Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/42a64036-fbec-314a-b220-9b43893bfc8b.roa
File:                     42a64036-fbec-314a-b220-9b43893bfc8b.roa (raw, json)
Hash identifier:          ptWxk5gYJfnjtOnC21KW0YIGDKhseqH6BYLe6KRjIAQ=
Subject key identifier:   90:D6:A2:D2:87:D0:3C:52:44:84:E7:37:5F:16:B4:17:B0:2C:FB:65
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F43285847A73BE0EBBF04BDB776696AC0
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/42a64036-fbec-314a-b220-9b43893bfc8b.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     39618
IP address blocks:        2602:fd92:600::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:e0:eb:bf:04:bd:b7:76:69:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=b515442d-0580-4ae4-aa8b-9a594629cfcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:8a:97:b6:b7:4a:b8:73:84:c1:9f:83:98:
                    60:2f:b4:d9:f8:fe:66:53:9a:4b:9c:7c:ed:1e:47:
                    6f:c2:e8:12:2b:82:a0:69:1f:be:8a:92:56:37:94:
                    51:ff:f1:e4:b8:65:61:8d:b5:bd:fc:47:a3:a4:00:
                    d5:9d:76:c2:f8:43:5e:9e:ad:b8:eb:c5:78:dd:7c:
                    3b:1d:07:04:54:22:40:b8:62:34:3b:60:32:4d:7a:
                    13:04:ff:4a:db:3c:19:6d:39:c0:9a:74:49:19:2d:
                    72:fe:58:67:73:05:da:be:e0:c4:e9:b5:9b:8f:45:
                    59:13:bd:a9:9e:40:5f:b2:6e:30:6a:c6:1f:ee:f5:
                    f5:d6:c7:ab:15:d3:03:aa:f4:01:a7:43:bf:32:c0:
                    a8:1e:68:0d:0f:73:ed:23:00:4c:8c:fc:61:c4:1f:
                    42:1b:33:65:8a:a8:bd:70:72:e6:42:78:54:7c:d2:
                    53:40:8e:74:2e:8e:3b:5d:b7:7f:6f:83:94:ff:ec:
                    83:89:24:f4:44:fc:78:69:10:76:46:78:40:8e:4b:
                    a6:d8:93:f8:8f:12:59:83:8f:d2:f3:03:fe:27:f5:
                    93:24:d8:37:e7:6b:ac:94:19:ce:ba:4d:af:05:44:
                    64:0c:b7:7f:38:0d:c9:61:47:69:fc:78:04:67:22:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D6:A2:D2:87:D0:3C:52:44:84:E7:37:5F:16:B4:17:B0:2C:FB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/42a64036-fbec-314a-b220-9b43893bfc8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:24:4c:80:8d:f6:34:ed:1b:b4:5e:a6:ad:2a:37:a1:1c:10:
         49:dc:df:da:14:dd:56:0f:dc:72:88:3f:8a:45:46:78:b9:53:
         9b:ae:9a:a2:a9:84:d2:79:07:42:17:b8:60:ef:ea:26:9f:a5:
         48:84:c4:58:b2:6a:2d:79:8c:a6:08:d8:d2:cc:3b:c9:e2:8a:
         54:24:51:81:85:c0:84:1b:47:43:c1:54:f7:3f:1f:8f:81:ca:
         a8:cb:62:63:a8:29:17:70:1e:d4:a5:51:d7:81:b5:f3:ca:57:
         59:b8:93:56:6e:68:fc:ef:ed:1e:12:58:49:68:4d:df:06:3f:
         21:d3:67:f7:9a:60:a2:7c:7f:c7:2d:fb:90:5f:41:fa:fa:57:
         81:00:43:22:ca:67:2b:83:15:ca:0a:d1:f8:57:c9:0e:36:4f:
         9f:d3:5d:82:c3:29:c4:14:7b:9f:f8:3c:8a:59:f0:93:f7:b3:
         84:f8:06:76:cc:1a:3b:0d:19:b3:e2:5f:3d:34:8b:63:29:eb:
         f6:e1:fb:54:10:10:2e:68:82:0b:95:45:fc:41:17:59:19:5a:
         a3:bd:0f:f6:4e:60:3b:b2:d3:e9:f5:5d:b5:da:8d:d8:e4:df:
         93:08:9b:97:e0:93:a7:3e:f4:ed:de:ac:10:c6:e2:23:62:2a:
         ae:aa:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:54 2024 by rpki-client on console-fra.rpki-client.org