Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/396d499f-2ea7-3c33-ab89-036118ac5c6c.roa
File:                     396d499f-2ea7-3c33-ab89-036118ac5c6c.roa (raw, json)
Hash identifier:          JypNNP5oVJZ9DCN4huLx0+fxRgeyjR35AynJnXunSfI=
Subject key identifier:   76:0C:C1:CB:60:AA:0A:11:2E:72:73:0C:4E:22:BE:2C:0A:94:43:52
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584757AB6E1F03921AC6A71C0E00
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/396d499f-2ea7-3c33-ab89-036118ac5c6c.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     31898
IP address blocks:        2602:fdaa:70::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:6e:1f:03:92:1a:c6:a7:1c:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=db3efa7f-dc12-4eba-8e07-a29ce6719885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:e7:7e:14:29:79:18:f2:f5:a7:92:23:76:
                    f6:af:28:07:79:14:4e:e1:aa:71:ff:05:1b:be:80:
                    a9:1f:3e:42:8e:b7:49:53:2f:9a:cf:6d:50:fc:5e:
                    09:3e:9c:bb:69:3b:06:f8:ef:15:4a:3e:87:db:db:
                    28:00:e9:44:af:e0:f8:58:9a:91:b6:52:9e:b2:27:
                    1b:a3:5b:e0:6d:2f:8f:d4:a6:7c:21:c2:62:be:cd:
                    39:6f:9b:83:d3:2c:b1:2d:c1:cb:65:ef:49:7f:ef:
                    ff:db:a0:65:24:f4:6e:01:5d:e6:7b:14:d8:79:4e:
                    ca:05:e6:49:7b:4c:d5:94:19:ce:7e:13:7f:ec:24:
                    db:d5:e1:82:94:f0:fa:ec:d9:f3:33:b9:0b:95:88:
                    eb:95:05:4e:a7:47:12:db:9b:f1:43:d4:87:c0:db:
                    a7:0b:78:10:9e:fd:43:e4:d5:7c:0b:3c:ea:e9:1c:
                    b7:9a:b7:2a:42:c8:31:08:b7:d4:63:5f:2b:59:3f:
                    16:45:74:b1:f4:ae:65:93:d4:45:44:55:03:87:41:
                    a9:b5:17:17:c7:8b:69:07:e1:4a:ef:f1:92:a8:b1:
                    28:3a:92:6c:a1:94:95:4b:02:2a:d4:d7:07:ca:46:
                    cd:ce:86:76:c4:f5:75:76:68:d7:39:f7:19:06:e6:
                    79:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0C:C1:CB:60:AA:0A:11:2E:72:73:0C:4E:22:BE:2C:0A:94:43:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/396d499f-2ea7-3c33-ab89-036118ac5c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:70::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:58:62:21:cb:b1:da:2b:53:44:29:58:7e:d4:92:16:72:ef:
         82:70:92:07:92:4f:4d:a4:47:95:e5:21:be:b8:91:3d:eb:61:
         01:1f:dd:51:0a:1b:ab:6c:04:f9:52:70:57:e2:39:d5:26:f1:
         2e:d6:44:1a:d0:d4:aa:4e:a0:86:85:9f:27:38:86:3f:14:38:
         db:49:74:05:4d:e2:c1:40:5e:32:ab:d9:b6:f3:89:af:b6:f7:
         1a:8e:57:02:31:5f:1d:b9:15:3f:69:00:23:2e:ac:c1:43:9d:
         98:7e:75:f1:cb:2e:7a:5a:e8:97:c2:bb:d9:33:3c:8a:9c:30:
         c5:c1:db:f7:a1:f8:2b:81:da:50:c9:e5:90:84:e7:61:e2:3d:
         64:95:37:f3:25:86:3e:23:ce:5d:eb:d6:30:78:42:f6:de:0e:
         78:46:2a:e2:3c:51:85:08:b6:e0:f7:4b:1a:b5:7e:d5:fc:60:
         49:39:d2:02:2c:ab:dd:26:c7:c1:d1:9c:54:cb:14:aa:04:9a:
         d9:b1:15:6f:e2:97:96:46:fe:cf:9a:ac:1c:fa:5b:d2:b2:be:
         9a:7b:86:ea:12:f2:bf:a2:3f:82:dd:ae:7d:0a:47:ce:30:eb:
         d0:6e:c2:e4:92:8e:8b:d5:4c:c4:f4:72:a8:64:54:9a:c7:64:
         27:be:73:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org