Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/a795d652-aec5-344a-8f1b-02328428e50c.roa
File:                     a795d652-aec5-344a-8f1b-02328428e50c.roa (raw, json)
Hash identifier:          kKbl0fpUCudivn3pj9IB0UPYVMGj87Vg3+rcr98wZps=
Subject key identifier:   7C:BE:3A:23:98:07:81:F9:69:DE:40:A7:43:82:18:94:85:46:26:6B
Certificate issuer:       /CN=3cb45979-c30c-4872-8a79-7c08e9178605
Certificate serial:       010D0C9F43285847ACD13FFD0A65E227349ED100
Authority key identifier: F3:4E:B7:22:17:4A:31:6F:0B:06:40:68:0B:62:CE:DF:A8:10:3D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/a795d652-aec5-344a-8f1b-02328428e50c.roa
Signing time:             Sun 27 Oct 2024 01:00:31 +0000
ROA not before:           Sun 27 Oct 2024 01:00:31 +0000
ROA not after:            Sat 25 Jan 2025 02:00:31 +0000
asID:                     32169
IP address blocks:        2602:f8ee::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/3cb45979-c30c-4872-8a79-7c08e9178605.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/3cb45979-c30c-4872-8a79-7c08e9178605.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ac:d1:3f:fd:0a:65:e2:27:34:9e:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cb45979-c30c-4872-8a79-7c08e9178605
        Validity
            Not Before: Oct 27 01:00:31 2024 GMT
            Not After : Jan 25 02:00:31 2025 GMT
        Subject: CN=c2dabb42-d87b-4950-8eb6-524ab4a3a573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:63:1d:52:83:4d:27:0d:16:48:e9:9b:34:81:
                    87:39:42:a5:92:88:7e:47:cd:77:87:fc:7e:c5:fc:
                    90:c0:c6:eb:21:a8:aa:91:78:06:81:c6:58:71:b3:
                    d1:e7:5d:94:f8:74:54:f7:06:11:ee:0e:b5:02:07:
                    16:f6:9f:66:47:93:4a:73:e0:36:76:4c:81:c5:89:
                    7c:8a:17:d0:4e:aa:83:59:31:b1:58:d2:d5:fa:ec:
                    9b:4f:30:7c:b6:99:23:61:52:0a:f3:21:a3:69:37:
                    54:92:66:52:3a:72:63:bf:60:24:7e:fd:d9:53:6e:
                    2f:d7:a9:3f:6f:8a:7b:59:78:08:8c:02:33:01:2c:
                    20:dd:bc:9f:c6:b8:80:14:d6:0e:6c:00:1f:85:7e:
                    0f:0a:b6:f8:24:58:43:a4:16:8b:76:a2:3b:7d:a6:
                    89:46:b2:f4:00:65:a8:df:80:b1:cd:26:3b:9c:bc:
                    41:78:89:83:25:5c:cf:51:a3:1e:3b:34:d5:22:99:
                    d3:29:ad:bc:f1:23:e0:8a:ea:07:aa:f6:c5:87:90:
                    5b:fd:18:a4:4c:98:4d:d2:21:ed:97:1a:aa:b2:f9:
                    95:bb:64:68:e4:60:92:79:65:a9:a0:5a:39:ef:2a:
                    a6:ae:08:96:73:9e:3a:ec:8c:e3:f1:bb:ac:4f:20:
                    29:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BE:3A:23:98:07:81:F9:69:DE:40:A7:43:82:18:94:85:46:26:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/a795d652-aec5-344a-8f1b-02328428e50c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/3cb45979-c30c-4872-8a79-7c08e9178605.crl

            X509v3 Authority Key Identifier:
                keyid:F3:4E:B7:22:17:4A:31:6F:0B:06:40:68:0B:62:CE:DF:A8:10:3D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ee::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ac:0e:75:c3:e3:5a:8a:20:8a:e8:c8:78:33:b5:4f:66:1b:
         8a:3c:6a:c6:01:df:0f:02:0a:f7:2a:b3:0b:d0:dd:0c:6b:da:
         2e:08:5b:cf:10:38:0c:8c:1e:b6:80:79:09:02:de:71:bd:7c:
         cc:7e:f7:f7:13:8b:48:2b:8e:6f:c6:2c:a5:2c:92:2e:e1:1f:
         5b:ec:6d:40:88:97:a5:2d:4e:19:79:a6:cc:8a:42:de:75:cb:
         ca:d6:8d:72:d1:42:94:d7:47:c0:19:cb:2e:44:6d:19:a0:2e:
         24:88:45:e6:31:24:e9:ce:e7:a3:c6:48:9c:c6:0c:f2:67:b3:
         00:db:23:36:1c:cb:9f:ed:7a:cc:52:54:41:74:10:69:51:6f:
         86:4b:bb:63:b3:23:b0:9c:d7:d1:3a:c4:94:d5:f7:c8:79:7f:
         ec:e8:a3:39:57:9a:27:34:49:73:f1:45:e2:c3:24:db:90:b5:
         38:4c:f4:32:16:1f:98:2f:d0:91:a7:cb:b8:4c:54:bf:3c:78:
         e8:69:6f:2d:df:37:b5:fe:f3:59:3f:ae:71:1f:9b:57:7f:94:
         41:c3:ec:e3:53:37:f5:15:a9:2e:c2:66:32:d8:e6:ef:2d:11:
         44:fe:a0:68:60:e5:c8:81:34:54:d4:5f:0a:90:bf:f2:26:64:
         85:29:72:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:18 2024 by rpki-client on console-ams.rpki-client.org