Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa
File:                     c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa (raw, json)
Hash identifier:          nQ07REPM0bvswi9BZjGsmJm43XG2RG5zhAYtHWYCdFA=
Subject key identifier:   EA:7F:08:AD:0A:6B:94:40:CF:3C:E9:83:01:37:46:0F:DA:6F:0D:2A
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F43285847D6CF47FE1E7338BE2827BB80
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     36519
IP address blocks:        2602:80a:f000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:47:fe:1e:73:38:be:28:27:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=1cddc0c6-89cf-41f5-be23-ad2cf9b1aafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:05:6b:39:3a:d0:b3:86:c5:fb:bf:be:ad:62:
                    55:d1:36:c5:16:8c:bd:6b:41:b2:50:a4:dd:0b:02:
                    9d:ef:90:09:da:23:e1:5f:3f:bd:84:44:d4:03:7f:
                    d5:ef:ee:ee:e4:1e:79:eb:62:80:6d:04:1c:aa:85:
                    3d:78:d2:cf:9f:38:d7:d7:70:c8:86:74:1d:12:9e:
                    be:39:08:2f:21:b2:02:6e:18:2d:bb:21:5e:90:3a:
                    f7:0d:80:54:04:7b:9c:03:df:77:3b:c9:35:41:16:
                    a1:26:e0:ff:95:aa:f4:2d:7a:49:5f:af:4e:50:22:
                    21:96:b0:5d:2c:ec:dc:8d:cd:a3:70:7b:30:65:34:
                    1b:6d:a2:97:a1:0f:54:9c:f9:9e:40:ba:43:2f:9a:
                    ff:35:a5:d4:fe:36:44:6d:95:28:03:d3:8f:cb:95:
                    50:f2:d6:f8:5c:ee:e0:3e:d9:2b:1e:a1:3f:57:f0:
                    32:61:15:b0:c9:9f:14:77:98:98:d5:6b:f4:8c:39:
                    a2:9a:f1:e1:6e:4e:fa:09:42:67:8e:d8:84:a0:29:
                    8c:b4:49:c1:20:6d:45:66:09:fd:d6:81:af:28:5c:
                    38:0a:69:19:98:00:77:ed:22:a4:dd:f3:71:62:48:
                    df:1a:7a:2d:67:29:84:b0:1f:04:ff:21:1e:fc:36:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7F:08:AD:0A:6B:94:40:CF:3C:E9:83:01:37:46:0F:DA:6F:0D:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:43:be:a9:43:3a:50:b8:96:a6:61:20:3d:4d:98:1a:aa:8c:
         80:48:04:1f:2d:9e:47:b4:a0:62:38:de:4c:af:77:f7:f1:eb:
         71:e0:70:28:20:e1:57:f6:10:03:fb:ab:b8:0a:6d:04:b7:c1:
         51:1f:19:a5:3a:d9:33:31:70:31:3a:cf:c6:71:28:9f:45:f6:
         bf:d9:e4:66:bb:a3:c8:60:a2:8a:c7:60:99:f1:3c:be:ad:a5:
         b9:f9:81:af:38:d4:64:86:1e:6b:87:68:61:84:a0:94:44:fb:
         f3:64:99:16:e5:57:d7:88:ff:a6:32:6e:31:c3:05:43:19:bb:
         9a:d6:36:c8:8b:b0:14:3a:3c:8b:0c:d1:8f:9e:0e:03:38:9e:
         04:af:85:3b:e2:a2:67:d2:2d:8e:3c:84:68:59:96:e0:3b:05:
         78:0e:95:f1:23:a7:76:cc:be:92:72:56:31:86:3a:a1:df:87:
         7f:5a:80:fa:c1:f6:60:91:40:d7:89:84:5b:b9:cc:06:78:a7:
         ea:3f:23:f2:1d:2d:de:75:7a:aa:8b:bf:e3:e9:eb:2c:b8:dd:
         07:87:cf:a0:c0:83:2c:8f:e4:4a:f0:b9:f1:01:f3:88:9e:da:
         22:46:a6:17:9d:43:5f:91:ef:e7:49:84:42:2d:68:79:6c:cc:
         8e:18:6b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:12 2024 by rpki-client on console-ams.rpki-client.org