Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a012f434-0893-309d-a03c-6d4dea6c7567.roa
File:                     a012f434-0893-309d-a03c-6d4dea6c7567.roa (raw, json)
Hash identifier:          FQxvz+P6xXr+5cIYxYS22G9cJV/LPpajr3P3OTAw5ug=
Subject key identifier:   AA:AF:91:9B:D4:DE:D5:EF:FB:F8:48:DC:84:7F:F8:87:09:C1:4C:F3
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F43285847600B8A1D3230CF4971CC5180
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a012f434-0893-309d-a03c-6d4dea6c7567.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     52112
IP address blocks:        2602:fd92:d00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:8a:1d:32:30:cf:49:71:cc:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=5bf4f576-1c87-4fa3-9544-79394b15c461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9e:f1:cb:c6:46:04:ee:4f:bd:76:30:cc:fd:
                    a5:27:45:d9:22:d3:78:8c:48:24:b8:de:9e:5c:fc:
                    c1:cb:3b:a2:c2:c6:86:af:08:58:f6:ee:6d:80:f4:
                    70:9c:99:73:1d:e0:08:b0:45:16:a1:ca:06:80:66:
                    f4:a4:5e:44:db:0f:54:e0:0e:e0:d1:d0:e8:6c:07:
                    17:7a:29:ba:d3:54:fc:43:89:e8:73:b5:4c:87:80:
                    e3:6b:bf:fa:eb:e8:4a:10:5d:dd:cf:7d:f1:48:09:
                    a4:1c:18:ce:ca:95:78:38:1b:62:9b:6c:f0:81:2c:
                    e4:ef:21:e2:b4:a6:a9:c7:b8:0f:50:aa:eb:69:4c:
                    a4:73:86:4c:93:a6:c9:6c:86:f2:a0:e6:2f:3f:a3:
                    74:50:bb:cf:9b:8d:c2:e3:be:3e:8b:0d:70:22:a0:
                    a4:fa:13:db:a4:9f:78:42:86:1c:b5:ff:e1:a0:6f:
                    db:5f:a2:d1:8c:5d:68:a5:2b:6f:9a:c3:99:2b:ce:
                    e6:44:47:da:e7:c8:af:ab:bd:22:29:1b:b1:20:a3:
                    7c:35:09:09:f6:d0:ad:96:8c:a6:66:84:5f:96:14:
                    ac:fa:8d:37:c3:6c:24:1f:98:1d:4c:e7:16:fe:31:
                    f2:cc:9a:e5:15:6b:c5:18:79:4c:33:4c:bb:66:09:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AF:91:9B:D4:DE:D5:EF:FB:F8:48:DC:84:7F:F8:87:09:C1:4C:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a012f434-0893-309d-a03c-6d4dea6c7567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:79:b5:d3:d7:b5:0a:4a:22:8e:15:6c:dc:d3:22:8b:05:4b:
         d2:3e:95:dc:73:bc:8c:31:7f:0f:15:5f:3c:dd:8b:48:62:df:
         9b:4a:01:43:28:e4:f2:9d:0f:90:c1:2e:a2:6c:82:7f:0e:8b:
         65:03:f7:48:9b:67:f9:e3:cd:5f:d4:0f:b5:a2:39:bf:6c:11:
         04:3c:e2:82:d2:fa:f8:5f:be:69:0b:ad:22:e2:e8:13:83:34:
         96:5b:c2:36:85:3c:28:d5:26:7e:d0:b2:fb:e4:61:d3:56:25:
         3f:29:66:65:f5:33:b2:a3:fb:fe:09:97:7d:24:38:2d:ba:91:
         d8:3c:a3:cb:d2:b5:87:1e:58:e9:65:cc:20:b4:11:96:49:e7:
         93:b7:3a:3e:1b:2e:ce:b8:f7:48:c1:ea:6e:94:40:8d:01:66:
         b5:18:5b:1d:c3:14:a2:5f:4e:c6:02:96:53:c2:62:0e:f4:64:
         c3:f9:19:69:55:78:50:9a:82:a5:3b:ef:11:1a:95:c9:25:11:
         a6:e1:c1:a8:e1:c8:83:4c:a4:6c:91:83:70:d5:81:af:24:e5:
         1e:b1:b6:f5:0d:ee:d9:ef:21:f5:ce:d7:aa:5f:2c:01:f6:68:
         c0:1d:58:5b:0b:36:c3:1c:39:47:5b:45:cc:31:f5:87:5f:58:
         90:be:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:07 2024 by rpki-client on console-ams.rpki-client.org