Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/a27f0d80-f4cd-3a3b-8d51-06188ea995d9.roa
File:                     a27f0d80-f4cd-3a3b-8d51-06188ea995d9.roa (raw, json)
Hash identifier:          A2s1uwRIm8MDoZsRXjwFssdb7AYZStai2clm7RCekfw=
Subject key identifier:   62:96:70:B0:61:16:EE:2C:B4:BC:DB:94:39:88:74:F8:27:AC:7B:0E
Certificate issuer:       /CN=a9c54416-94b3-40be-9615-08b5725cec76
Certificate serial:       010D0C9F432858476C9DBC6B864857BCBEEFF700
Authority key identifier: 6A:97:B7:3F:11:6D:FC:7F:0F:7A:9A:A8:2E:89:A9:8E:B1:7C:03:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/a27f0d80-f4cd-3a3b-8d51-06188ea995d9.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     212935
IP address blocks:        2602:f90a::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/a9c54416-94b3-40be-9615-08b5725cec76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/a9c54416-94b3-40be-9615-08b5725cec76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:bc:6b:86:48:57:bc:be:ef:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9c54416-94b3-40be-9615-08b5725cec76
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=50780b10-0bc9-494c-b8a2-a959639d4b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:07:21:e3:ff:3b:f1:63:f5:73:86:2d:b3:23:
                    89:d3:c5:e8:71:fd:fe:83:0e:42:cf:77:d8:e3:71:
                    00:07:8e:74:03:23:b5:24:e9:c3:fe:f8:1c:fb:98:
                    94:26:4f:4d:f6:cc:9a:0c:3f:fb:72:b5:76:5d:c2:
                    fc:ef:1e:e7:bc:a7:62:c8:4b:d5:de:9a:b8:5b:6c:
                    e9:bf:0c:a8:54:a1:b3:c6:7b:cd:e6:e1:43:f4:7c:
                    21:61:e0:c2:25:97:0a:f9:95:7e:af:2b:7f:65:aa:
                    32:96:3e:a7:1f:ec:b8:7e:96:95:40:56:04:6a:74:
                    7e:6d:5c:e4:e4:cd:c1:06:e8:93:5f:d8:50:0f:c2:
                    7a:40:9b:e8:26:52:a8:de:a7:de:15:b1:c9:d9:b1:
                    20:82:c6:ab:7b:a5:1b:f8:a8:d2:0b:02:dc:c4:53:
                    22:6b:ef:17:26:15:0b:ca:c4:37:26:da:88:0b:81:
                    74:5c:eb:3e:6f:43:cb:87:35:23:8b:13:1a:57:49:
                    ac:e1:d4:36:fb:5a:bb:07:c0:da:2b:fd:a1:40:9b:
                    5b:8b:87:be:f3:c4:be:21:f0:d7:e3:4f:4a:80:73:
                    dc:b7:ae:b7:a8:74:22:02:2d:92:77:4b:29:f4:7a:
                    04:8a:a9:00:31:71:a5:d7:bb:13:84:be:a0:22:8d:
                    9a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:96:70:B0:61:16:EE:2C:B4:BC:DB:94:39:88:74:F8:27:AC:7B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/a27f0d80-f4cd-3a3b-8d51-06188ea995d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76/a9c54416-94b3-40be-9615-08b5725cec76.crl

            X509v3 Authority Key Identifier:
                keyid:6A:97:B7:3F:11:6D:FC:7F:0F:7A:9A:A8:2E:89:A9:8E:B1:7C:03:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9c54416-94b3-40be-9615-08b5725cec76.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b9:36:fe:31:c3:78:80:0a:6f:7a:08:66:61:3a:7c:a3:7a:
         10:5c:d7:4a:aa:6f:02:80:fc:27:f9:9c:6d:64:90:df:02:d4:
         ed:81:c6:11:fc:5b:0c:25:8d:e0:8a:95:65:aa:ce:3d:41:24:
         75:08:6b:29:58:6c:36:f5:1c:66:42:12:76:da:4b:6d:23:5d:
         1b:ee:1c:f6:fe:1f:91:80:b8:cd:a6:96:90:4a:51:aa:b3:8e:
         9f:8c:a1:02:8e:e1:a5:88:42:80:81:8b:06:06:b5:b0:1f:8a:
         28:17:9a:ab:51:9e:3c:e2:71:f6:1e:aa:26:af:7f:e7:50:00:
         f8:92:2a:bf:c4:ab:fd:3f:57:af:a1:81:e0:8a:9c:34:40:c1:
         48:50:1b:b7:03:49:97:6c:97:c8:85:44:be:2a:74:53:a6:47:
         b3:a6:bb:56:fc:da:af:9a:69:dd:1c:07:8f:0a:4c:99:86:e9:
         3e:be:fe:1a:b0:86:75:62:16:cb:c7:f2:b2:dc:19:25:8f:00:
         a2:5b:bc:aa:f6:e0:0e:d8:c3:72:c1:3b:a2:38:fd:21:ee:a3:
         01:a1:f0:70:fc:b5:a6:38:d1:55:4d:b9:83:cb:47:67:f0:0e:
         7b:0d:05:29:fd:2f:93:60:42:df:f3:8a:50:90:a4:0b:bb:df:
         0c:42:c9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:36 2024 by rpki-client on console-ams.rpki-client.org