Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/7711a2d7-6eb5-3b2a-9244-eb8270cbde55.roa
File:                     7711a2d7-6eb5-3b2a-9244-eb8270cbde55.roa (raw, json)
Hash identifier:          ni9ge3GCxT3qXd7fD297kSU4JhDoy+q1zzPt8vLn4KA=
Subject key identifier:   E6:92:66:0D:D1:E0:48:59:43:6C:D4:9D:DB:F9:DC:3F:AD:87:FE:51
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F43285847CFD4AD63046280BA79975A80
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/7711a2d7-6eb5-3b2a-9244-eb8270cbde55.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     19651
IP address blocks:        2602:f9ec:ca::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:ad:63:04:62:80:ba:79:97:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=7fb033d8-0a7c-4a38-b75c-f40353cd0baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4e:d8:60:7d:a0:37:36:c8:f0:43:06:74:68:
                    32:6d:3a:c8:8b:6b:b5:a6:c4:43:80:56:d7:0a:84:
                    c1:4e:7d:e5:78:a5:b8:be:19:ac:6d:30:1b:26:4d:
                    31:33:37:6e:e1:7b:6e:95:d4:19:34:b4:bc:67:6f:
                    b9:77:2e:4b:b1:c6:48:12:c2:da:db:05:1a:ed:73:
                    62:af:88:14:24:dd:5b:6b:e0:e0:9a:99:46:2c:ef:
                    6e:e5:a0:7b:2f:3c:32:df:8a:13:7a:93:e4:f2:e6:
                    14:c1:d2:2c:11:32:89:df:ab:1c:f7:56:1d:1c:be:
                    83:0e:c8:99:6d:3a:b6:6b:b3:43:b1:ba:be:c2:7a:
                    0c:9d:f3:dc:d0:31:bf:fc:a9:31:9c:3c:f3:1c:f0:
                    84:7a:2a:2d:03:44:dc:87:96:9e:c3:01:38:03:0c:
                    5e:bf:ab:48:44:8d:4c:05:39:36:2c:42:0c:14:64:
                    9a:a0:ae:65:78:0c:d1:81:ee:6e:31:c7:0c:1d:01:
                    43:c1:e7:48:00:49:1c:19:1b:4e:1b:4e:45:0d:be:
                    d4:aa:c9:08:97:53:b0:78:0a:e8:0a:b5:41:9b:26:
                    85:32:49:71:38:f0:28:40:46:bc:12:64:2f:78:70:
                    c1:71:2b:a5:8b:ae:5c:dc:40:d7:ef:31:ae:dc:51:
                    13:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:92:66:0D:D1:E0:48:59:43:6C:D4:9D:DB:F9:DC:3F:AD:87:FE:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/7711a2d7-6eb5-3b2a-9244-eb8270cbde55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:ca::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:75:b8:cc:4b:37:e8:50:e3:6a:4d:43:3b:cd:fb:21:ee:05:
         7f:3c:e5:39:0f:b4:f3:94:7d:89:87:45:89:42:4b:cd:15:17:
         a1:34:db:e9:97:01:08:0d:44:45:ef:31:87:40:2e:d3:d4:b0:
         e5:7e:a1:14:51:52:b1:33:34:88:ea:9e:86:d8:74:6d:ed:a5:
         3a:7d:5a:1f:26:1d:74:03:82:ac:c8:a7:4e:43:36:7b:8c:5c:
         20:ce:66:2c:d9:4d:85:41:49:fc:3f:49:e6:4b:67:dc:79:89:
         71:8b:95:e8:0c:15:ba:23:7a:3c:5c:0e:2c:8a:2a:55:ae:62:
         7b:e6:06:a2:1b:5f:94:df:20:2e:18:dd:99:1b:c9:d7:43:4b:
         bb:1a:92:0e:c3:8b:60:bf:12:89:26:c2:e0:35:15:7d:d8:e7:
         28:1c:a7:19:55:1a:66:3d:ec:70:18:1b:c7:2a:82:53:38:3e:
         73:13:a2:8a:4f:d1:72:31:d3:fa:19:f9:73:f6:cf:14:97:c7:
         0f:e2:1e:10:96:36:0f:be:47:60:e6:99:48:26:b8:b7:8c:b9:
         9b:05:6c:66:f5:c4:26:20:fb:c3:62:bd:23:6f:fe:41:e2:5d:
         16:bc:b0:e4:b2:5a:1d:fc:ec:ba:e2:fa:c3:93:c2:a4:13:7a:
         21:91:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:05 2024 by rpki-client on console-ams.rpki-client.org