Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/02c6ff06-bc0b-325f-9c2a-c61f1d0527ec.roa
File:                     02c6ff06-bc0b-325f-9c2a-c61f1d0527ec.roa (raw, json)
Hash identifier:          mO8EkTmScuvscgpe2FlwgGAghFmTfLTsxde8tnKzMzo=
Subject key identifier:   4F:0B:EF:3B:FD:A9:2C:1B:46:7E:43:BC:23:78:6D:9B:B3:54:6F:29
Certificate issuer:       /CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3
Certificate serial:       010D0C9F432858477BBE2C7B47C8DA5864A4D060
Authority key identifier: 27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/02c6ff06-bc0b-325f-9c2a-c61f1d0527ec.roa
Signing time:             Wed 09 Oct 2024 11:07:33 +0000
ROA not before:           Wed 09 Oct 2024 11:07:33 +0000
ROA not after:            Tue 07 Jan 2025 12:07:33 +0000
asID:                     46998
IP address blocks:        2602:f854::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:be:2c:7b:47:c8:da:58:64:a4:d0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3
        Validity
            Not Before: Oct  9 11:07:33 2024 GMT
            Not After : Jan  7 12:07:33 2025 GMT
        Subject: CN=fda06ff3-88a6-425c-bef3-0c6e2256f4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4a:19:52:8c:65:e2:c5:d7:43:10:7e:a3:9b:
                    26:1b:6b:5c:5d:53:57:2b:e0:03:b7:0d:85:24:ea:
                    58:7f:ed:a8:56:c6:9b:7a:5b:4b:62:09:d5:d2:5e:
                    5c:08:c4:c7:e1:f6:b9:99:91:ec:05:c5:fe:6e:6c:
                    16:9f:03:f0:39:16:9a:b5:b8:f7:30:4a:28:a9:dd:
                    55:0f:6c:47:79:5d:e6:65:89:07:5a:b3:8d:9f:3e:
                    3e:e1:1e:aa:db:55:42:7f:29:9d:f2:6c:86:1f:4f:
                    70:9c:6c:81:03:f7:b0:6a:ed:e1:e1:dc:d7:f8:c2:
                    92:e5:52:1b:d2:d3:a9:06:ea:f9:5b:57:21:9c:cb:
                    7e:98:17:fd:8e:85:65:1d:0a:2b:6f:d3:48:04:6e:
                    23:8d:80:3d:bd:41:71:87:0f:f9:ee:a5:14:4e:34:
                    fb:bb:21:1c:4a:bb:f0:0f:8d:6f:78:59:cd:9d:10:
                    63:0b:e2:ad:42:8d:18:f8:a1:9f:fd:61:85:da:18:
                    fc:84:5f:7d:79:83:f7:00:0e:b1:b1:eb:99:64:0d:
                    88:3f:cf:5a:00:b2:01:a7:7d:c5:18:fb:6b:98:70:
                    6c:95:60:2d:2d:1d:54:12:95:a2:82:7b:f9:04:5c:
                    53:b8:d4:f4:9a:3a:9d:43:aa:48:cf:b6:56:d1:6e:
                    ba:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0B:EF:3B:FD:A9:2C:1B:46:7E:43:BC:23:78:6D:9B:B3:54:6F:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/02c6ff06-bc0b-325f-9c2a-c61f1d0527ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.crl

            X509v3 Authority Key Identifier:
                keyid:27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f854::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ee:0f:78:ba:af:f8:6f:61:e9:ce:aa:35:80:9f:f4:b1:da:
         30:b4:ce:36:93:0b:2d:b2:0d:e0:db:92:8a:a4:49:e2:14:e3:
         f0:66:e4:26:27:a2:70:7e:f6:61:37:97:d3:32:98:74:5e:4a:
         bf:16:fd:7a:1b:fb:8a:83:14:57:95:d6:79:41:42:29:57:df:
         32:6b:ec:0a:17:26:39:ca:7c:ef:13:3f:07:90:36:92:9d:5d:
         05:5b:e2:0f:db:a5:e6:4a:cb:96:bf:8c:31:08:f5:8e:53:c8:
         a2:4c:4e:ad:63:07:15:a9:f6:58:19:19:dc:a0:30:39:c1:d0:
         fc:0b:34:c4:8c:6f:2a:f2:e0:cf:80:fc:b2:ae:9f:e4:70:fb:
         55:3c:ab:c1:9c:e9:2e:96:1e:18:ce:10:77:e1:05:70:34:81:
         ac:99:ef:7e:e0:f8:99:57:91:60:28:0f:c3:12:85:07:3e:e7:
         c0:29:18:f6:44:c4:57:91:b8:af:19:22:5a:db:41:5c:3f:9d:
         ce:07:70:39:ec:96:da:db:79:72:1a:5b:08:d5:89:40:dc:9f:
         f7:90:24:9f:35:94:bb:d9:62:7e:dc:16:f5:73:40:9a:ac:34:
         db:0a:b8:a3:4e:c9:83:6a:d4:b8:65:38:29:76:e8:15:74:e7:
         e9:ba:7b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:39 2024 by rpki-client on console-ams.rpki-client.org