Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/1255431b-ba35-3116-8414-34269d9fe49d.roa
File:                     1255431b-ba35-3116-8414-34269d9fe49d.roa (raw, json)
Hash identifier:          LwaZJl7qMaDuCqaq32wgDWHXf5DYYNeYsff6A78qFU0=
Subject key identifier:   8F:20:A1:A5:35:DD:9D:79:ED:51:6A:A2:56:EC:0C:C3:C8:59:36:BE
Certificate issuer:       /CN=fef37d9e-4f0a-417c-bb8d-a033e1b72e07
Certificate serial:       010D0C9F4328584792F4EBFDD4FD4C58FC703540
Authority key identifier: E7:D8:F7:D6:BC:73:AB:B6:67:97:4D:9E:64:A3:42:D3:00:5B:15:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/1255431b-ba35-3116-8414-34269d9fe49d.roa
Signing time:             Thu 17 Oct 2024 18:41:27 +0000
ROA not before:           Thu 17 Oct 2024 18:41:27 +0000
ROA not after:            Wed 15 Jan 2025 19:41:27 +0000
asID:                     14618
IP address blocks:        2602:819:f000::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:f4:eb:fd:d4:fd:4c:58:fc:70:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef37d9e-4f0a-417c-bb8d-a033e1b72e07
        Validity
            Not Before: Oct 17 18:41:27 2024 GMT
            Not After : Jan 15 19:41:27 2025 GMT
        Subject: CN=4d2ddd03-ace3-4b87-9931-03e49682db6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:41:86:f0:59:4d:f9:1b:59:6e:d4:dc:37:
                    56:d8:5d:0f:98:51:49:7d:c8:3b:d6:74:02:cf:15:
                    e8:ae:77:1c:e3:3c:59:46:f1:db:58:e5:18:29:b3:
                    29:a9:fa:48:b7:ef:21:a9:5e:d1:2e:01:a3:1f:36:
                    61:7f:b0:fc:90:e3:c3:71:d2:77:a7:22:8c:98:9d:
                    91:54:ab:17:f2:c2:06:58:eb:2f:76:15:e0:b7:c1:
                    0e:c5:e2:2d:28:fe:b1:5a:b2:6f:41:fd:ca:c0:42:
                    3d:b7:95:de:63:5f:19:85:a7:39:5b:7f:ee:e6:37:
                    88:46:6c:b4:6b:60:88:31:cb:f9:3c:ea:79:d4:20:
                    17:5c:d5:ac:a8:a1:5e:bc:7b:11:ec:7a:f8:0b:52:
                    75:a1:c9:a4:25:d6:da:db:c3:4f:82:0c:46:e6:5f:
                    f7:7d:e2:e7:19:57:50:9b:b8:57:54:35:24:00:f8:
                    2a:fe:af:52:46:4b:d9:34:0b:d6:67:52:79:b2:d4:
                    a7:1f:57:ae:d0:75:63:f8:66:23:dc:1e:e0:c3:b4:
                    28:95:45:bc:5e:b2:83:a8:7c:dd:af:f0:ea:30:75:
                    5e:26:77:c5:d2:79:95:bc:e6:81:7b:b8:b6:aa:3a:
                    0d:77:ba:ad:02:65:d4:64:3e:1b:99:80:b2:77:8b:
                    1c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:20:A1:A5:35:DD:9D:79:ED:51:6A:A2:56:EC:0C:C3:C8:59:36:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/1255431b-ba35-3116-8414-34269d9fe49d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.crl

            X509v3 Authority Key Identifier:
                keyid:E7:D8:F7:D6:BC:73:AB:B6:67:97:4D:9E:64:A3:42:D3:00:5B:15:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:f000::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:df:7e:20:de:f1:b9:bb:86:64:82:95:4d:ed:30:f9:90:04:
         00:ac:b6:d3:ce:35:e9:bf:03:27:9c:51:be:16:16:2c:9c:6c:
         7e:95:99:85:15:47:b9:44:03:52:b4:d0:67:78:0f:53:87:46:
         ea:7e:60:d1:ae:ee:6a:cc:5d:76:f3:5c:0e:24:83:2b:d3:8f:
         05:86:e0:7f:4d:ea:c7:55:7b:06:2e:43:a4:b4:99:70:62:e1:
         5d:18:7c:a5:09:24:9a:37:30:4c:c7:a4:68:74:86:c5:13:7f:
         d2:a2:d9:7b:ad:10:eb:97:34:5e:3c:71:c2:26:67:10:ed:9a:
         7d:3b:5a:17:2b:f0:20:7c:70:d9:bc:ab:8e:e9:bd:71:6f:2f:
         a3:3d:f6:ce:1c:5d:17:74:37:87:48:a3:fb:a1:02:18:b9:7d:
         67:40:40:58:ff:22:5d:70:c1:a3:87:e5:7c:97:f6:76:ab:fd:
         b2:e4:40:be:59:af:30:c4:01:3b:09:1b:4e:1b:22:d3:a6:d4:
         24:e1:8f:63:1e:ca:f9:04:6c:94:cc:a2:a6:5d:9e:46:cf:5b:
         af:26:a1:f8:f6:ad:f1:a6:d9:d2:cb:1e:c7:fd:c9:1e:53:a9:
         fc:14:dd:a1:2a:88:a6:50:19:c7:9f:9b:9b:6d:f8:07:ae:71:
         13:af:42:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:39 2024 by rpki-client on console-ams.rpki-client.org