Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/2a2f4714-2c65-36d5-8951-275886c50180.roa
File:                     2a2f4714-2c65-36d5-8951-275886c50180.roa (raw, json)
Hash identifier:          LjvVKIB9fq5Fbc8Er/QPC3yq/P4cnG8MM55c5u2iBIg=
Subject key identifier:   E5:83:84:D5:7F:7A:16:DD:80:E7:8C:66:8C:DC:8B:07:0A:A6:25:7A
Certificate issuer:       /CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
Certificate serial:       010D0C9F43285847D0EDAC3A2A260BF0643B1100
Authority key identifier: 81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/2a2f4714-2c65-36d5-8951-275886c50180.roa
Signing time:             Fri 08 Nov 2024 23:26:58 +0000
ROA not before:           Fri 08 Nov 2024 23:26:58 +0000
ROA not after:            Thu 06 Feb 2025 23:26:58 +0000
asID:                     54981
IP address blocks:        2602:fa16::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d0:ed:ac:3a:2a:26:0b:f0:64:3b:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
        Validity
            Not Before: Nov  8 23:26:58 2024 GMT
            Not After : Feb  6 23:26:58 2025 GMT
        Subject: CN=d83559da-6177-49ce-9b5e-478780f1bd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:aa:9b:c5:61:55:09:79:e8:2d:8d:c5:21:
                    fe:f5:e7:66:15:d2:d7:4c:da:4f:ac:c0:cc:20:6b:
                    6b:8b:68:19:96:81:12:63:b2:db:8b:bf:6b:cf:f4:
                    ff:b4:c1:ed:a7:a7:36:86:59:f4:89:a6:38:2f:b6:
                    aa:79:85:db:db:98:0a:06:a8:79:3b:de:4f:2f:e1:
                    dd:c5:3e:52:9d:7c:98:66:aa:e4:56:29:52:e2:90:
                    1d:6e:a7:ac:c1:32:8d:e9:08:78:68:b9:ed:a0:2c:
                    21:fb:04:1e:e4:a4:1e:14:a7:b1:49:52:34:b2:11:
                    e5:8a:39:4c:04:eb:3f:2e:1a:ac:94:6f:57:65:f2:
                    16:51:70:99:0d:b2:1e:b7:3f:2b:b7:a7:52:61:8b:
                    ae:31:64:81:02:56:5c:88:3b:7a:e7:ea:aa:f8:2c:
                    e4:50:86:5b:8d:c7:fa:3f:44:35:51:93:a2:09:d4:
                    0b:a6:c8:34:2b:5c:0a:7f:93:74:d4:52:1f:8f:e8:
                    97:11:15:f3:b0:a4:33:82:95:1a:a3:3c:a8:88:2a:
                    27:5e:82:40:0f:14:44:7e:0e:ac:d4:fe:d8:bc:f2:
                    18:bb:e8:08:f1:c3:59:62:87:22:c1:e2:ba:2d:a6:
                    1e:10:af:53:62:9f:63:4d:82:9b:65:41:b3:8d:25:
                    36:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:83:84:D5:7F:7A:16:DD:80:E7:8C:66:8C:DC:8B:07:0A:A6:25:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/2a2f4714-2c65-36d5-8951-275886c50180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl

            X509v3 Authority Key Identifier:
                keyid:81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f7:3c:5b:e5:95:ef:cd:cd:26:58:85:73:0c:a5:b6:d5:8b:
         6d:cf:b1:c3:39:e2:79:ba:c8:f3:2a:72:1e:3c:8d:33:7e:e7:
         0d:25:49:26:43:02:76:91:cd:c4:c4:a8:d3:30:78:28:16:69:
         b6:ab:e0:23:b1:aa:62:d5:9a:59:ea:3f:88:c9:7f:32:73:b8:
         a2:7e:28:95:1c:c7:50:ee:e1:40:c9:7d:5b:67:25:53:3f:15:
         9c:38:e0:ef:99:bf:36:42:6b:dd:0c:85:0a:ae:2f:07:9b:48:
         c1:d0:d7:72:e2:d7:1c:82:ec:a9:63:3f:77:1b:00:0a:18:9f:
         d1:41:ad:d1:e4:ae:34:3e:b2:35:b5:92:07:3d:1a:d4:ec:0e:
         2d:0b:8b:e8:70:44:b6:a0:d5:38:c0:01:95:14:42:da:b3:29:
         d6:56:68:72:11:23:ee:4f:f9:c5:84:f0:37:f0:ea:53:51:f9:
         d3:ac:e1:8f:d2:e8:bc:7e:62:c5:b9:d7:10:9c:3b:d0:ee:5d:
         29:2e:f0:cd:54:45:dd:d6:73:b8:8d:85:49:ef:a3:28:70:0f:
         e2:29:ae:c0:0b:67:52:12:84:6d:3a:39:02:51:74:02:04:12:
         ea:98:23:97:f4:ed:e7:09:74:89:52:b0:59:7b:1d:bf:92:c7:
         87:5b:fd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:27:11 2024 by rpki-client on console-fra.rpki-client.org