Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa
File:                     deb4a797-c84c-366e-afb9-971de9e46797.roa (raw, json)
Hash identifier:          yIV3d/V2tU9AYVxLv96UP7MtX1xjKMRAP4rTDG5YGxM=
Subject key identifier:   F6:5F:0B:D1:F9:45:31:30:7E:FE:90:D1:F4:FC:39:00:79:21:FF:1C
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F432858472044050C81D4DE8C1BFAE680
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa
Signing time:             Fri 06 Sep 2024 16:42:52 +0000
ROA not before:           Fri 06 Sep 2024 16:42:52 +0000
ROA not after:            Thu 05 Dec 2024 17:42:52 +0000
asID:                     38047
IP address blocks:        2602:f83b:2::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:20:44:05:0c:81:d4:de:8c:1b:fa:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Sep  6 16:42:52 2024 GMT
            Not After : Dec  5 17:42:52 2024 GMT
        Subject: CN=064fcf3c-3c1f-4e2d-b75b-1d65db1a0100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ea:4d:22:28:69:e3:18:fe:41:6f:49:7b:aa:
                    9d:a4:53:23:08:5f:02:cc:85:5b:66:15:ca:47:08:
                    64:d2:9d:00:c1:e8:49:b8:a1:14:4b:ab:52:a9:46:
                    26:94:95:50:2e:c2:fc:ed:a7:60:96:0e:f0:a3:28:
                    65:78:4a:92:93:31:7c:c3:5c:fb:4f:57:2b:0a:62:
                    85:6e:36:ea:1b:8b:7e:32:b0:88:78:fc:2e:23:0d:
                    27:f9:9f:ad:a9:7d:f7:0c:58:2b:8d:d1:c7:37:c3:
                    71:e8:bb:5b:f8:d7:db:37:81:94:f3:67:7a:47:e8:
                    a4:05:33:5e:88:44:0b:1a:18:19:46:ee:39:e8:dd:
                    2b:c4:86:68:30:70:37:0d:f5:9a:93:4f:ba:7b:75:
                    b3:8a:69:44:0e:0a:2e:0f:5b:51:ff:28:7e:be:67:
                    61:06:44:b5:4d:f1:2b:0e:94:16:ce:1a:29:a9:c6:
                    25:a3:a7:9a:ff:cd:5c:88:d7:c3:04:40:7a:81:ab:
                    98:fb:26:46:60:bd:be:89:45:cf:89:70:2f:7d:4a:
                    71:c1:e5:5b:f1:ee:15:3e:48:db:08:a6:78:63:5f:
                    43:56:72:2e:a0:82:70:21:01:48:b7:73:49:40:d4:
                    0e:10:18:36:63:66:03:66:f1:c9:4d:b6:bd:33:05:
                    f9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5F:0B:D1:F9:45:31:30:7E:FE:90:D1:F4:FC:39:00:79:21:FF:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b0:36:2c:55:a6:9e:a6:63:77:06:2c:42:e6:05:f2:db:cf:
         cb:08:40:34:6f:57:69:e1:0b:94:bf:8f:a6:ea:c8:ee:49:96:
         77:a7:5a:13:8c:27:4c:97:91:0e:a1:b7:13:7b:b9:d5:88:67:
         45:a9:1c:bd:8d:26:db:69:bb:88:d2:c4:70:4a:30:41:78:f9:
         77:48:56:09:3e:88:29:2c:b7:38:81:d4:d4:7f:51:94:13:6b:
         5e:db:7b:c0:c1:f2:a2:31:c0:1b:dc:b1:d1:b0:d3:b3:b1:4b:
         89:bc:5f:8b:9d:d8:94:e6:3c:2a:83:66:7e:bd:e7:47:3a:1a:
         1e:5b:6c:64:8f:a6:a4:f4:e9:12:85:e5:65:f8:a8:74:13:ad:
         a1:ab:b1:ba:3d:58:3a:4d:3d:d1:68:78:ea:86:4c:a9:25:36:
         e0:96:a7:9b:bc:60:7e:2a:f8:3a:a5:3f:1a:4e:c5:6e:4c:a5:
         28:4c:7d:41:8b:8d:aa:e1:5b:7f:ee:0b:b1:69:67:5f:60:4b:
         e3:c7:64:95:d2:65:ad:dd:76:ca:f8:e4:79:50:56:03:59:e8:
         d9:f4:13:c3:cf:2e:35:60:cf:09:c9:75:fe:80:c8:f4:11:03:
         ae:d8:4f:6f:e0:2f:7e:78:d4:95:ec:8e:6f:26:22:07:51:8e:
         39:7f:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:05:19 2024 by rpki-client on console-ams.rpki-client.org