Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/22ab000e-c5e2-33df-8bb6-3ec288e36c23.roa
File:                     22ab000e-c5e2-33df-8bb6-3ec288e36c23.roa (raw, json)
Hash identifier:          gpWtKFx3xHEU4q+loNuREI+SRG8O89F6eeIeHCRU1TI=
Subject key identifier:   9A:4C:07:D9:9F:A0:B6:DB:A5:1A:4E:3E:34:3D:FB:85:D6:65:32:A4
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F432858472046401B9D3C57EDF2C9FE00
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/22ab000e-c5e2-33df-8bb6-3ec288e36c23.roa
Signing time:             Fri 06 Sep 2024 16:47:22 +0000
ROA not before:           Fri 06 Sep 2024 16:47:22 +0000
ROA not after:            Thu 05 Dec 2024 17:47:22 +0000
asID:                     62517
IP address blocks:        2602:f83b:1688::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:20:46:40:1b:9d:3c:57:ed:f2:c9:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Sep  6 16:47:22 2024 GMT
            Not After : Dec  5 17:47:22 2024 GMT
        Subject: CN=9ae60805-5dc8-4c24-a1a0-b77ca4d2f8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:0d:f5:03:15:82:d5:1e:5c:31:66:90:58:
                    65:87:24:f3:fc:1c:1f:52:f4:39:71:b2:51:18:dd:
                    a7:15:b2:02:de:5d:63:d4:18:a0:d2:a7:a5:b2:1f:
                    96:54:f0:66:76:d5:c5:5f:bb:39:b4:28:48:29:17:
                    db:43:c4:93:38:a5:2b:b2:b0:03:d0:0c:b0:29:4f:
                    c6:3a:dd:54:3a:f1:0a:66:8b:60:29:d4:54:48:37:
                    71:f3:30:30:58:a5:b5:8b:1c:cd:89:25:8b:76:3e:
                    d3:cf:c3:bb:5f:43:4a:1b:14:2d:83:ae:93:3e:05:
                    c5:35:cf:67:7a:f7:68:b2:97:c7:5f:53:15:12:75:
                    9d:eb:ec:64:91:ca:7a:5b:0d:c0:ad:1d:05:36:68:
                    17:1f:30:f3:de:df:c4:d5:8c:ce:1c:0b:4e:1f:2e:
                    6d:1e:b8:7c:8d:cf:be:9e:ec:bc:f8:22:ca:fe:d4:
                    12:67:b1:35:47:42:77:60:39:52:03:1a:66:16:70:
                    f6:df:f8:9e:93:97:6d:cf:01:6b:96:ca:75:ad:02:
                    9f:9b:ef:1f:ee:24:2a:44:93:8d:da:90:b5:4a:a0:
                    79:f7:c6:be:d8:b7:e8:5f:a2:74:1d:33:75:43:c8:
                    f7:47:48:f2:ab:12:62:60:fa:83:ca:1f:1e:dc:fa:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4C:07:D9:9F:A0:B6:DB:A5:1A:4E:3E:34:3D:FB:85:D6:65:32:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/22ab000e-c5e2-33df-8bb6-3ec288e36c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:1688::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:69:92:33:2b:71:d7:29:f7:b6:f2:1e:d4:0b:7d:ca:19:e8:
         e5:0b:53:e5:b7:7b:eb:58:67:51:47:bd:05:d4:8f:d8:20:31:
         ce:70:15:57:05:5d:1b:23:f5:5a:94:f6:9e:2c:2c:61:c7:3c:
         0e:c1:a5:53:42:2a:90:24:02:58:be:08:1e:2c:14:e2:79:d5:
         f0:e4:25:d0:ee:cf:f0:34:fe:bb:ae:c5:78:83:b8:5a:9b:ed:
         c3:27:ff:4c:81:10:a7:48:c3:e6:48:ec:a1:dc:36:25:69:62:
         b6:ea:d7:cc:96:f2:74:04:b9:10:22:c0:32:9f:2d:d7:e5:71:
         11:78:3f:8a:0d:49:ba:dd:a5:e1:49:03:3c:a9:7f:62:83:d9:
         e8:42:b4:cc:3c:85:5d:3a:d7:e5:be:d9:52:9c:d7:19:d1:67:
         a7:eb:5c:c0:13:4b:0a:81:93:cc:d2:39:c3:6b:59:ee:75:9a:
         1f:57:5a:40:17:f8:c6:15:4a:eb:26:57:45:0a:d2:de:3f:ef:
         c5:bb:58:49:8d:91:61:c8:cd:21:bf:65:86:21:f3:16:1b:ea:
         db:c0:7d:95:ea:0e:da:61:c7:33:42:71:07:cc:d7:e3:61:e4:
         9e:41:67:d5:88:22:62:6c:f2:db:c2:51:ce:51:81:bc:1c:4c:
         ab:ce:c8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:29 2024 by rpki-client on console-fra.rpki-client.org