Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa
File:                     f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa (raw, json)
Hash identifier:          YUmEVRX6mx5AaPczUYPDKfFLf58GOJ4c6gcK4P8lmQQ=
Subject key identifier:   79:0F:C0:33:22:FF:E3:08:FB:76:8F:28:30:3E:4A:F4:C5:20:5D:F4
Certificate issuer:       /CN=35241669-57c3-4f1d-8e12-d32455951379
Certificate serial:       010D0C9F432858470C1F33EA5FDD5516B0CAD0C0
Authority key identifier: 8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa
Signing time:             Fri 30 Aug 2024 11:32:31 +0000
ROA not before:           Fri 30 Aug 2024 11:32:31 +0000
ROA not after:            Thu 28 Nov 2024 12:32:31 +0000
asID:                     62880
IP address blocks:        2602:f8bb::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0c:1f:33:ea:5f:dd:55:16:b0:ca:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35241669-57c3-4f1d-8e12-d32455951379
        Validity
            Not Before: Aug 30 11:32:31 2024 GMT
            Not After : Nov 28 12:32:31 2024 GMT
        Subject: CN=ad8e395b-d0bb-4620-8215-67a7ccb17438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:04:b3:d9:82:64:2e:bb:7b:6c:3b:00:6f:
                    45:f0:ce:be:6d:0c:7f:5c:e8:fa:5e:90:5e:bf:91:
                    4f:56:4e:fa:52:4c:39:63:48:6d:0d:b7:de:dc:f0:
                    c3:97:a8:5e:25:ab:46:de:5f:25:6a:3b:6e:84:4c:
                    1b:9b:c0:87:97:82:04:c0:14:67:8a:25:91:17:11:
                    24:8c:09:0b:f0:2b:65:e8:10:cb:4e:2a:f7:ce:aa:
                    d4:03:75:92:d2:7c:1e:a2:5a:d6:00:9e:1c:34:81:
                    35:a3:bb:51:83:18:fd:27:4b:cf:b7:30:5f:8b:56:
                    ba:f7:16:e7:92:19:1d:c7:7e:4a:eb:18:45:fe:54:
                    d5:fb:88:7a:3d:be:73:85:ea:28:40:49:eb:a3:62:
                    7e:7d:df:85:88:cc:55:be:8a:14:2f:6c:3c:69:42:
                    25:98:cc:a2:d1:e2:9e:97:f2:b3:55:c5:96:7a:41:
                    6b:43:dd:a4:24:fc:d5:14:da:3a:62:58:e6:2a:96:
                    4d:ef:a6:66:00:b9:24:e9:8d:4c:03:07:5d:b6:b4:
                    b2:eb:82:e8:60:b1:73:f0:66:31:bd:7c:5f:52:66:
                    0f:61:56:c7:85:c4:31:ea:80:5d:12:1f:64:f2:3b:
                    90:6e:06:94:db:e0:03:7f:32:1f:0b:7e:6b:1a:50:
                    2a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0F:C0:33:22:FF:E3:08:FB:76:8F:28:30:3E:4A:F4:C5:20:5D:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl

            X509v3 Authority Key Identifier:
                keyid:8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:5f:64:4c:70:de:4c:0e:4a:93:5d:4a:8a:26:ff:0b:9b:ce:
         a9:31:52:d8:ff:c3:79:a6:8d:00:b6:68:d0:51:14:73:75:f8:
         09:1a:33:14:be:c5:14:53:55:ea:24:b0:e1:7d:20:3b:be:50:
         51:fd:8f:f9:a9:95:4a:55:18:f1:cc:16:7b:fd:24:e0:15:49:
         54:4e:66:9e:05:8d:05:9d:00:23:96:00:f0:00:ab:d3:56:8d:
         cc:e6:d6:a4:c0:94:84:da:ac:29:65:2d:0a:60:fe:00:66:11:
         c9:ba:ec:6e:1c:fb:97:ac:b0:a9:a2:87:38:e6:f3:5a:97:9b:
         c7:01:62:b3:8f:c6:71:da:c7:64:c3:1c:d5:44:71:56:0c:42:
         6f:59:41:3a:4b:f0:ed:45:62:36:79:36:93:17:62:a7:0a:ae:
         ee:ff:d3:f6:b3:cd:77:36:d9:f5:6c:c9:db:24:0b:96:64:39:
         3f:ad:eb:fe:34:d5:b7:e2:78:82:03:a3:be:88:48:66:e3:44:
         ed:17:77:00:ed:86:a8:9c:43:18:03:a6:fb:ac:f9:cf:37:c1:
         94:6a:ad:30:da:67:bb:0e:8a:c6:c4:1e:45:85:10:1b:c3:7e:
         88:36:c0:2a:8e:f7:b9:e8:b5:87:17:1b:f0:92:68:e9:49:d2:
         71:03:aa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:56:20 2024 by rpki-client on console-ams.rpki-client.org