Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/c3a7c5d9-c810-3d85-b785-499af7c6f2e3.roa
File:                     c3a7c5d9-c810-3d85-b785-499af7c6f2e3.roa (raw, json)
Hash identifier:          z1RTyiBFqMMr39Yq6cgp66xgw0eADrR2F0Ingv0AWM0=
Subject key identifier:   7E:94:11:74:8B:BE:B0:E4:48:21:64:5F:DE:DD:E6:3F:CA:FC:27:C7
Certificate issuer:       /CN=0059f687-be1d-4396-97d0-dbe0841392ac
Certificate serial:       010D0C9F43285847670622E50F8C286837526700
Authority key identifier: 91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/c3a7c5d9-c810-3d85-b785-499af7c6f2e3.roa
Signing time:             Wed 02 Oct 2024 01:00:31 +0000
ROA not before:           Wed 02 Oct 2024 01:00:31 +0000
ROA not after:            Tue 31 Dec 2024 02:00:31 +0000
asID:                     23121
IP address blocks:        2602:f913:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:67:06:22:e5:0f:8c:28:68:37:52:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059f687-be1d-4396-97d0-dbe0841392ac
        Validity
            Not Before: Oct  2 01:00:31 2024 GMT
            Not After : Dec 31 02:00:31 2024 GMT
        Subject: CN=7969f25b-e55d-491f-b9e3-5459e17a6b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:49:d3:83:c8:7d:e0:84:7d:c0:64:bd:27:b7:
                    13:3a:72:d1:9b:ca:3d:a2:68:36:c9:e3:cf:ac:a9:
                    a3:af:8b:23:11:6b:c3:68:5d:19:b8:78:02:28:4d:
                    e5:54:28:f8:23:c1:05:c5:ad:26:ec:79:4f:e1:fd:
                    69:11:8c:7a:08:6a:f9:a0:20:71:50:21:19:3c:87:
                    39:69:b7:5e:d2:56:f7:f8:6d:97:12:ad:8a:aa:f7:
                    45:d5:78:e9:8c:64:81:01:c5:2f:7f:7b:2e:f8:c2:
                    05:1d:77:ae:e5:0e:29:e8:62:73:0a:af:1c:84:38:
                    fd:ae:b1:09:0c:52:8d:6f:96:1a:18:98:52:84:fb:
                    5b:36:fe:e3:cd:3b:ca:4a:40:e5:35:2f:f0:68:1d:
                    81:62:c6:54:3c:8a:99:70:66:e2:96:42:1c:ca:ca:
                    8a:32:4e:4e:9c:25:53:e7:49:17:19:6d:bb:d8:37:
                    cb:cf:ef:42:66:ca:c3:59:62:10:4c:9e:02:67:0c:
                    a1:60:c5:3a:f7:5f:e8:2c:34:ab:40:e8:87:eb:1c:
                    68:f5:0c:2e:c7:8b:55:1a:44:bf:8e:14:f2:f0:d1:
                    17:c7:60:5f:23:4a:ec:1f:23:b8:5a:ba:8d:eb:75:
                    7b:6d:1f:2a:9a:8c:51:04:42:ce:01:c0:fc:fe:bc:
                    c1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:94:11:74:8B:BE:B0:E4:48:21:64:5F:DE:DD:E6:3F:CA:FC:27:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/c3a7c5d9-c810-3d85-b785-499af7c6f2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.crl

            X509v3 Authority Key Identifier:
                keyid:91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f913:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:6e:69:e8:28:14:36:09:f6:cb:75:bd:f0:ed:c2:09:4d:fa:
         f8:ce:18:2f:b7:5d:9c:84:8a:1a:07:d7:0f:57:4b:65:c3:08:
         ab:2d:b0:3f:e3:3e:9e:7e:3c:18:ac:dc:94:37:f6:32:f4:0b:
         6f:59:a5:a5:d9:55:f5:24:ab:57:6c:75:49:41:7e:66:68:44:
         09:f7:03:c0:8a:bf:20:f4:dd:b9:b1:2b:f7:51:f3:34:45:cf:
         90:21:67:ef:dc:00:7f:37:95:11:08:ca:51:38:12:7e:71:fb:
         c6:fe:68:6b:f8:73:65:77:06:47:47:6d:f6:05:90:c9:18:cb:
         c9:2a:cc:66:d4:a4:f4:7e:07:ab:51:df:a6:fe:80:c2:1b:da:
         97:76:fa:84:5c:3a:5c:02:bd:42:5d:49:5f:8c:c3:17:4f:5e:
         fc:07:b3:88:60:a3:21:44:e1:1c:b2:7c:a6:3f:43:f6:4d:5f:
         6c:89:2b:d8:ca:41:f4:42:92:5c:b9:22:79:d7:63:ae:7b:07:
         e8:79:ea:37:50:0e:0a:6b:6d:95:09:9b:0b:0b:3e:9c:1a:f9:
         dc:6a:f9:ea:0e:54:d4:8d:9b:68:c0:9a:09:6c:46:cd:93:68:
         66:b3:f7:75:9d:a2:b6:3e:40:6a:ac:f1:d8:2f:8b:62:af:a0:
         38:ce:47:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:29 2024 by rpki-client on console-ams.rpki-client.org