Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/a876a9ef-80a8-3c52-ada8-01542b4934ea.roa
File:                     a876a9ef-80a8-3c52-ada8-01542b4934ea.roa (raw, json)
Hash identifier:          EcnO2JG2kn3MoZLwBstK9Qf0K5avMvgxf37/MYA8ekw=
Subject key identifier:   97:2F:A6:E1:19:7C:5A:24:18:63:55:1C:52:35:D5:F3:08:4E:CB:65
Certificate issuer:       /CN=1dc547da-42a0-43ba-8d2f-21375737b95b
Certificate serial:       010D0C9F43285847DC64AB2D4058ACA558ACD440
Authority key identifier: 3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/a876a9ef-80a8-3c52-ada8-01542b4934ea.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     150698
IP address blocks:        2602:f9ca:301::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:ab:2d:40:58:ac:a5:58:ac:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dc547da-42a0-43ba-8d2f-21375737b95b
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=ffe61f43-137d-497f-9b8d-ca6a2c91a584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:dd:e3:f2:d3:58:8f:87:33:90:76:1c:96:
                    c2:1d:7d:ed:86:ec:90:b8:2a:ae:33:cb:fd:04:7f:
                    98:3e:e9:4b:3c:2d:3f:81:ca:b5:7b:86:51:0f:e9:
                    bd:2e:63:b4:9f:d7:e0:d2:d5:4f:54:f0:71:6b:1c:
                    85:23:87:03:27:0d:7c:b2:73:42:5c:c8:dc:a4:22:
                    45:5c:f9:17:3f:49:64:fb:69:a9:15:2e:b9:15:43:
                    88:17:6a:0e:72:59:1b:11:51:48:db:c8:99:c9:f9:
                    ef:f6:53:12:35:a6:84:95:75:d1:e6:6a:d7:ed:80:
                    26:e4:01:f2:06:b5:9a:db:db:5e:f3:e0:a3:01:ec:
                    03:9c:4e:3a:99:67:de:af:0c:16:67:a3:b7:a7:c6:
                    56:58:b2:d3:47:cc:da:11:98:ad:f6:ff:42:d4:9c:
                    67:c9:e1:2d:c7:5f:02:d0:84:9d:5a:e1:89:28:00:
                    6d:7e:2e:ee:3f:45:60:e4:95:14:b8:f9:13:f5:2b:
                    b6:1d:15:6c:a5:cc:fd:cb:5b:65:2c:67:77:a0:7f:
                    27:85:31:00:0e:f3:07:e6:96:a4:19:a5:f5:42:26:
                    f5:ab:78:af:a8:a8:af:38:32:ee:a0:51:69:ba:9a:
                    c8:91:3a:28:7d:87:25:10:f3:32:55:ae:c5:17:ee:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2F:A6:E1:19:7C:5A:24:18:63:55:1C:52:35:D5:F3:08:4E:CB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/a876a9ef-80a8-3c52-ada8-01542b4934ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ca:301::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a4:8c:77:db:d1:17:01:1a:4f:ad:44:da:90:e9:79:9f:90:
         f9:21:6f:3b:b5:5c:d3:a0:36:4c:65:69:68:13:ee:ac:ad:d6:
         f2:0c:bb:14:73:13:6b:c0:63:85:04:03:e9:91:ec:16:dd:91:
         d6:82:4f:0d:ba:7f:bf:eb:fb:05:30:04:99:fc:cf:03:29:76:
         2e:e1:93:c1:7a:7b:3c:7d:85:2b:85:08:59:80:9d:af:c6:97:
         72:0a:bc:1e:b1:05:86:07:04:36:84:24:f2:81:8f:7f:de:cd:
         31:72:aa:28:45:44:3d:2d:3b:77:65:a6:61:64:08:25:f6:8a:
         c1:e2:20:78:08:7c:13:50:58:1c:3f:c3:6a:bd:85:0c:df:36:
         05:c3:e3:7d:27:70:2c:6b:b7:44:13:3b:31:8c:4c:5e:61:d2:
         7e:7c:b9:31:ea:b3:69:8f:d2:d4:b3:9b:c7:0c:a7:89:df:37:
         98:e6:ab:fc:e5:2b:6d:4d:34:d7:e0:d3:84:83:95:4c:dc:d0:
         8a:b7:b0:97:d5:3b:4b:df:c2:45:99:04:a6:d7:b7:8f:19:88:
         36:97:05:fb:e9:be:12:70:df:66:90:2b:9d:55:6f:03:28:ea:
         da:3c:7a:f0:3b:c6:6f:42:9f:8e:80:af:98:56:94:74:af:db:
         10:43:94:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:03 2024 by rpki-client on console-fra.rpki-client.org