Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/7fc0aa8c-5584-3cdc-936e-312cc57cf16d.roa
File:                     7fc0aa8c-5584-3cdc-936e-312cc57cf16d.roa (raw, json)
Hash identifier:          t31ZlDejocCcnY2Kt3VgK8RKDt+Z7xZTcBXAMpGyLuM=
Subject key identifier:   28:CC:57:23:82:DA:FD:B6:9D:A2:EB:94:FD:7D:FC:F9:57:F3:CB:80
Certificate issuer:       /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial:       010D0C9F432858473A5B7DB4E3946881A7DEC181
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/7fc0aa8c-5584-3cdc-936e-312cc57cf16d.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     19331
IP address blocks:        2606:6500::/28 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:7d:b4:e3:94:68:81:a7:de:c1:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=676e010e-39e2-42ac-9ca3-2797d9955ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:f1:ab:ec:3a:cf:f6:58:74:de:6b:54:6a:
                    05:30:62:1a:c0:87:dc:6b:24:4f:6e:a0:db:50:00:
                    88:74:ac:1c:7e:5f:6a:3d:5c:1f:65:77:40:39:59:
                    ce:60:1c:a7:f9:03:21:1d:5c:a2:76:bb:13:d7:9d:
                    51:29:b0:72:5d:d6:a5:37:39:7b:3d:a2:81:4f:b9:
                    b8:1a:ce:12:05:d9:55:f3:c4:7f:fe:6b:bf:de:22:
                    4a:60:3e:c8:2c:0c:cf:2d:2f:ef:eb:66:de:5f:d3:
                    bb:1a:18:6e:48:c9:ca:19:cb:31:22:86:3a:cf:5c:
                    32:88:f8:d5:35:be:fd:05:53:67:fe:0d:08:72:f1:
                    c2:d2:48:b0:38:73:d1:0c:6f:71:45:46:31:0e:f8:
                    9c:09:4f:69:6e:fa:7f:a0:b2:e4:ea:6b:b1:77:4f:
                    8c:a0:e8:ef:d6:31:61:ba:5b:ae:db:11:28:fd:b7:
                    3b:3d:b8:92:2d:4e:43:cd:27:7d:9e:e7:98:3c:96:
                    2f:26:d4:ac:01:b0:a7:67:9c:2c:93:73:c1:6c:2b:
                    53:61:d8:9e:c9:49:4d:f9:9d:04:2c:69:58:5a:28:
                    18:70:ca:76:3f:18:12:79:9b:cd:8d:3a:c2:3c:6c:
                    6f:87:79:d6:64:82:b7:65:34:a8:c2:c6:dd:b2:f5:
                    42:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CC:57:23:82:DA:FD:B6:9D:A2:EB:94:FD:7D:FC:F9:57:F3:CB:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/7fc0aa8c-5584-3cdc-936e-312cc57cf16d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl

            X509v3 Authority Key Identifier:
                keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6500::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:2d:2b:bf:b1:d8:66:5f:0e:61:92:9c:ad:39:11:c4:11:6c:
         06:39:b6:1c:34:b0:71:18:f6:fd:d9:cf:e1:59:95:33:2e:3b:
         b4:42:9c:f1:25:91:66:4d:5c:10:67:8b:57:1f:62:d7:d6:25:
         74:a1:d2:cb:1a:30:c7:11:7c:42:4d:9d:77:3e:85:17:89:3e:
         6f:4b:d0:89:85:eb:27:70:86:4f:fa:49:57:a4:66:0a:53:14:
         0d:79:50:a6:ab:af:91:fb:80:ca:03:86:46:3d:71:64:a6:05:
         12:94:c6:2a:a7:a9:42:d1:42:e7:64:c9:5e:df:1a:96:25:56:
         62:71:1d:8d:28:77:bd:79:d7:2d:f7:7b:bd:f5:40:48:31:1a:
         12:c6:89:1b:bd:4c:ce:7f:6e:47:c4:4e:76:bd:04:cc:7c:92:
         cc:d0:86:fd:81:72:f9:f0:bf:91:ff:fe:06:78:ea:dc:97:91:
         28:09:7d:bc:5a:d1:7d:4c:d7:47:2f:73:6e:0e:30:4a:21:3b:
         cc:10:cc:a1:3c:a9:3c:b7:12:7b:b1:80:e2:3b:71:13:ba:9d:
         42:48:7e:bc:10:f7:46:3d:29:6c:da:f4:a0:5f:c4:5b:b3:72:
         13:ca:a7:7c:98:e2:cf:0d:a4:23:32:ed:3a:af:a4:2b:09:17:
         5a:80:d5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:48 2024 by rpki-client on console-fra.rpki-client.org