Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5627e100-c664-3915-9d0e-2b2a862911a1.roa
File:                     5627e100-c664-3915-9d0e-2b2a862911a1.roa (raw, json)
Hash identifier:          Y25YlAhm18jTLOLhNxUM8LKNfdkV12DQrB+snOSmyJ8=
Subject key identifier:   FE:51:B0:BD:A2:49:E9:33:9B:02:A6:7E:F6:D5:6B:B9:E8:B6:51:93
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F43285847205D8DA94B04528858B08580
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5627e100-c664-3915-9d0e-2b2a862911a1.roa
Signing time:             Fri 06 Sep 2024 17:34:19 +0000
ROA not before:           Fri 06 Sep 2024 17:34:19 +0000
ROA not after:            Thu 05 Dec 2024 18:34:19 +0000
asID:                     38047
IP address blocks:        2602:f83b:55::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:20:5d:8d:a9:4b:04:52:88:58:b0:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Sep  6 17:34:19 2024 GMT
            Not After : Dec  5 18:34:19 2024 GMT
        Subject: CN=4f950f52-211a-448c-84ee-f5be7750ff78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d3:7b:47:91:7d:3e:31:13:ed:92:f8:65:f7:
                    16:fe:86:1f:d7:49:f4:43:56:fd:ea:d0:33:ae:1e:
                    23:4c:60:7d:ce:e2:de:19:fb:09:63:96:4e:47:67:
                    8d:b0:42:ad:aa:23:a2:1f:21:41:69:ab:a1:60:13:
                    b2:ea:7a:eb:4d:5d:1e:16:fa:e6:00:aa:5b:a6:56:
                    e1:48:22:b4:0f:07:fc:e8:09:7b:21:3f:4f:c4:5b:
                    2c:5b:68:cf:fd:b9:d5:e9:a8:e3:5e:36:5e:6b:a8:
                    83:40:4a:cf:48:a2:94:ca:40:7f:d7:c9:b3:a7:f8:
                    96:a6:84:52:b4:8c:4b:19:46:3f:33:7e:81:42:10:
                    82:83:e2:59:9b:58:bb:04:cd:0e:16:6f:96:31:66:
                    44:88:38:77:7b:eb:19:14:35:58:f7:68:24:1b:55:
                    6d:b6:c9:b4:fe:c2:8a:cc:c8:69:1e:1d:3d:f7:08:
                    b9:a8:d0:26:8a:89:2b:39:72:86:81:d1:89:da:f6:
                    8c:3c:58:b6:23:e4:4f:bd:9e:97:6c:f6:20:97:b6:
                    fa:cf:59:41:33:48:84:12:b1:a5:7d:81:ab:c5:84:
                    68:ae:11:c2:94:00:95:81:61:88:8f:45:3d:a5:2b:
                    0b:96:53:ed:6a:18:ef:0a:ca:87:1a:af:7d:d0:1f:
                    c1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:51:B0:BD:A2:49:E9:33:9B:02:A6:7E:F6:D5:6B:B9:E8:B6:51:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5627e100-c664-3915-9d0e-2b2a862911a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:55::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e1:7e:82:31:da:e6:eb:7a:71:4a:73:1a:07:5c:83:a1:2a:
         51:0e:d1:60:74:b9:a1:7e:02:3c:e7:de:00:2f:24:32:7e:75:
         5d:cf:9b:b7:9a:8b:4d:61:9a:68:45:aa:1b:d1:26:c4:45:eb:
         83:7a:fd:bc:49:87:50:ac:1d:a3:f8:59:ac:3c:1a:1a:da:f5:
         43:2d:ec:02:0e:3a:dc:3d:88:75:4a:21:b2:79:b1:ce:ec:2a:
         e3:ef:6e:2b:b6:a2:4a:ec:f9:a0:d9:8d:b6:58:37:58:8d:53:
         f2:75:2a:be:a7:34:e9:23:b0:44:b3:a8:c3:83:1c:9b:d6:f0:
         9f:b4:5b:6f:41:52:70:18:64:5b:93:65:e0:b7:0d:84:2d:04:
         3f:2c:ee:f4:a9:1d:89:50:68:d9:cc:14:07:25:69:b2:27:e0:
         27:97:6d:38:cc:a0:ca:f6:23:79:0e:5c:65:29:76:8b:ff:53:
         c5:94:ff:af:9c:8d:cd:08:60:3d:1d:8d:f7:d4:32:af:8c:69:
         87:e7:a7:e4:fd:14:9d:b6:0a:6f:60:c2:7d:a2:5b:83:15:bc:
         0a:78:03:8f:2d:ee:b1:c9:1b:92:84:d8:fa:f6:dd:d7:ca:fe:
         03:46:9a:0e:1a:3c:1b:cc:e7:21:d0:f3:b6:4c:0a:87:a8:d5:
         41:52:d1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:06:21 2024 by rpki-client on console-fra.rpki-client.org