Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d30fb522-ec5b-3e28-be2d-99ef91f51011.roa
File:                     d30fb522-ec5b-3e28-be2d-99ef91f51011.roa (raw, json)
Hash identifier:          3uh+r/6+66EpknQA4sRg4K2rj6BNhbnCwWs3bqcrWw8=
Subject key identifier:   F9:73:2F:17:21:F1:26:64:C5:A7:70:35:AC:EB:06:C0:EA:35:41:82
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F432858476F63DEE55BB334E7EA81D800
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d30fb522-ec5b-3e28-be2d-99ef91f51011.roa
Signing time:             Sat 05 Oct 2024 00:55:54 +0000
ROA not before:           Sat 05 Oct 2024 00:55:54 +0000
ROA not after:            Fri 03 Jan 2025 01:55:54 +0000
asID:                     398493
IP address blocks:        2602:fd37:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6f:63:de:e5:5b:b3:34:e7:ea:81:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Oct  5 00:55:54 2024 GMT
            Not After : Jan  3 01:55:54 2025 GMT
        Subject: CN=1aec2657-fe5c-4c00-8608-66556d437916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7d:03:7b:6e:53:3f:1e:df:b6:d2:b5:f5:ed:
                    9a:81:f8:c7:5a:ff:1d:b9:cf:a6:26:69:89:17:97:
                    f8:e4:94:9a:e5:53:e5:3b:76:b1:7d:a1:f8:f0:7c:
                    d3:4f:07:41:ae:d1:1d:7c:08:4b:ab:ff:b2:7b:8b:
                    53:7f:c4:55:5f:df:84:99:cd:ae:14:b9:95:b8:a6:
                    7f:d7:ce:42:e9:4b:60:45:07:3b:09:89:a2:90:b5:
                    f4:fb:c1:80:66:1f:5c:ce:10:6c:3c:29:5b:bf:a2:
                    ac:fc:b1:21:2c:a0:13:1f:84:b3:c5:8c:58:96:54:
                    62:5b:73:ae:94:16:94:6a:b4:03:52:dc:4f:2d:ae:
                    1c:0e:5d:2c:16:d9:0a:0f:dc:75:b5:d9:5e:78:d6:
                    51:76:43:82:3b:31:1a:a2:8d:ea:f9:e4:e8:20:92:
                    9e:0e:2e:fc:36:db:4d:25:a1:70:30:e4:66:a4:77:
                    cd:68:8b:a7:fb:de:50:17:11:bd:cf:82:a4:4f:53:
                    ee:9a:1b:f6:4f:cd:73:8b:3f:3e:f3:f9:62:34:99:
                    7f:24:00:52:e7:7a:df:c8:e0:c1:6f:e9:38:6c:fe:
                    5f:86:2f:fd:25:1d:79:be:bf:04:70:2a:e4:38:2b:
                    6a:20:4e:ed:10:cf:36:68:8e:6d:4b:9d:9e:ad:bb:
                    cb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:73:2F:17:21:F1:26:64:C5:A7:70:35:AC:EB:06:C0:EA:35:41:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d30fb522-ec5b-3e28-be2d-99ef91f51011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:3b:5a:9e:45:a9:92:86:2e:33:b9:5c:cb:d3:b2:96:47:6f:
         49:41:1a:39:38:11:f7:5b:67:75:5e:6d:a6:14:86:6e:c3:96:
         fa:0b:c8:e9:ff:0d:4a:5b:9b:40:05:bd:0c:2b:02:72:c4:de:
         1e:34:66:b5:83:cc:0a:79:f8:f0:8b:a4:8a:7e:e2:7f:29:9c:
         2e:b6:dc:03:08:78:93:e7:d8:63:df:8b:fa:ea:1a:e5:64:7d:
         0d:0e:07:de:23:c6:a2:ab:48:4d:0b:bc:6d:40:ac:fd:48:e2:
         e3:d4:da:f7:c2:05:a9:58:8e:cf:40:1c:e9:0f:d3:9e:24:72:
         e8:a7:f3:94:8a:31:31:07:9b:23:ae:6f:13:f6:f7:a0:45:da:
         c2:41:a2:16:40:56:31:e3:29:99:c6:b9:84:89:be:d3:ad:9a:
         71:a0:36:9a:52:7d:f3:6a:22:ed:1d:97:06:b7:5c:9d:36:75:
         ca:56:46:d1:0d:e3:d2:77:b9:97:b9:69:76:fc:ef:f2:49:58:
         4a:df:be:59:25:a4:95:1e:62:92:93:dc:3a:e5:34:29:aa:7a:
         f2:56:1a:94:2f:00:c1:5f:c6:83:e7:c0:45:c6:b9:0b:ba:25:
         f3:08:a1:5b:3c:f7:11:cc:83:00:39:7a:35:b1:07:b9:e4:a9:
         98:ae:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:09 2024 by rpki-client on console-fra.rpki-client.org