Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa
File:                     f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa (raw, json)
Hash identifier:          ZbvdbOmCGFItXFTjsknr+05xp56g+6WcnD8fJJWVhDg=
Subject key identifier:   8D:D8:1A:0E:48:CE:9E:44:97:0A:B8:8C:3E:40:F0:33:DA:0F:D5:30
Certificate issuer:       /CN=35241669-57c3-4f1d-8e12-d32455951379
Certificate serial:       010D0C9F43285847EBBF8EAE5E7A83EE15AD05C0
Authority key identifier: 8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     62880
IP address blocks:        2602:f8bb::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:8e:ae:5e:7a:83:ee:15:ad:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35241669-57c3-4f1d-8e12-d32455951379
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=2cd6be80-f8be-410e-9d80-c05d44eb7f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:61:44:e0:0a:cb:69:bc:e5:71:0e:14:99:
                    8d:3e:55:20:f0:61:bc:f9:1e:ca:a6:c0:e0:a5:d5:
                    4e:fe:b5:79:03:e3:9c:9f:09:0a:98:f5:bc:00:c9:
                    ad:6a:09:91:14:e2:79:ac:9c:70:ec:29:a4:25:e9:
                    55:a7:c4:1a:46:a4:16:83:5c:28:4a:6d:2b:00:a4:
                    36:1a:f9:5f:94:41:f5:04:3d:85:c8:8f:c6:d4:95:
                    0d:1f:db:4c:e0:76:b7:13:11:f0:ae:bb:28:8a:32:
                    55:ad:cf:3d:70:77:38:5f:b7:89:ba:af:ce:1f:71:
                    42:6e:98:f2:fe:56:29:fb:a3:84:fa:62:3e:58:72:
                    6d:83:f6:c5:51:34:01:93:d0:d6:98:bf:19:cd:b9:
                    80:21:de:af:8d:2b:f9:bd:d7:10:27:9c:30:32:52:
                    65:86:39:81:5b:80:9d:e3:e7:33:a7:f2:7b:cc:58:
                    4a:f0:ed:83:67:91:23:46:13:02:3c:15:e3:74:97:
                    44:21:30:1a:f4:69:ac:14:f2:20:33:d5:de:cf:e4:
                    fc:55:ca:62:b0:5c:6f:b5:9b:61:3d:08:75:be:fe:
                    ee:e9:f0:b5:bc:c0:b2:5a:fe:1f:87:1c:27:98:4c:
                    ca:3a:88:e2:16:e6:9c:f3:fe:47:5e:8c:a4:33:aa:
                    f9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D8:1A:0E:48:CE:9E:44:97:0A:B8:8C:3E:40:F0:33:DA:0F:D5:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl

            X509v3 Authority Key Identifier:
                keyid:8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:9f:93:4c:35:d9:33:75:82:df:55:e6:76:c9:c2:ca:dc:2f:
         e7:cc:75:08:a1:b9:9d:3d:10:0a:df:5b:76:26:41:f6:b6:dc:
         41:0c:10:e3:e2:62:6b:e9:9d:5b:ec:e1:5c:61:72:d4:5a:80:
         59:c2:c8:62:67:f6:54:36:68:ff:ee:2a:6b:fa:92:4e:16:43:
         95:58:ba:0c:97:cf:94:98:b3:9b:3c:6e:0d:eb:f9:15:9d:d4:
         8d:aa:99:55:2b:f9:25:87:73:c4:00:fd:3a:d3:e5:ac:8d:ae:
         40:c3:da:2e:c9:a4:ab:3c:cb:ec:aa:88:da:9e:15:30:08:4d:
         54:d2:69:30:db:57:92:27:7b:2a:2e:08:8b:7d:20:48:93:41:
         ff:7d:ce:e9:8e:3e:5e:ff:95:6b:8c:69:2a:86:a3:f7:88:e3:
         05:f7:56:85:62:77:dc:04:28:ea:0b:c3:fa:08:a4:f2:21:ed:
         0d:25:1a:ef:4d:cb:10:8e:62:e2:70:c1:bf:44:cc:ff:bb:aa:
         63:94:cd:49:43:70:ce:9f:3e:3c:78:f0:89:24:b8:2b:e1:13:
         20:bf:e9:cb:89:95:6c:74:35:1d:6f:9e:ea:98:92:0d:56:22:
         cf:44:0a:5c:fd:bf:29:37:7c:9f:95:06:2f:85:16:23:5f:11:
         ec:e8:1f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:06 2024 by rpki-client on console-ams.rpki-client.org