Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3a54cfd6-2753-3926-8778-b5bccb05925a.roa
File:                     3a54cfd6-2753-3926-8778-b5bccb05925a.roa (raw, json)
Hash identifier:          5ZnBnxKDSnnpDOcDuIxeL1CrHSC/VOXi4TZ3QiXgc+4=
Subject key identifier:   8B:04:F4:D7:E7:93:56:38:05:E3:42:98:4F:B8:BC:E9:49:12:3C:E7
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F432858475910C72B934B7AEA9464C390
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3a54cfd6-2753-3926-8778-b5bccb05925a.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     31898
IP address blocks:        2602:fdaa:b0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:c7:2b:93:4b:7a:ea:94:64:c3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=1ed2dc10-cd7e-4939-bfbd-d5380639cc76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:78:85:12:fe:91:ed:5b:3f:6b:83:10:3e:
                    d5:6c:ee:07:a7:24:99:6a:c7:3c:17:4d:bd:3f:59:
                    41:3f:3a:a3:0e:fe:4b:b2:d6:a2:76:e9:55:f3:1b:
                    fd:6f:bf:22:76:07:78:3b:a4:a3:5e:4a:0d:85:bc:
                    ca:b0:7c:c8:83:86:79:cf:1e:c8:61:bd:00:43:82:
                    ae:0e:d6:15:1e:d1:5c:55:ae:36:b5:82:fa:09:37:
                    fb:8f:60:94:5a:2e:3d:0b:4c:5e:a5:98:ba:ce:16:
                    3a:0b:08:61:58:34:cb:e2:c0:08:f2:eb:94:30:87:
                    d8:fe:ed:cd:11:e1:10:b0:56:07:cf:0f:66:81:09:
                    6b:00:54:92:ec:43:bf:03:7d:f2:bb:f3:89:14:a0:
                    1d:2a:d4:fc:91:a4:d9:5b:50:80:6e:0b:c7:e6:00:
                    c3:6f:06:8d:05:ae:8f:93:9c:bd:54:e9:01:5f:1a:
                    7b:b5:6f:a7:d2:1d:45:24:02:e6:fe:8b:87:33:3c:
                    e6:cd:31:9a:ec:dc:1f:3a:a4:4e:18:ab:4f:11:88:
                    40:70:d4:5a:f7:b2:73:47:ac:10:49:84:9b:a6:07:
                    b7:c8:55:65:11:8b:17:78:e2:70:36:9a:79:5f:c2:
                    1a:53:c3:f0:92:9f:f0:ff:51:0e:2e:2e:cb:fe:4e:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:04:F4:D7:E7:93:56:38:05:E3:42:98:4F:B8:BC:E9:49:12:3C:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3a54cfd6-2753-3926-8778-b5bccb05925a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:b0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:0f:ad:db:66:67:8b:75:64:34:1d:ab:c1:35:76:e0:bd:5f:
         cf:71:fd:71:6d:d6:22:61:87:53:74:65:78:21:5b:a1:d5:78:
         a5:bf:4c:b0:da:ac:99:52:48:70:36:cd:54:89:04:d3:99:3f:
         ef:e0:4a:03:fa:fe:7d:66:c6:22:43:c1:db:f6:68:63:92:e2:
         42:04:40:a5:7a:9a:68:ff:61:00:c0:bc:af:ee:44:75:b5:0a:
         b8:4c:a1:c8:4a:59:f0:f1:76:4a:57:c3:26:7e:c7:1f:45:dd:
         08:dc:4a:ac:23:b5:41:3e:51:42:a0:f1:9d:cf:b3:f7:85:42:
         42:20:d5:56:bd:9f:c3:dc:2c:28:42:6f:66:79:2d:86:44:75:
         47:b2:a5:d7:2d:76:2c:1a:7b:c1:0e:68:d6:58:a7:6c:b0:b5:
         d8:50:a0:e4:cb:4f:1f:32:1e:30:cf:65:8e:52:f6:8d:85:25:
         4f:ef:d5:b0:2c:f7:ae:4a:a5:1c:a7:1c:0e:95:c9:4f:6f:a2:
         c0:f0:a2:13:21:b8:01:ad:fd:0c:5a:42:6f:24:cf:69:0a:3b:
         0a:29:85:95:61:e5:ee:87:90:9c:58:80:c3:54:9f:ce:be:cc:
         ef:3f:dc:28:f4:72:50:b8:81:4a:50:57:9d:5c:99:87:c4:c6:
         74:a2:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:51 2024 by rpki-client on console-ams.rpki-client.org