Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa
File:                     1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa (raw, json)
Hash identifier:          ZuPVT1pxUo4opquFqD8/Sle4YXYG2SLKu9Bjkm+raQY=
Subject key identifier:   D4:0B:11:74:0C:6D:21:0B:27:F7:0E:9E:19:1D:04:09:2E:47:65:48
Certificate issuer:       /CN=08e3f98b-676d-49af-91dd-964a1e63df3b
Certificate serial:       010D0C9F43285847010FFA69EC74754AD8E1F880
Authority key identifier: FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa
Signing time:             Mon 26 Aug 2024 12:27:57 +0000
ROA not before:           Mon 26 Aug 2024 12:27:57 +0000
ROA not after:            Sun 24 Nov 2024 13:27:57 +0000
asID:                     8075
IP address blocks:        2602:faa7::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:0f:fa:69:ec:74:75:4a:d8:e1:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e3f98b-676d-49af-91dd-964a1e63df3b
        Validity
            Not Before: Aug 26 12:27:57 2024 GMT
            Not After : Nov 24 13:27:57 2024 GMT
        Subject: CN=3c2c2293-581d-4376-bae4-e0592c129c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:eb:28:a3:f9:72:13:98:08:30:c1:7c:64:
                    83:bc:ea:7c:cc:49:ac:c9:83:cb:e6:f2:a8:9c:30:
                    e3:56:29:a0:d0:f1:0d:1d:73:0e:5d:72:da:e4:a5:
                    9c:61:c4:af:47:8b:84:58:ee:7a:c9:8f:61:08:06:
                    bc:91:80:99:19:cf:68:39:54:75:96:5d:21:8b:6e:
                    37:ea:5b:28:33:a5:fd:79:bc:f8:c6:62:71:1f:bf:
                    55:c3:c8:cc:d2:c2:ce:1c:84:db:dd:03:5e:73:e7:
                    b4:9a:41:f9:2a:49:aa:87:ac:54:41:13:58:33:65:
                    0c:ef:46:5c:23:0e:f0:10:2e:76:d8:76:51:d7:a3:
                    f0:f0:39:f5:11:c4:09:92:72:27:20:91:a1:1e:97:
                    9d:4a:9b:b1:8d:a2:ff:9d:5a:7a:80:5d:e0:a1:4d:
                    5c:7a:23:19:2f:c6:0e:7f:00:15:e1:87:45:d2:b7:
                    eb:a7:42:cc:20:99:5e:64:59:ac:b7:63:6d:42:40:
                    a8:ba:22:0b:c7:2b:1a:1d:fd:bf:eb:e5:df:f7:bc:
                    2a:5c:f2:81:9f:3e:10:b5:eb:86:73:ff:70:ae:48:
                    62:7d:a8:f0:f1:51:2a:28:79:13:56:d8:3b:a9:a0:
                    b4:7a:b9:8f:85:22:7a:76:a2:39:5c:2b:f2:19:a4:
                    de:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0B:11:74:0C:6D:21:0B:27:F7:0E:9E:19:1D:04:09:2E:47:65:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:07:6f:66:c1:fb:65:a1:15:b6:fc:c1:51:64:27:fc:3d:c3:
         d4:55:25:26:a7:99:da:36:bf:fa:57:ee:de:f5:b3:7f:e3:18:
         a8:4e:d3:19:0b:78:a4:47:1f:14:a5:71:af:8d:56:ff:40:1b:
         e4:6d:94:c4:c5:bc:c5:85:a9:15:11:92:ae:87:51:37:c1:da:
         69:59:6f:ce:07:48:9f:26:a6:34:cb:25:f4:30:fe:6b:69:c8:
         4b:bf:a7:91:0c:a0:2c:eb:fd:44:bd:00:8c:39:c7:0d:dd:40:
         4b:da:c8:18:27:65:3b:66:8d:43:c5:6c:c6:3f:95:12:d6:76:
         75:4e:d0:e3:0f:39:0a:00:6a:90:c6:01:bc:93:19:66:2c:98:
         77:e6:cd:a8:33:41:53:e0:cc:98:0e:fb:80:19:2b:72:ce:7f:
         7e:e5:c1:52:81:aa:a1:58:c9:59:0a:04:09:f1:2e:ab:eb:15:
         df:3d:81:2d:88:c6:4d:66:e7:3c:1a:0f:67:ef:cc:21:5b:a8:
         80:b8:21:5b:a6:fd:03:c7:d0:5c:25:aa:41:93:e3:9d:65:2d:
         31:1b:c6:24:1a:91:28:73:96:26:e7:bc:b2:06:0e:08:71:0e:
         50:cf:85:e7:da:20:46:2b:48:69:f8:3c:bf:83:1c:73:ea:21:
         82:d0:6a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:27 2024 by rpki-client on console-ams.rpki-client.org