Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/11c8c619-516a-3b58-aebf-93589cfa4504.roa
File:                     11c8c619-516a-3b58-aebf-93589cfa4504.roa (raw, json)
Hash identifier:          F3eI+2TQtVSwGhftj25IgHtmTj8fMwSt5zu8ruXetoU=
Subject key identifier:   C0:1A:7A:6B:57:1A:B6:0B:DE:E5:9E:0F:BF:E2:DD:0E:57:D4:17:78
Certificate issuer:       /CN=0e425ca6-d583-4845-b329-c74ded17c483
Certificate serial:       010D0C9F43285847D20F613544C32713742E4F80
Authority key identifier: AA:B3:FB:81:AE:59:95:51:87:05:0A:1C:4D:1B:70:3C:92:DC:C1:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/11c8c619-516a-3b58-aebf-93589cfa4504.roa
Signing time:             Sat 09 Nov 2024 09:10:41 +0000
ROA not before:           Sat 09 Nov 2024 09:10:41 +0000
ROA not after:            Fri 07 Feb 2025 09:10:41 +0000
asID:                     20200
IP address blocks:        2602:f7b5:ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:0f:61:35:44:c3:27:13:74:2e:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e425ca6-d583-4845-b329-c74ded17c483
        Validity
            Not Before: Nov  9 09:10:41 2024 GMT
            Not After : Feb  7 09:10:41 2025 GMT
        Subject: CN=a3a2a991-0ed7-4c93-8b5d-15adfc5045a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:0c:0b:aa:33:70:d4:89:c9:88:89:3c:17:
                    03:a1:79:9e:7e:a1:a6:49:2e:96:59:30:81:c1:1a:
                    e8:36:58:8b:ee:3f:2f:db:3e:ea:8a:1b:71:f7:35:
                    da:00:9e:75:db:6d:74:77:67:ec:91:4d:dd:83:62:
                    f3:bf:0b:d6:7e:68:37:fd:05:ec:65:2f:37:eb:d6:
                    3f:ab:a0:0c:2f:1f:1b:9a:a9:f7:67:41:2d:98:40:
                    50:b2:10:b2:26:06:af:8e:3b:15:4e:81:f7:53:74:
                    b2:db:36:3d:41:95:46:13:f2:33:97:bb:e9:42:89:
                    b8:4c:32:78:16:64:e5:80:e8:af:39:4a:d6:40:cb:
                    3c:ae:2b:1d:86:9d:8e:3a:ab:a9:04:18:51:51:c3:
                    3b:dd:b0:a1:ac:3c:95:59:be:c2:69:16:3b:b3:3f:
                    40:f8:23:14:44:d0:da:a1:52:4d:5d:78:69:0b:1f:
                    8e:93:06:d4:ab:f9:73:d2:c5:6a:72:4b:4c:cb:53:
                    11:bf:e1:19:e7:07:7f:10:80:c0:8b:dc:30:2e:0b:
                    eb:4b:3b:35:71:72:81:75:41:d4:93:52:4d:d8:06:
                    b8:6a:02:a5:4e:47:a9:a5:a5:07:91:b3:8a:c5:38:
                    76:90:a6:95:b5:e7:8e:4b:0d:03:0d:04:35:6a:4f:
                    b5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1A:7A:6B:57:1A:B6:0B:DE:E5:9E:0F:BF:E2:DD:0E:57:D4:17:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/11c8c619-516a-3b58-aebf-93589cfa4504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.crl

            X509v3 Authority Key Identifier:
                keyid:AA:B3:FB:81:AE:59:95:51:87:05:0A:1C:4D:1B:70:3C:92:DC:C1:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7b5:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:d3:3f:25:1f:a0:db:37:03:44:42:3d:22:55:85:d6:f1:1b:
         ef:dc:c8:dd:fc:6d:bc:a4:49:a7:19:5e:6f:9a:fc:28:74:aa:
         43:e8:cb:ac:49:9a:01:12:c8:74:43:40:11:7e:ac:df:c4:2b:
         4b:2a:6c:1f:6b:88:b6:a2:9f:5e:34:0d:5f:c4:44:4a:e8:22:
         b6:20:9c:f3:40:ba:43:d4:94:3a:13:fb:4e:45:b6:24:55:1e:
         c4:d4:1e:c0:d8:a5:7b:59:b3:a9:94:fd:0e:ae:3b:38:91:de:
         3c:0c:d6:32:20:ab:ec:09:e7:61:c4:cd:60:76:8b:5d:da:f6:
         d7:b5:46:9b:6f:ed:bb:40:21:ec:0f:18:aa:42:6b:01:dd:fe:
         fb:98:1b:70:f6:5f:83:58:a9:0f:ac:c7:cc:4b:ab:97:7e:3c:
         68:9c:f8:72:cd:f1:e3:98:e4:8e:b3:93:cc:88:ef:39:22:c5:
         e0:e8:d9:c3:9e:18:ef:79:33:15:cd:78:7b:f3:e5:8d:8f:f8:
         0e:8b:9e:f1:cd:54:d1:08:a8:e0:5e:63:e4:6d:3a:7c:58:7b:
         b6:80:41:a8:29:a4:85:1f:47:da:fe:cc:b2:34:4e:d1:77:b7:
         9e:ce:53:2e:3e:32:1d:9b:47:85:cc:7b:3a:85:23:f3:ad:74:
         e5:07:af:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:17 2024 by rpki-client on console-ams.rpki-client.org