Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/eaabc137-0dda-3c05-b559-bd4b4dd04b72.roa
File:                     eaabc137-0dda-3c05-b559-bd4b4dd04b72.roa (raw, json)
Hash identifier:          sxmDm84yJdAYur4lIdDTCz+j9kTI4NLeQ3QMLfkrX/8=
Subject key identifier:   54:2F:30:66:AF:21:D9:F6:87:AA:D5:08:76:88:70:DB:27:A1:67:BD
Certificate issuer:       /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Certificate serial:       010D0C9F432858474C80C15B483F4F81053E5D00
Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/eaabc137-0dda-3c05-b559-bd4b4dd04b72.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     399646
IP address blocks:        2602:f9f3::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:c1:5b:48:3f:4f:81:05:3e:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=8213b333-e901-42de-9c1e-c9e6019b8827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:af:03:10:a7:65:a8:ba:9a:9d:af:e5:f6:
                    e7:5f:79:ea:a8:27:b2:b3:f7:20:fe:38:7d:83:ae:
                    4d:ae:35:19:d9:67:29:1a:ac:b0:a4:c2:e0:74:38:
                    96:5b:b9:ec:58:df:c2:ee:33:1b:90:e8:59:e8:51:
                    9e:11:ec:28:46:1b:2d:1e:51:5c:41:16:fa:8c:d5:
                    bf:8a:fb:26:f0:43:c3:8b:53:1c:6e:85:d8:bf:a9:
                    9f:10:0c:e9:77:d3:78:07:37:fc:b3:04:eb:e1:4d:
                    5e:01:c6:df:a8:28:a5:0c:ce:a2:d7:90:01:61:b9:
                    d3:3a:a7:ec:87:b3:61:c0:e8:37:d2:5d:47:fa:4e:
                    71:77:53:bd:47:0c:f5:3f:ef:cf:02:83:eb:eb:f7:
                    39:19:16:44:85:50:62:74:58:7d:14:ce:65:76:3f:
                    29:61:ed:05:ee:a8:08:90:36:b4:a8:ca:95:43:23:
                    fb:97:97:2d:90:35:68:8c:82:45:2e:5d:dd:4f:e0:
                    85:d3:da:2f:22:86:ec:df:1f:9d:5b:c5:aa:06:37:
                    ae:5b:d5:4c:ec:f8:ac:91:06:ff:39:27:74:4a:2f:
                    75:43:ef:32:d3:f7:f8:c0:7f:b5:4b:e3:af:8a:d1:
                    30:7c:64:5a:12:1e:70:98:2a:cc:6a:1e:a4:d6:2d:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2F:30:66:AF:21:D9:F6:87:AA:D5:08:76:88:70:DB:27:A1:67:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/eaabc137-0dda-3c05-b559-bd4b4dd04b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl

            X509v3 Authority Key Identifier:
                keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:fb:2c:b0:63:a1:fc:9d:0a:53:e1:6e:e5:f2:b2:cc:42:15:
         8a:06:d2:18:83:ab:2d:45:cc:23:f2:08:85:3f:23:62:f2:ba:
         91:26:62:82:5c:f5:6b:c0:d9:2e:72:c5:5a:63:9f:31:5b:60:
         40:a2:90:ea:c7:70:54:eb:b1:af:e1:93:2f:b5:a5:b5:08:66:
         28:f9:b3:55:7b:e5:29:e3:b4:ac:f4:76:29:21:35:5a:70:ec:
         06:cf:5c:6c:c3:9b:1f:43:7e:a2:ed:c5:26:ad:76:11:89:fc:
         6c:8d:4b:ff:4d:a7:cf:3a:f6:90:f8:ab:80:ef:8e:7f:3e:f4:
         f9:1f:f4:6c:40:30:0a:8c:47:ab:8f:83:29:58:d2:81:eb:e0:
         ba:84:e4:62:bb:1c:d8:a3:b6:8a:02:49:13:df:19:00:fa:9d:
         f8:34:3f:bc:dc:29:7c:2c:e6:24:99:09:2f:04:fd:f2:dd:f3:
         e0:b9:60:74:29:52:a4:70:35:46:4e:a0:88:88:a4:69:53:83:
         2e:b2:a9:07:de:fb:37:37:7b:c1:d5:92:1a:11:46:31:54:4a:
         37:9f:4a:ae:cf:ec:9c:b7:c6:c6:a5:2c:b9:27:ba:68:08:20:
         e5:05:4a:4d:1a:1b:79:7e:25:40:8a:54:eb:97:ac:94:f2:27:
         17:7a:1e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:17 2024 by rpki-client on console-ams.rpki-client.org