Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/8378ad3f-f5c5-3d0e-bf47-e33619b955bb.roa
File:                     8378ad3f-f5c5-3d0e-bf47-e33619b955bb.roa (raw, json)
Hash identifier:          wDgEAyDg4UmMFOBbqQfuJ8UkAw77YM7mwO+MkWO+Z90=
Subject key identifier:   54:0D:0E:BA:A0:59:E0:18:8E:31:07:C6:71:77:B4:F7:61:04:9A:A3
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F432858474585ECF2FC8E9213D8254A80
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/8378ad3f-f5c5-3d0e-bf47-e33619b955bb.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     398427
IP address blocks:        2602:fd35::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:ec:f2:fc:8e:92:13:d8:25:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=71e6488a-38a7-44da-b689-dd78a5395636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:c9:f0:42:e9:2b:83:61:29:3d:bf:95:41:
                    78:d6:dd:a5:40:c0:ec:db:35:08:c3:48:9d:26:5f:
                    77:16:5e:82:17:12:21:90:0d:59:75:4e:5b:79:bf:
                    5f:ee:fd:d4:f3:c5:fd:94:ed:9b:d1:aa:24:a0:0e:
                    ed:da:d3:99:6b:94:7b:59:9a:af:83:2c:60:87:55:
                    4b:a7:ee:0f:8a:97:ce:84:6e:3e:49:da:b7:0b:83:
                    f4:62:8c:ab:16:eb:b5:e2:7e:b9:c6:2c:04:20:f1:
                    bb:28:45:d2:69:46:27:00:6d:38:44:c9:28:e3:32:
                    90:48:a5:52:88:67:23:0a:45:0a:ea:5a:34:6b:b4:
                    04:7a:c8:80:a5:12:69:6a:df:9b:8c:d5:e9:0c:60:
                    a6:41:16:f6:07:30:23:47:69:3a:26:76:6e:29:d4:
                    ca:be:33:b7:96:72:4c:ae:43:3b:ba:55:f2:79:b9:
                    6f:a7:c7:eb:8c:ce:dc:65:4f:bf:81:6d:b6:6a:99:
                    03:dc:7b:8c:4d:85:f3:d1:da:16:22:f1:c8:d0:b0:
                    7d:58:40:11:00:86:14:29:53:d6:90:bd:bd:90:1d:
                    71:fe:27:17:80:1f:67:33:4c:6c:7c:ed:07:e6:b2:
                    03:19:b1:33:b9:db:f5:ed:13:3d:2f:22:4f:ad:cf:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0D:0E:BA:A0:59:E0:18:8E:31:07:C6:71:77:B4:F7:61:04:9A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/8378ad3f-f5c5-3d0e-bf47-e33619b955bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd35::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:43:fc:3c:4c:74:ff:f7:9f:e7:a3:e2:f2:b9:08:f1:32:2b:
         f2:f0:0e:c4:9f:a1:ba:21:47:c3:2d:c6:a4:e1:f0:fa:24:4c:
         52:82:eb:07:bb:bb:71:cd:11:2c:ea:3a:7d:35:b2:5a:e5:fb:
         f4:9d:ec:a0:ab:d8:eb:bf:0d:dd:05:51:83:85:bf:6a:2f:b9:
         82:e8:dd:11:0f:da:00:6c:7c:d7:b9:93:28:4f:a6:8f:f2:bc:
         9a:30:b5:db:4d:1c:fd:f5:74:c0:26:55:55:35:75:dc:5e:bf:
         46:84:7b:8a:21:f8:f6:6e:ba:79:5c:e9:ea:59:cc:95:fb:dc:
         90:39:21:2b:6e:90:50:50:ef:fb:43:38:05:01:66:eb:bf:14:
         dc:91:32:86:2f:c5:f6:14:c3:34:09:86:a4:6f:43:34:75:35:
         54:28:d2:3c:44:8f:41:ca:35:54:8f:de:d9:25:35:8d:15:46:
         1a:62:fb:39:86:d3:8a:63:5c:26:43:39:e0:31:af:20:3c:18:
         bd:2f:41:f6:0e:e1:af:05:c5:13:f2:63:6a:2f:f3:7e:02:df:
         17:69:4c:08:e5:5b:b0:24:11:d8:6f:f2:85:3a:09:70:cd:d0:
         22:c5:a7:38:f3:00:59:ab:d3:15:7d:86:8b:5f:b2:86:df:4c:
         bc:c4:22:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:44:24 2024 by rpki-client on console-ams.rpki-client.org