Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/e88df447-48d4-3683-8210-be5c56e4acde.roa
File:                     e88df447-48d4-3683-8210-be5c56e4acde.roa (raw, json)
Hash identifier:          Dp1JjZFbnrTaunwE+zkAelW5tLwdodimJCOT3QSk5uo=
Subject key identifier:   18:EE:D6:23:C2:4D:DF:99:A5:F8:BE:2A:F4:F4:AB:D8:5D:24:9C:72
Certificate issuer:       /CN=856d400d-4340-4d39-9ec7-38c840be48be
Certificate serial:       010D0C9F432858477230E03295E200A0A8D47380
Authority key identifier: A4:0C:EF:16:BE:61:DC:EA:6B:D7:58:BC:2A:7C:C3:20:04:2E:FF:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/e88df447-48d4-3683-8210-be5c56e4acde.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     213339
IP address blocks:        2602:f8d1::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e0:32:95:e2:00:a0:a8:d4:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856d400d-4340-4d39-9ec7-38c840be48be
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=501e5548-dd11-4a60-a2bb-dda8228b4ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:5f:79:f2:0e:41:8f:bc:89:14:f2:64:2b:
                    e6:65:b8:ec:d3:04:e2:91:54:97:72:d8:03:64:b4:
                    f1:79:46:a5:5e:fe:28:ac:48:bf:23:e9:9c:40:5a:
                    75:ec:56:fa:32:b5:fb:b4:88:b7:40:65:3d:0d:8a:
                    93:4e:c1:bc:1a:58:99:e6:cf:ff:f7:55:6f:6e:84:
                    da:ac:62:9c:d7:49:6c:6b:9d:5b:7d:e4:18:6a:11:
                    5d:36:5b:5f:bf:b8:f9:52:cf:a0:b0:3d:e5:79:18:
                    8c:92:92:a7:f0:7e:88:3e:7f:15:a3:af:dc:3d:18:
                    3f:54:da:96:17:b3:c7:1d:88:bf:86:95:ee:e0:81:
                    ed:9f:39:d4:ac:d7:a3:02:35:c3:20:b5:6a:2c:80:
                    d7:c1:24:f0:2c:37:1a:16:91:cc:47:ac:d4:10:63:
                    2f:56:7a:d9:1e:bd:76:e7:9a:34:e0:8f:c5:94:50:
                    55:1e:54:cb:41:62:2b:f4:fc:36:ed:2e:f0:31:21:
                    d7:c4:60:1f:19:f2:18:37:d1:41:98:5e:78:40:ca:
                    5c:94:9a:1f:28:53:25:b7:12:88:97:43:2b:3d:e8:
                    54:7d:5e:a2:73:73:0c:10:9f:75:7d:aa:b1:cb:1d:
                    bd:48:4b:77:bf:b9:f0:9b:be:d8:02:8a:52:f8:57:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EE:D6:23:C2:4D:DF:99:A5:F8:BE:2A:F4:F4:AB:D8:5D:24:9C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/e88df447-48d4-3683-8210-be5c56e4acde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.crl

            X509v3 Authority Key Identifier:
                keyid:A4:0C:EF:16:BE:61:DC:EA:6B:D7:58:BC:2A:7C:C3:20:04:2E:FF:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8d1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:70:a1:91:dc:ac:84:35:84:48:91:32:3c:bc:4d:e4:7f:79:
         5f:c5:60:cf:e7:f7:c5:c8:38:a7:9d:d5:84:90:08:0f:21:ed:
         cd:87:36:2d:09:2e:ca:9d:25:8e:8b:df:aa:f6:9a:f0:c1:f5:
         20:f9:b7:d5:11:d0:67:ee:c0:02:17:26:91:fc:06:85:16:14:
         7b:d7:70:63:75:8d:35:d4:c8:19:d0:f7:2d:68:8e:a7:e8:5c:
         bd:e2:48:0a:94:46:65:ae:03:19:42:04:62:72:27:17:00:6f:
         c6:50:26:29:4e:86:dc:6b:ed:86:f3:c3:a0:64:b6:ee:e2:a4:
         06:6c:45:a7:54:08:ec:20:90:85:5d:a0:6e:04:75:4a:69:eb:
         d7:a1:8e:e6:e7:07:a3:ce:db:81:5c:a3:62:5a:a0:3f:99:66:
         bf:6d:32:e7:80:07:e9:8c:f3:4a:96:31:84:48:30:f0:68:41:
         92:7c:af:08:cf:36:b8:92:c2:a1:16:c3:fe:32:7d:07:9d:b6:
         cb:9e:b4:fb:5f:95:f9:7d:61:e2:8f:3f:e4:98:0d:0a:e3:10:
         d8:30:12:af:b9:54:e4:ee:06:95:44:6a:2b:46:86:13:41:6f:
         ed:79:b3:b1:21:f6:f4:28:2c:39:dc:78:50:54:b7:2b:46:89:
         d7:eb:0f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:42 2024 by rpki-client on console-fra.rpki-client.org