Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/16a75313-7215-3fb5-aca4-463a7894947b.roa
File:                     16a75313-7215-3fb5-aca4-463a7894947b.roa (raw, json)
Hash identifier:          HYlR1fhvQJfT9uZaGQo448MtwWlvlRcQUvKqGHMqHjI=
Subject key identifier:   7E:83:56:AE:0D:E0:F1:AB:72:A3:FF:5F:40:6D:41:F3:84:E3:42:F9
Certificate issuer:       /CN=1dc547da-42a0-43ba-8d2f-21375737b95b
Certificate serial:       010D0C9F43285847CA3F83AAE0894BA807664A00
Authority key identifier: 3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/16a75313-7215-3fb5-aca4-463a7894947b.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     150698
IP address blocks:        2602:f9ca:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:83:aa:e0:89:4b:a8:07:66:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dc547da-42a0-43ba-8d2f-21375737b95b
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=47fbc817-aab0-4811-9e7f-a66ead4dcf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:aa:31:c8:10:60:2c:a3:d2:c7:99:c9:37:
                    7f:65:5d:a0:c0:ad:91:a1:00:d8:a1:98:bd:a1:fa:
                    09:5f:b7:bf:b7:a2:6c:fd:d6:0c:03:2c:12:a7:5c:
                    8b:aa:ad:61:70:3f:90:6a:19:4c:5b:b7:72:70:94:
                    51:7d:11:61:2f:60:d8:7a:c3:fd:1d:f8:a7:fb:f5:
                    10:47:02:97:e5:d1:b0:42:15:4f:30:d8:ee:0f:20:
                    8f:d2:a1:08:19:28:18:c0:73:e0:22:a2:d7:5b:97:
                    56:27:02:07:c0:e1:80:15:8d:c7:76:28:70:c2:6e:
                    a1:42:c6:64:94:0a:c8:92:28:fd:b2:09:8a:14:3a:
                    ea:7b:18:71:9d:a9:39:16:74:fc:62:63:03:b3:72:
                    24:04:f0:b4:a0:16:13:79:37:98:ee:a2:3f:cc:20:
                    86:a3:4b:7a:3c:b9:4d:dd:b7:e7:ae:0e:4d:b4:9d:
                    83:3e:51:cd:70:98:98:73:70:be:b5:f1:60:20:d4:
                    57:58:10:90:a4:62:46:b0:14:a4:f4:98:c0:3f:12:
                    37:17:9f:e2:1b:05:f3:e3:bb:ca:61:8e:21:4d:7c:
                    ad:cc:9a:40:31:3b:71:a9:0f:e9:e5:4b:83:f6:24:
                    77:65:11:c0:1f:d0:7d:0b:f2:26:77:6d:52:9f:b8:
                    0b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:83:56:AE:0D:E0:F1:AB:72:A3:FF:5F:40:6D:41:F3:84:E3:42:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/16a75313-7215-3fb5-aca4-463a7894947b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ca:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9d:60:d0:00:9d:23:8b:46:c3:70:a0:4e:dd:5f:be:ee:dc:
         7a:49:38:1c:cb:b3:60:17:08:bc:2d:03:fe:04:e9:d5:9c:4a:
         bf:95:a9:02:90:a9:57:37:7b:74:c8:43:ac:b7:04:59:8d:83:
         d0:47:1a:53:eb:ac:59:c3:3f:33:51:63:9b:ab:c4:c7:a2:d9:
         72:c3:cc:1e:61:09:bd:b9:59:cc:2f:28:f4:8a:0d:9e:fa:34:
         1f:a4:b0:a6:ef:f7:0a:a4:55:2e:0d:4c:b5:30:5a:70:f4:9a:
         7a:47:5f:91:3e:a8:2c:a9:fe:05:9d:7d:b0:b6:76:8e:74:a1:
         bf:56:65:e8:66:79:a1:b5:d4:6b:70:52:5d:bc:d1:11:6c:3e:
         8d:24:6e:b1:b3:1f:48:58:a6:3d:3a:e7:71:ce:ed:6c:9c:f0:
         3f:fa:f5:db:83:15:50:9b:91:94:94:fb:3e:01:e1:61:4d:73:
         fa:b0:60:b7:9c:61:cc:bb:57:5e:0b:4d:4f:b6:bc:09:26:49:
         8d:f3:5b:35:25:c1:96:93:21:37:f8:8a:87:30:63:ba:06:59:
         87:24:1a:06:f6:82:63:fb:51:62:f7:04:07:da:82:d6:84:ff:
         88:89:6b:26:3c:27:e9:6d:84:3e:77:bf:27:4d:e8:01:b6:62:
         3b:72:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:20 2024 by rpki-client on console-ams.rpki-client.org