Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/ad74d413-d09f-3c72-81ef-ecad2ed09e58.roa
File:                     ad74d413-d09f-3c72-81ef-ecad2ed09e58.roa (raw, json)
Hash identifier:          +WeXiPljtqdp1yGnVju2zdhU52z08Y9jZZ1g8x6/RHM=
Subject key identifier:   29:1F:E3:AB:34:17:8D:EB:64:A4:3E:6E:A3:8A:F0:F0:6C:8A:56:50
Certificate issuer:       /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
Certificate serial:       010D0C9F432858473A5B7A6B0AE8CAB77B99DD80
Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/ad74d413-d09f-3c72-81ef-ecad2ed09e58.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     398960
IP address blocks:        2602:808:4000::/44 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:7a:6b:0a:e8:ca:b7:7b:99:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=58c84b84-3f72-4f67-97fa-6fec264fd992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:82:42:1c:a7:0f:2c:98:e9:05:54:15:aa:
                    fe:ff:5f:34:7d:ea:b9:80:03:60:b2:97:35:46:fe:
                    48:a9:d5:40:12:c9:1f:64:d3:54:07:1d:06:de:bf:
                    57:b1:66:61:98:06:65:ce:ec:7b:7c:17:1f:58:78:
                    78:99:78:32:1e:1a:de:fb:55:52:02:54:c5:33:0c:
                    0f:ab:2b:11:6a:9f:29:0c:7f:70:93:05:19:e0:ff:
                    a4:e5:b5:ee:cd:4e:17:0e:e5:69:5a:4c:7b:98:4b:
                    15:fd:10:a8:a2:8a:e5:6c:c7:03:be:60:49:50:20:
                    e6:32:ce:1d:74:a2:c7:f3:e9:99:96:5f:ac:74:78:
                    99:f6:38:16:a0:4d:7c:ab:4d:9a:dd:a1:41:6c:dd:
                    e4:1e:64:79:f4:c4:55:d8:e2:34:41:15:da:c3:9e:
                    c4:d2:8e:42:44:ff:cf:ba:75:f6:3a:6d:62:63:3f:
                    b7:cd:85:b2:d8:98:b8:8f:02:a6:65:a2:65:d3:f7:
                    33:4f:04:af:c2:9d:5a:60:66:02:e3:7d:23:a4:7c:
                    ed:8c:e6:66:79:ee:03:9d:90:2f:d8:9c:8c:85:4d:
                    b3:76:54:b1:52:17:a5:ab:e7:72:ad:46:e2:b6:47:
                    95:c5:a2:ef:c3:ed:b5:a9:65:bb:59:32:0e:bc:22:
                    0e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1F:E3:AB:34:17:8D:EB:64:A4:3E:6E:A3:8A:F0:F0:6C:8A:56:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/ad74d413-d09f-3c72-81ef-ecad2ed09e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl

            X509v3 Authority Key Identifier:
                keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:808:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:45:31:88:3c:47:1a:c1:1e:9b:77:0f:a6:89:d2:c8:c4:81:
         7f:ef:39:e5:8c:3f:5d:96:3b:e3:bc:fa:11:cf:00:0b:b9:ba:
         24:81:9a:e8:18:ab:ab:16:81:ec:52:29:6c:36:eb:42:2f:57:
         f9:ab:a7:3f:0e:04:8d:0b:94:28:51:d9:e5:92:f6:8e:5e:33:
         d5:fa:79:73:78:ec:e1:58:ed:58:b3:79:9b:07:1e:ea:7a:b5:
         c4:1c:c5:df:c7:ad:5e:4e:ad:0b:ce:0a:b0:5a:9e:81:ca:9a:
         2b:99:7e:25:68:d5:b2:81:a9:f0:9c:c8:b3:39:c2:96:f4:c8:
         1a:b2:32:80:03:ef:cd:9f:e2:0b:01:23:7f:9f:fb:f0:db:c8:
         b6:29:b8:a4:fc:bd:9a:cb:71:33:48:b0:6f:27:e0:11:a1:fa:
         1a:37:e9:4a:bf:71:dc:51:a4:ad:bf:25:50:eb:0a:62:95:2b:
         d5:cd:da:28:9c:15:b3:7d:b8:30:43:8d:ed:2d:f4:39:95:06:
         8b:25:b6:93:a6:26:74:ae:d3:11:0c:44:15:ce:e0:a8:e0:4b:
         12:29:d6:5f:67:f9:f7:64:c3:17:80:46:8c:c0:e2:25:68:ef:
         77:57:bb:02:22:50:85:49:e4:38:1d:ab:29:52:54:69:11:34:
         40:87:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:39 2024 by rpki-client on console-fra.rpki-client.org