Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/624ae083-7c0d-3756-8e51-797f328df78a.roa
File:                     624ae083-7c0d-3756-8e51-797f328df78a.roa (raw, json)
Hash identifier:          qvtJXHQXck0fFxSYipnWMITSEY1RIJpQ8ApqF19mlTk=
Subject key identifier:   79:C6:E4:8A:4F:BE:56:BB:1C:CE:16:FF:9B:F6:45:30:C4:CC:52:55
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F43285847CFD4AD3EB1CEC79E8406C800
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/624ae083-7c0d-3756-8e51-797f328df78a.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     19651
IP address blocks:        2602:f9ec:f0a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:ad:3e:b1:ce:c7:9e:84:06:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=13414641-ae91-4778-8e92-f05a43da3018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:54:fc:73:82:d1:17:dc:a5:a0:3c:f0:a5:
                    b4:fd:d5:09:57:40:94:b8:1a:22:d0:0c:5d:0d:fe:
                    70:bd:0d:92:82:56:28:63:ef:54:28:de:c7:5a:68:
                    fe:35:2d:4c:4d:bd:5f:1d:f5:11:9e:f5:7b:2a:ac:
                    88:77:ac:4b:09:ae:ef:e4:7b:3a:65:af:8c:39:88:
                    c5:9d:a5:b6:07:11:b8:e2:80:43:39:93:8d:e1:41:
                    80:4d:a1:9a:9c:97:62:9f:6c:7e:f0:c7:be:7f:f7:
                    61:2f:22:f1:ef:c9:a8:32:f4:f1:68:f8:70:7a:62:
                    b2:e7:0f:1a:21:be:ab:0b:16:8f:07:18:4c:f2:68:
                    ee:29:d1:44:ac:37:bc:45:2f:47:b3:4b:4c:0d:f9:
                    e3:cd:ed:e4:7b:70:9d:e5:6b:39:1c:f5:a4:b7:94:
                    22:83:06:40:da:da:cd:fd:2a:02:46:cc:0d:01:05:
                    98:52:78:1f:8c:6e:59:da:c9:fc:5b:cb:4f:aa:19:
                    9e:0f:5d:09:9e:e2:dd:54:e2:6c:fd:d9:58:78:6c:
                    09:09:5c:f0:e9:30:4b:bc:eb:a2:36:75:2f:c0:0e:
                    22:af:fa:0a:8e:04:e9:15:e3:9d:07:a2:84:9a:27:
                    0a:74:d7:f2:9f:8d:fb:3b:d2:b4:86:4d:9c:3d:94:
                    fd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C6:E4:8A:4F:BE:56:BB:1C:CE:16:FF:9B:F6:45:30:C4:CC:52:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/624ae083-7c0d-3756-8e51-797f328df78a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:f0a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:34:58:1c:e0:32:45:69:8c:77:8f:0d:2f:8e:96:d9:90:ee:
         81:d8:ac:ea:7e:08:f3:7f:eb:39:06:e8:51:00:36:f7:65:c9:
         cc:c0:13:36:9a:1e:3a:8c:a0:53:66:5a:e1:9e:27:33:3b:b0:
         58:7f:44:2a:55:b3:a2:42:60:72:99:58:c6:c4:92:62:36:48:
         0f:94:a5:b4:d8:18:fb:f7:75:b5:11:bc:47:3e:9d:29:20:95:
         12:df:02:48:97:d1:34:6f:43:f1:74:9a:4a:07:e6:5d:5c:68:
         25:50:ff:81:61:7b:92:a6:49:6e:f0:10:41:5d:1f:95:93:f7:
         60:88:4a:80:98:51:f7:0d:20:d5:15:0d:15:7b:00:b1:a4:4a:
         9b:db:b6:84:8c:6f:99:04:28:e4:41:49:eb:11:e8:b2:05:b4:
         6e:ee:dc:34:b7:82:f1:78:54:26:91:78:d4:94:74:ac:ee:fd:
         ea:31:db:d7:e5:cc:98:a7:f7:8f:bf:7f:35:eb:53:0a:4a:a1:
         f4:39:ea:ee:83:31:ab:32:4b:d2:ac:26:d7:ae:8b:3b:c3:b8:
         b0:82:f5:7f:ea:db:70:a3:23:6d:2d:47:5c:74:ac:d2:d7:e7:
         0a:a9:55:f5:57:bd:52:b3:8b:6d:c0:6d:ef:22:d0:71:3d:37:
         1f:17:a3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:05 2024 by rpki-client on console-ams.rpki-client.org