Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/0b8209f0-781b-3505-b708-fdde1fbf3db3.roa
File:                     0b8209f0-781b-3505-b708-fdde1fbf3db3.roa (raw, json)
Hash identifier:          i/FlCnCzsByzwkHr9+rcZOF4+KH7WrSn3RwzgUL3InA=
Subject key identifier:   76:CF:04:B8:3F:F9:BC:E1:E4:D1:A4:85:22:FA:A1:6C:7A:AC:97:46
Certificate issuer:       /CN=69ff55bc-4da3-4dc8-9a15-35e5786aabf2
Certificate serial:       010D0C9F43285847E1F9FA80082FD3E67A58E8C0
Authority key identifier: 88:E0:2E:A8:96:E6:D9:25:9C:05:46:AB:F8:5E:5E:67:69:7C:37:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/0b8209f0-781b-3505-b708-fdde1fbf3db3.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     27485
IP address blocks:        2602:f8c5::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f9:fa:80:08:2f:d3:e6:7a:58:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ff55bc-4da3-4dc8-9a15-35e5786aabf2
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=615ad41d-75e2-4b30-b371-8c08786ffe3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:fd:f7:c8:99:08:8d:16:6d:f4:03:79:3f:
                    d5:6e:73:a7:87:ec:44:b0:e4:96:2d:7c:d6:0e:20:
                    02:8e:d4:b1:a3:4a:fb:63:d7:67:93:17:bf:37:3d:
                    84:74:94:ee:63:b3:7e:fb:ca:4e:81:4e:be:f3:a9:
                    a1:f6:02:2c:27:52:3d:a9:8f:ca:fc:9a:1b:67:0c:
                    19:da:e9:29:25:d1:1c:af:d0:7b:a1:fb:df:3d:3a:
                    ac:d6:b3:12:ce:48:87:59:69:43:16:ea:2c:ac:cd:
                    a3:73:51:f7:1c:f1:bd:a2:65:a6:4a:5f:94:6a:d5:
                    86:c8:48:61:05:b7:a8:c6:eb:a3:7d:a2:84:ad:52:
                    aa:26:aa:b2:1b:b6:9e:9d:5d:f2:a3:8b:63:94:0e:
                    a6:49:60:c3:2a:f3:58:86:b7:ea:bd:db:6b:36:52:
                    17:08:04:40:43:79:ac:69:19:a7:28:3a:78:36:42:
                    0d:ff:7f:30:77:8f:04:92:5f:0d:33:d3:d6:2c:35:
                    56:f0:8d:60:d1:01:39:b9:74:6c:7b:a9:86:04:b5:
                    55:9d:3b:51:25:f5:4c:6a:c9:d2:e4:93:42:63:3e:
                    eb:45:94:98:9a:00:68:a3:60:56:76:7a:99:77:2f:
                    e3:75:98:a7:66:f3:d3:57:14:ec:4f:8f:02:98:68:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CF:04:B8:3F:F9:BC:E1:E4:D1:A4:85:22:FA:A1:6C:7A:AC:97:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/0b8209f0-781b-3505-b708-fdde1fbf3db3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.crl

            X509v3 Authority Key Identifier:
                keyid:88:E0:2E:A8:96:E6:D9:25:9C:05:46:AB:F8:5E:5E:67:69:7C:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8c5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:04:e5:f7:d1:f3:12:d0:69:50:d9:5d:b3:7b:b9:94:c4:a5:
         df:7f:aa:ac:ba:69:6b:b1:7f:cc:c0:86:d4:e7:68:d7:3a:5a:
         19:35:78:b6:2f:2e:72:4b:c5:fa:d4:1e:6e:72:de:2d:39:6c:
         bb:ec:ec:ca:5c:7e:0e:8e:82:e7:ff:9d:6d:d8:11:06:e4:1e:
         98:9a:f4:26:c6:f1:3f:a6:47:0a:93:03:1c:40:68:06:0a:3e:
         1d:50:77:7a:66:c6:dd:09:67:52:6a:7c:e1:58:0b:83:1f:22:
         ba:f2:33:88:9a:40:bf:77:67:26:42:7e:57:ef:b5:75:69:ac:
         0f:89:3a:1f:e4:85:dd:a4:ae:82:18:e4:7a:4b:e4:42:b1:d7:
         4f:c6:01:be:82:fc:79:e6:f7:3d:5f:0e:09:91:3a:0e:08:da:
         80:73:d5:cf:a2:07:e7:91:a0:24:fc:c5:a7:bb:6d:ba:08:d9:
         a6:da:9e:ce:c2:c7:d6:89:21:97:1c:19:c7:e6:c4:c3:02:98:
         d8:c4:de:f4:d1:76:52:3d:76:11:cd:a1:34:60:a8:41:12:ef:
         3d:ac:6c:28:78:fc:f6:1c:5b:c3:6c:f1:e6:a6:1a:f3:6c:9e:
         d5:3e:bd:fd:42:cf:e3:fa:4d:59:73:a5:39:11:08:52:5e:c3:
         87:e1:c2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:33 2024 by rpki-client on console-ams.rpki-client.org