Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/d4835f23-c62a-3ced-954d-94b4dda54d19.roa
File:                     d4835f23-c62a-3ced-954d-94b4dda54d19.roa (raw, json)
Hash identifier:          bOkytQ0UsYKQUlfaPK6+oar+PZT0NaamhBdW80mt4wA=
Subject key identifier:   6A:05:29:BD:18:AE:87:B4:8E:43:AA:30:4D:7F:A8:4C:DF:5F:3F:94
Certificate issuer:       /CN=940078fb-65b7-4c74-922c-09f44f222b6e
Certificate serial:       010D0C9F432858473320A79857DF7595F5F78380
Authority key identifier: 45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/d4835f23-c62a-3ced-954d-94b4dda54d19.roa
Signing time:             Fri 13 Sep 2024 10:51:58 +0000
ROA not before:           Fri 13 Sep 2024 10:51:58 +0000
ROA not after:            Thu 12 Dec 2024 11:51:58 +0000
asID:                     20473
IP address blocks:        2602:f8a2::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:20:a7:98:57:df:75:95:f5:f7:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940078fb-65b7-4c74-922c-09f44f222b6e
        Validity
            Not Before: Sep 13 10:51:58 2024 GMT
            Not After : Dec 12 11:51:58 2024 GMT
        Subject: CN=bdcdbcf7-b3eb-4edc-978d-ef188c567a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:16:ab:ff:9a:a0:54:62:b6:e7:29:c5:46:
                    bf:f4:83:e1:79:34:d8:5d:ed:5b:b4:a7:2b:43:27:
                    dd:3c:74:b6:b4:f2:81:46:90:25:e4:64:cf:08:c2:
                    69:3c:38:a2:df:59:22:2d:32:b0:c9:f7:da:57:aa:
                    ec:20:6d:95:bb:bd:10:0f:9f:56:52:5f:ef:06:60:
                    d3:82:33:b4:f8:ee:3c:bf:55:a6:d5:f5:1d:8d:48:
                    be:ed:32:f0:32:8c:57:1e:a7:a7:f3:58:58:f0:40:
                    bd:f6:76:fb:cc:03:83:83:e8:5c:c7:2a:f6:8f:72:
                    38:bd:56:3e:19:3a:cf:a5:c2:eb:ea:c9:ee:94:fb:
                    a7:73:6a:09:0c:c5:ee:9d:6d:43:65:12:0c:79:3c:
                    0b:8d:e9:14:e2:f0:fd:6b:72:36:38:79:78:5d:d6:
                    75:6d:f4:71:e5:4a:7b:0c:fb:b6:57:5b:1a:da:cb:
                    95:36:af:db:a1:b3:71:fa:8e:23:75:59:ce:16:6f:
                    f1:2d:58:7d:07:6f:d7:89:ce:53:5b:d4:57:e9:4d:
                    29:a6:05:5a:4b:1c:21:2b:96:67:c9:1a:63:64:d0:
                    2b:d1:af:06:c5:78:c0:58:6f:9a:55:6b:2e:1e:93:
                    92:b4:e9:e8:e1:3a:fb:3f:dc:aa:b5:b5:c3:8a:88:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:05:29:BD:18:AE:87:B4:8E:43:AA:30:4D:7F:A8:4C:DF:5F:3F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/d4835f23-c62a-3ced-954d-94b4dda54d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.crl

            X509v3 Authority Key Identifier:
                keyid:45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:09:84:d9:e2:77:0f:34:77:29:ae:85:6e:fd:c4:a5:0d:60:
         10:52:33:c2:2a:40:fa:f0:e4:e5:c9:99:c3:02:03:25:71:ad:
         8b:8a:13:fb:60:73:ec:ed:53:7b:7f:f6:b9:07:75:f0:4f:65:
         f1:07:7b:13:d3:df:22:50:a5:10:16:be:08:9f:6c:47:2a:33:
         75:f4:09:7f:f1:64:c5:3f:e7:b5:18:a2:0c:b9:3b:a6:ce:e5:
         5a:0c:95:0c:76:70:5d:f8:62:a7:d9:b2:35:c7:7d:01:c5:b7:
         0e:23:a5:94:ef:33:a0:76:e2:db:82:6a:35:96:1b:ad:72:a0:
         5c:b6:e8:0e:59:27:dd:2a:4f:00:64:96:de:00:80:ec:14:ed:
         ea:a5:b9:35:44:07:2f:b9:12:b2:ca:d3:99:8a:3f:18:83:b0:
         ff:70:61:38:53:7f:77:0f:45:12:ed:ae:70:ef:8e:b9:9f:84:
         45:84:e8:48:ff:eb:4b:51:69:60:83:8e:b3:ba:8e:88:6e:dc:
         80:87:04:5f:1c:a3:51:80:5e:8c:e9:e7:0c:aa:1c:8e:2f:51:
         32:05:c6:a2:52:9c:86:01:5b:a6:96:e1:b8:78:19:a0:cf:7d:
         6e:b3:da:18:eb:5f:d9:e0:40:aa:b6:72:9a:a1:36:cb:e3:e7:
         15:33:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:40 2024 by rpki-client on console-fra.rpki-client.org