Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/b908c36a-0e1e-3898-b007-634966e865f9.roa
File:                     b908c36a-0e1e-3898-b007-634966e865f9.roa (raw, json)
Hash identifier:          hEG7AaxRRnS8G5TSvB4FEpik4Xk1bNnx/SRCA0p6jIc=
Subject key identifier:   29:E6:7D:57:49:16:D2:2B:1A:4A:71:75:4C:1A:56:E7:2A:B6:A8:E5
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F43285847B696BD367334A81B461DDDE0
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/b908c36a-0e1e-3898-b007-634966e865f9.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     61112
IP address blocks:        2602:fa4f:800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:bd:36:73:34:a8:1b:46:1d:dd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=9e7a41a2-0892-4ee9-a918-9b6b87bd9c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:42:3e:62:53:63:cc:02:01:3b:9d:a0:22:
                    88:08:99:b1:55:62:d6:d6:4f:09:5c:3d:d8:0a:ee:
                    5c:c2:00:a7:af:52:5a:55:ac:34:f8:c9:3e:62:0b:
                    2a:b9:8c:c2:e0:55:b7:b9:1a:54:0a:93:38:88:eb:
                    1c:d7:39:6b:fa:5b:dd:6c:1e:32:84:63:1b:d4:fe:
                    68:b1:0a:bf:e7:fb:9b:11:d8:54:c2:4e:51:67:cb:
                    9f:bb:af:e4:cf:60:45:02:78:c2:7b:3f:4e:45:13:
                    7d:dc:22:a4:55:e7:1d:a9:78:6c:d6:7a:5d:19:c9:
                    3c:78:4b:ee:53:06:1b:4d:35:90:1e:19:4f:df:a8:
                    9e:ae:d1:da:e1:3d:f7:93:5d:9b:08:e3:ee:0d:9b:
                    7d:32:fc:78:15:3b:f4:55:a6:ab:10:7a:e3:19:dd:
                    a2:3d:81:22:ba:a3:d0:55:23:b4:d5:9b:73:be:b0:
                    c4:c7:23:ce:de:32:2c:a1:e9:5a:4b:63:98:5e:2b:
                    f0:41:62:2f:b7:8e:a2:29:fd:b5:6c:5c:04:b1:2d:
                    68:83:73:50:9b:17:41:65:70:31:f6:39:e2:8d:43:
                    89:3d:fb:fc:76:25:b7:c8:5a:4c:eb:95:f0:88:fe:
                    e6:dc:ea:3b:bf:68:18:9c:84:6e:74:79:1b:be:68:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E6:7D:57:49:16:D2:2B:1A:4A:71:75:4C:1A:56:E7:2A:B6:A8:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/b908c36a-0e1e-3898-b007-634966e865f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:a8:3c:5e:55:22:83:60:24:62:87:7a:b0:d5:ab:8e:76:70:
         8b:d8:94:4a:55:4e:23:1b:7b:41:fa:f4:2b:4c:f4:67:60:42:
         46:2c:e9:c3:75:d9:c4:c1:5d:5a:05:ce:f4:13:80:21:6b:a5:
         f8:85:80:42:62:c4:4f:67:fd:0e:60:35:8b:55:71:74:03:59:
         44:b4:4b:e3:5f:6b:0b:62:6f:53:34:51:66:aa:3c:60:03:d8:
         79:04:ad:32:6a:38:0e:34:39:75:bb:0b:61:0d:86:30:e1:33:
         16:df:0e:d5:55:83:6e:77:5e:ed:8b:b3:8d:df:21:f6:61:03:
         b7:81:d8:0b:2c:f1:16:ff:20:64:d4:bf:dd:1b:23:89:dd:fa:
         14:be:10:11:3d:d4:97:6e:84:0c:2a:a5:7a:43:d9:f4:db:5a:
         b8:bd:4e:6d:17:93:8d:c9:48:8a:7a:39:8e:30:12:a6:98:b4:
         da:2d:9d:ea:12:3b:76:d6:f7:51:4d:5c:22:56:6d:50:3f:37:
         0d:b2:be:47:2d:01:e9:e5:02:f7:55:20:51:38:5c:59:35:0e:
         29:2c:2b:a5:a2:a6:48:ad:1c:eb:9c:80:37:ba:f0:bc:c1:f6:
         8a:8e:b9:0a:28:27:1a:db:73:cd:8b:db:2d:22:c5:c7:18:32:
         75:84:3a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:49 2024 by rpki-client on console-ams.rpki-client.org