Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/3d7ccb98-5d76-3ee2-8982-31c9da3bcd95.roa
File:                     3d7ccb98-5d76-3ee2-8982-31c9da3bcd95.roa (raw, json)
Hash identifier:          gaQbm99Uqbhxa7dr33UVor87xePwgiu1+l1VUrsjV2w=
Subject key identifier:   0C:00:8C:ED:16:11:7D:C7:50:17:45:53:F8:DD:8B:15:B3:D8:40:88
Certificate issuer:       /CN=733a751b-f4f7-4986-8389-8938fc4a481d
Certificate serial:       010D0C9F432858474585FB12CE4056E2C5EC4280
Authority key identifier: DE:D0:12:81:EE:5E:86:76:82:0F:04:E7:78:FE:09:C6:EE:75:69:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/3d7ccb98-5d76-3ee2-8982-31c9da3bcd95.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     30514
IP address blocks:        2602:816:f000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:fb:12:ce:40:56:e2:c5:ec:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733a751b-f4f7-4986-8389-8938fc4a481d
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=c6e21c23-0655-4bf2-9015-cc89051b5511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:23:ac:4f:22:93:eb:a0:05:5a:b8:f6:54:51:
                    00:bc:f1:8f:23:e3:46:85:e9:4e:4c:d9:34:80:08:
                    cf:d0:23:f1:fb:97:a9:60:c1:7e:52:01:38:58:91:
                    f1:18:ab:e3:69:1c:92:ef:e0:f7:ab:58:c3:03:6c:
                    99:e4:96:11:6a:1c:d2:73:49:0f:0e:e6:4d:b5:6f:
                    3c:e1:67:26:b0:e5:0c:98:81:b4:b3:f2:86:a5:f3:
                    c1:ad:01:34:60:c4:dd:f9:ec:16:a3:d7:e5:d7:9c:
                    7d:c7:93:42:1d:ae:fb:e0:55:8e:19:a7:ba:cd:e3:
                    fe:ca:26:52:a1:ae:21:04:77:59:06:83:6c:8c:33:
                    be:7f:13:42:7b:17:6e:34:e5:52:08:19:e8:10:24:
                    2a:e8:77:d7:70:86:24:5d:14:ac:fc:7f:83:a9:7a:
                    29:bd:05:f8:19:3b:b6:f4:21:bf:bf:01:3e:5f:64:
                    49:57:9b:16:c3:24:0c:f8:3f:e6:a2:48:0b:72:cd:
                    0e:36:70:95:b5:4c:b8:eb:03:57:3f:9c:d2:32:d4:
                    df:7b:38:be:1a:40:6c:2f:ed:6d:8f:a4:a3:a0:49:
                    0d:cc:59:22:1a:31:b5:85:1f:84:3b:6c:48:15:d7:
                    e5:85:85:1b:8b:97:bc:14:da:dc:5c:43:f4:b6:95:
                    bc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:00:8C:ED:16:11:7D:C7:50:17:45:53:F8:DD:8B:15:B3:D8:40:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/3d7ccb98-5d76-3ee2-8982-31c9da3bcd95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:D0:12:81:EE:5E:86:76:82:0F:04:E7:78:FE:09:C6:EE:75:69:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:816:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c8:fc:e9:08:cf:2f:85:71:f4:42:a2:b1:ca:a1:07:0a:1a:
         18:55:a5:9f:b3:f7:87:dd:33:a4:88:14:b1:6f:5d:c7:26:5b:
         bd:84:e4:01:2b:48:7f:20:9a:1d:cf:28:74:cd:9a:05:6d:a1:
         33:77:ee:e5:3b:d5:35:a6:09:a8:cd:d3:b5:6c:fa:54:ad:a6:
         88:e5:f9:e8:cb:ed:09:26:ea:6e:53:d8:c0:34:52:de:75:ce:
         d6:1c:f4:66:03:3e:2d:57:ab:33:e7:f1:df:62:04:74:ee:33:
         e0:8f:36:71:b8:e4:2a:05:5c:76:71:dc:79:69:6a:58:d4:2b:
         f6:c3:3f:72:5a:81:0a:71:9f:e4:eb:b0:3f:f4:a8:d7:36:ab:
         5b:e1:f0:01:aa:a3:93:97:6d:99:e9:e5:81:46:3e:87:9f:83:
         72:fd:29:9f:36:73:45:8d:76:37:8f:cf:d6:80:43:40:e1:ff:
         c3:1c:c0:28:36:cf:63:d5:b1:19:a6:f0:64:98:d7:07:14:3b:
         f4:ef:86:0a:0a:d8:86:d2:8a:70:e4:7f:3b:3c:b1:a0:11:9f:
         c7:04:76:1f:ba:ec:d3:9c:7c:4b:6b:76:31:0b:99:2f:7e:a3:
         4f:7d:5c:ef:30:17:1f:fa:7a:57:d0:73:95:0a:f5:55:e6:09:
         6e:c0:6b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:53 2024 by rpki-client on console-fra.rpki-client.org