61:F1:A2:B9
Certificate issuer:       /CN=5039f611-54f3-4a44-9153-55949e05704b
Certificate serial:       010D0C9F432858474C80C3BE3C465E6FF6339A20
Authority key identifier: 9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/fe490bdc-2de1-36ad-bcf0-46889237f409.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     14618
IP address blocks:        2602:fa66::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:c3:be:3c:46:5e:6f:f6:33:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5039f611-54f3-4a44-9153-55949e05704b
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=5de7fe73-fd7b-4ab1-92e3-04d112a1cb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:51:aa:87:a2:4b:25:20:9e:d6:fb:b2:f0:57:
                    ed:d5:37:45:40:fa:56:45:e8:ac:e7:f2:61:44:1e:
                    fb:99:0d:d4:cb:ad:1a:1d:ab:61:8f:41:dd:0b:76:
                    56:21:dc:5c:95:ae:fb:d5:33:e6:1d:9f:e1:bf:47:
                    f4:1e:3a:a0:84:11:6c:96:d3:f0:df:86:c8:d1:13:
                    39:a6:97:b7:3d:50:4b:cb:6b:27:da:25:08:42:37:
                    5b:5f:0b:a1:ca:34:fb:2a:f3:aa:e5:df:db:54:5e:
                    cd:6a:ab:9d:5f:33:6c:37:91:cf:f9:82:69:5e:17:
                    51:ec:ab:6a:7b:c0:da:ae:f0:bd:74:d0:7b:4f:dd:
                    18:5a:4e:df:9f:40:3f:24:90:fb:11:de:ec:e8:95:
                    60:78:2f:bc:95:6c:4a:01:cb:7c:43:22:0e:e9:60:
                    89:d3:e7:aa:ab:a4:b7:6d:0c:d6:ec:3b:93:11:b2:
                    a6:69:45:0a:0a:63:6e:a7:9a:cb:c7:9a:c7:1b:92:
                    d4:e0:a4:b1:b1:0a:46:c2:c3:d5:f9:eb:26:0b:b6:
                    a8:c4:a0:17:78:8f:75:c2:f1:bc:6b:eb:b2:eb:e4:
                    e8:50:b8:9f:6a:18:68:fc:49:a1:1d:25:96:85:0d:
                    09:04:52:24:2c:66:f4:ae:a8:0f:cc:f8:92:6f:7e:
                    e7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5D:C0:94:BB:9D:9E:7B:21:63:90:26:40:72:07:45:61:F1:A2:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/fe490bdc-2de1-36ad-bcf0-46889237f409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl

            X509v3 Authority Key Identifier:
                keyid:9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa66::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:0b:0f:9a:39:ee:24:05:7f:97:e5:c7:a6:4e:48:b1:3e:56:
         a4:d4:a7:6e:8d:09:d8:b1:d7:86:a7:61:7d:11:9a:b5:17:fb:
         16:e6:97:f9:4e:e3:01:e1:4f:f3:b1:26:57:37:e7:85:9e:cd:
         74:5d:e3:a8:59:6a:f3:23:b6:9b:e9:3c:bd:4d:ee:e7:f4:af:
         e8:ae:1f:6e:5b:37:cd:2a:43:c7:26:c1:3b:c9:4a:79:03:b1:
         3f:b8:75:47:35:1a:87:19:19:d9:5f:e4:78:ba:06:80:63:ca:
         8f:e9:dc:ba:25:05:f6:3d:60:bd:48:a5:81:a4:96:b9:a6:de:
         ac:9a:d2:93:d3:2e:93:a9:06:95:63:07:d9:af:81:95:42:32:
         e6:de:e6:98:89:5a:a1:bd:8f:ba:31:1b:be:46:0e:1e:0b:e1:
         d8:a9:ca:f4:38:ea:9c:a8:ba:3a:48:71:27:2f:ea:80:91:39:
         79:9f:61:e7:a4:bf:7b:2c:4a:f0:8a:ed:58:45:bd:b2:99:98:
         d4:86:a5:60:a9:bc:cb:99:ac:2a:cb:58:b6:2c:b3:a9:50:50:
         4c:dd:36:71:af:28:62:0d:f8:8f:53:5d:10:53:44:16:83:db:
         7a:71:6c:de:c9:78:58:57:7c:0a:b5:bc:cc:fc:b1:c8:24:8b:
         7a:41:bd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:22 2024 by rpki-client on console-ams.rpki-client.org