Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/7ac02b00-e2d5-3e8c-b263-d5304f7716d1.roa
File:                     7ac02b00-e2d5-3e8c-b263-d5304f7716d1.roa (raw, json)
Hash identifier:          hJR7lmPrZ10lsNu5FBeQkYmJU5G0BsPKuZvNNfHPm/Y=
Subject key identifier:   25:88:4D:AE:0D:F0:CC:7F:2D:64:B6:FF:42:D7:1E:04:B9:82:E5:93
Certificate issuer:       /CN=41fd7014-304a-4567-8e40-00c686067021
Certificate serial:       010D0C9F43285847C05C0E794EF4811AF0E72640
Authority key identifier: BF:02:DB:00:C4:CC:5B:8C:84:38:99:A1:A1:3C:21:B4:11:26:EC:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/7ac02b00-e2d5-3e8c-b263-d5304f7716d1.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     31788
IP address blocks:        2602:f844::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:0e:79:4e:f4:81:1a:f0:e7:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41fd7014-304a-4567-8e40-00c686067021
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=d638f087-bf06-44ad-8645-207c782533be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:ab:4b:bb:f5:07:c7:65:5a:22:f0:8b:b0:
                    cc:20:bb:4a:61:bb:2b:a2:bb:31:ef:5b:4e:bc:ac:
                    36:23:57:44:13:24:df:98:17:78:be:e0:47:33:20:
                    ed:89:6d:77:4a:6b:bb:ed:2c:87:fe:cd:c7:f0:6f:
                    08:ff:c4:ab:f2:ca:b0:dd:33:cc:fa:9b:68:20:8c:
                    7c:8c:99:39:ac:bb:2d:77:29:1f:4f:7a:f8:bc:6e:
                    da:d5:d9:7f:fa:91:a8:9a:8a:ff:0a:1b:11:4a:04:
                    2a:38:15:2c:85:93:73:14:44:59:0c:ff:94:09:b4:
                    f5:82:78:1e:82:89:93:47:81:e1:6d:93:3a:41:8d:
                    09:2f:b5:99:a2:b1:b9:79:22:7b:a1:d3:e8:d5:85:
                    77:ac:16:c9:31:0a:a2:b2:4c:c8:29:5c:3d:a3:6a:
                    72:dc:33:a7:a3:0a:1a:da:11:43:53:0d:ec:21:9b:
                    df:4e:6f:b0:ba:d5:f0:f6:be:9c:e2:27:7c:76:47:
                    62:39:df:f5:94:2f:94:96:17:04:10:43:7e:a4:ef:
                    31:6d:ea:ca:2d:17:3a:1c:41:a6:dc:26:b8:bf:8f:
                    d6:de:c5:da:88:fa:82:4e:f9:2d:7b:47:a3:58:ce:
                    93:eb:2b:53:aa:14:44:52:5c:67:36:9d:d0:13:32:
                    10:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:88:4D:AE:0D:F0:CC:7F:2D:64:B6:FF:42:D7:1E:04:B9:82:E5:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/7ac02b00-e2d5-3e8c-b263-d5304f7716d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.crl

            X509v3 Authority Key Identifier:
                keyid:BF:02:DB:00:C4:CC:5B:8C:84:38:99:A1:A1:3C:21:B4:11:26:EC:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f844::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d0:00:79:c7:62:24:3d:9c:68:b2:00:cf:46:49:30:a8:21:
         c8:77:95:87:e0:e5:1b:c3:7b:bb:c7:ba:5f:18:e8:d6:1f:f5:
         fc:7c:52:f1:91:ce:56:5e:11:ed:9b:97:35:ec:02:d8:b2:d4:
         95:de:a5:2b:1e:dd:36:ee:1a:f7:24:74:a4:b1:94:ff:bc:e1:
         3c:6d:23:16:74:dc:40:3f:29:3e:44:fb:7e:9b:0c:2d:8b:3c:
         b1:c5:5a:da:43:14:38:0a:25:82:30:ab:c8:9d:c8:22:62:6b:
         52:b0:2c:11:12:d7:81:8c:43:a7:5c:3e:07:c3:4a:83:4f:66:
         ba:ae:08:e1:8b:62:de:0c:54:f5:4c:56:50:02:90:d4:3b:41:
         d7:4c:64:00:8c:0c:c3:0e:1f:4d:46:98:03:6f:ae:7d:4d:60:
         24:31:bf:a0:6b:9d:4a:29:2c:da:ed:00:0b:7a:92:3b:e8:0c:
         6b:e7:90:f8:11:f5:0c:6e:9c:d4:08:e3:b7:41:69:db:72:3a:
         7b:c7:c6:a4:be:ae:cb:e6:55:ef:f7:f6:49:bc:f8:8d:70:13:
         fb:55:47:0d:3a:b1:65:86:ed:c3:c1:fc:f5:36:c5:94:61:9f:
         3e:86:12:0a:15:c5:d1:71:77:a1:ea:57:2c:fa:a1:53:94:0e:
         19:63:4e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:28 2024 by rpki-client on console-fra.rpki-client.org