Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/05f0c1d2-6f73-316b-bfe0-7eddb73aa9f8.roa
File:                     05f0c1d2-6f73-316b-bfe0-7eddb73aa9f8.roa (raw, json)
Hash identifier:          fw2rKnMSw1qKh+ywPgRKIOQyn43NPspaO4mrku2M91I=
Subject key identifier:   D0:C2:BA:C4:E9:A5:CA:4E:57:6B:03:C3:F7:16:5C:CD:1E:3D:B1:DA
Certificate issuer:       /CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709
Certificate serial:       010D0C9F43285846E2DA484B3AD82AE5DF3CDA80
Authority key identifier: 10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/05f0c1d2-6f73-316b-bfe0-7eddb73aa9f8.roa
Signing time:             Thu 15 Aug 2024 16:45:31 +0000
ROA not before:           Thu 15 Aug 2024 16:45:31 +0000
ROA not after:            Wed 13 Nov 2024 17:45:31 +0000
asID:                     401275
IP address blocks:        2602:f84f::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e2:da:48:4b:3a:d8:2a:e5:df:3c:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709
        Validity
            Not Before: Aug 15 16:45:31 2024 GMT
            Not After : Nov 13 17:45:31 2024 GMT
        Subject: CN=d2cc463d-f919-4194-965e-0867dabbe01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fc:42:fd:63:ee:de:71:3e:2e:dc:f2:c8:60:
                    d4:d1:7d:54:dc:50:63:a3:f5:d4:30:de:05:0d:5c:
                    74:69:a4:fc:aa:4b:23:7d:b7:3b:ea:d7:09:f2:40:
                    94:ed:c0:cc:b9:e5:f7:10:f2:2c:07:85:d1:a2:26:
                    ad:6c:9b:6d:68:94:0d:ca:25:25:6a:45:b6:e3:91:
                    0c:3f:e0:a0:4b:51:aa:e0:31:e8:bb:f9:0a:e2:f4:
                    1e:cc:49:26:e7:06:ab:8d:b3:c3:7b:32:bd:ff:52:
                    f8:50:5c:01:73:e8:aa:0a:84:da:b2:88:30:32:72:
                    6e:0c:6e:1b:af:2b:cf:ce:96:e9:dc:08:d6:1f:db:
                    46:5b:4f:45:bf:3b:04:18:91:00:20:74:fc:94:9f:
                    cc:01:b6:e8:c1:3e:0e:c1:44:ee:0b:b5:ad:5a:37:
                    49:a4:ca:de:6d:b3:f9:66:4e:92:26:bd:ac:36:39:
                    78:6e:22:32:75:44:6b:14:66:ef:51:e0:c9:0f:6f:
                    16:16:75:a7:0b:34:04:bd:f6:53:ac:b4:12:52:a9:
                    f4:a9:0e:bd:3a:89:ee:a8:87:e3:3d:c8:20:b3:85:
                    e5:4c:33:d8:f0:39:e4:3e:f1:a6:0d:e3:e3:86:ad:
                    c1:35:70:73:3e:c4:69:ef:58:ce:b8:c7:4b:3a:cf:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C2:BA:C4:E9:A5:CA:4E:57:6B:03:C3:F7:16:5C:CD:1E:3D:B1:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/05f0c1d2-6f73-316b-bfe0-7eddb73aa9f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.crl

            X509v3 Authority Key Identifier:
                keyid:10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f84f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b6:6b:c0:20:f2:2f:67:4a:0b:54:a1:53:1b:89:b4:ac:fd:
         9e:76:b1:e4:16:93:ee:be:3d:e1:25:64:c2:ce:6e:70:77:c8:
         2b:04:58:0f:1d:2a:41:49:02:5e:60:6f:49:32:4d:6e:78:40:
         f4:e7:87:06:cf:df:98:75:fb:07:29:dc:26:6d:d7:ed:00:7e:
         40:6b:57:f3:05:cb:39:d0:b8:b2:bf:43:4d:b6:6e:d9:45:fc:
         1a:a1:b0:c8:37:e6:79:13:9d:dc:22:8b:62:6e:c8:5b:48:d5:
         34:4e:45:aa:bf:8c:b5:15:db:3f:c7:0f:e4:7e:55:c4:a0:0d:
         31:5d:f7:9a:78:9d:e3:8a:0b:bf:8c:cd:62:0b:83:fb:39:e3:
         10:29:54:9c:0e:30:a9:fc:6d:c4:cd:dd:06:2f:ef:81:1a:fd:
         30:65:30:e6:f9:13:d7:7d:56:e6:44:72:48:d3:a8:db:d4:b8:
         e3:ed:d3:16:4b:26:38:9e:fe:7e:09:a8:c2:c5:98:d2:1c:cd:
         78:e7:e9:a9:a7:e3:69:0f:eb:d7:a8:a2:73:ac:3d:de:d2:87:
         0d:10:90:39:0c:f4:12:21:ff:53:92:f4:60:20:e4:80:4c:b1:
         ca:35:87:92:a4:e9:74:aa:f1:04:64:a0:0c:93:9f:4b:5f:cc:
         30:c4:a0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:29 2024 by rpki-client on console-ams.rpki-client.org