Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa
File:                     a05e816d-14ac-367c-876a-ed9f65d71b90.roa (raw, json)
Hash identifier:          1Tf2kMUP88g4aKBtvTYur8Syxg2V/kck4/KBNDruJgg=
Subject key identifier:   0B:83:74:9F:1C:67:76:CA:9E:BF:30:B2:2E:EB:9F:98:B3:D6:B8:8B
Certificate issuer:       /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814
Certificate serial:       010D0C9F432858471E7062A3EE9E6D250465CD00
Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     35008
IP address blocks:        2602:2d5::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:62:a3:ee:9e:6d:25:04:65:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=b46261e9-160b-4517-b12e-5eb5aad45029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:5c:ad:7c:e9:73:91:75:d2:c7:f7:90:86:
                    a7:1d:b7:89:a2:04:ed:bb:ed:ec:4a:de:d7:f2:11:
                    c2:e8:e7:33:09:a0:ac:0e:60:3e:ae:49:a9:a2:90:
                    5f:51:5e:a3:d1:c6:6c:0c:25:72:d3:d3:49:3e:ce:
                    b9:5a:8f:55:56:ca:9d:d1:af:a5:02:96:bd:1a:62:
                    88:89:2c:19:93:ef:9b:e7:c3:a6:dd:17:1d:15:e1:
                    dd:47:54:4e:6b:cc:7f:c2:bf:bd:00:d1:29:ca:2f:
                    a3:47:3c:85:c4:34:bf:ca:5c:28:c1:2a:0e:69:93:
                    cc:01:1d:72:16:a0:50:ef:10:8a:41:33:69:d6:84:
                    ab:89:2e:37:b8:58:4b:59:96:01:1e:8f:3f:4c:fe:
                    fb:de:f7:a6:ac:ca:8e:53:61:11:a6:d8:3d:08:35:
                    e9:e6:78:71:7d:9f:66:7f:e4:42:27:00:44:c0:d5:
                    bf:7c:d0:7b:8a:74:dd:eb:17:b2:23:3e:7d:4c:b8:
                    70:e3:7f:71:45:ce:86:fe:d4:27:68:28:93:a7:f4:
                    f4:69:4e:29:8b:0e:6b:30:a8:62:79:71:05:70:18:
                    08:79:5f:14:fd:06:d9:30:a0:2a:14:fe:f5:28:fc:
                    59:c3:82:cd:97:fe:f1:31:52:1d:54:0d:63:99:9e:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:83:74:9F:1C:67:76:CA:9E:BF:30:B2:2E:EB:9F:98:B3:D6:B8:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:24:6c:4d:6b:db:1f:85:f2:fa:6c:69:ff:d6:6a:5a:7f:c2:
         8c:2d:20:18:89:e3:d1:de:f9:63:9d:f3:d5:91:2e:92:b7:f2:
         86:b7:49:cc:49:e2:81:57:3e:34:fb:04:e3:3b:f9:fc:a6:e8:
         66:fc:1d:d3:93:9d:77:70:a0:5a:b3:4a:dc:57:54:25:74:e0:
         b3:2a:5e:18:5a:2c:33:c9:89:bd:1a:41:4c:4d:4f:75:54:54:
         f8:73:e4:f7:10:70:af:4c:90:c5:24:49:c0:8d:a5:27:37:10:
         85:2b:50:a4:96:1d:89:ea:89:d9:cc:76:6b:fa:57:f6:99:5d:
         73:2f:bc:62:78:09:15:c1:e6:57:df:8c:28:0b:e3:8e:ec:d7:
         18:cc:14:5d:87:ff:fc:dc:94:1b:9c:8f:5d:e3:5b:0e:05:e4:
         a1:5d:bd:5c:f2:d7:c8:c0:b6:43:17:68:61:39:79:30:e2:cb:
         d8:62:69:5f:91:bb:c2:a0:45:66:89:7b:64:27:0d:cf:0a:26:
         99:70:87:9c:25:f2:0e:22:b4:1e:0b:fb:c8:06:c7:38:bb:cf:
         ca:d2:80:66:46:b5:4a:63:e5:3c:c4:0d:38:d8:0f:7c:9e:c2:
         8c:81:9e:ec:14:44:ba:28:5c:d5:ca:c7:36:08:db:5f:b3:d2:
         8b:1f:45:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:37 2024 by rpki-client on console-fra.rpki-client.org