Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/2545dbba-1542-3b7b-970c-456d0a72b5ae.roa
File:                     2545dbba-1542-3b7b-970c-456d0a72b5ae.roa (raw, json)
Hash identifier:          pNM9nunKs5Fvmm9BmdZgLb4orbilRjLxqYdfbjng4xQ=
Subject key identifier:   3B:4B:8F:B4:63:A4:B1:E1:9C:9D:83:17:45:FC:EF:9A:65:5F:2C:3D
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F43285847EA5A027F2DABF6C7DA77DA00
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/2545dbba-1542-3b7b-970c-456d0a72b5ae.roa
Signing time:             Mon 18 Nov 2024 02:00:27 +0000
ROA not before:           Mon 18 Nov 2024 02:00:27 +0000
ROA not after:            Sun 16 Feb 2025 02:00:27 +0000
asID:                     198954
IP address blocks:        2602:f9a9:400::/38 maxlen: 48
                          2602:f9a9:e00::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:5a:02:7f:2d:ab:f6:c7:da:77:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Nov 18 02:00:27 2024 GMT
            Not After : Feb 16 02:00:27 2025 GMT
        Subject: CN=bdd28a0f-c286-49c9-a11a-aa6a56cb64a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:46:3e:a0:4c:67:71:3a:c4:19:af:f3:84:
                    9a:70:53:c8:05:33:dd:e9:30:5e:06:aa:0e:d8:47:
                    9e:df:01:5a:50:2d:bd:0b:ea:cc:b3:00:4c:06:e7:
                    75:14:f9:a7:1d:de:92:98:6f:01:24:d4:15:f5:1b:
                    cf:b3:8a:73:92:3e:c7:3f:f9:b7:fc:7b:db:70:a4:
                    45:08:b0:09:81:e4:7b:77:4b:a0:fb:b3:9a:ac:51:
                    7b:37:bb:b9:d9:85:7a:e6:ae:9c:f1:fe:57:bd:cb:
                    1d:33:72:bf:45:b5:28:b1:82:bc:c8:05:48:59:8d:
                    51:dc:2d:f7:02:1c:d7:30:5a:e4:08:8f:09:9c:58:
                    ca:87:f0:8a:2a:d8:91:80:57:9e:4d:83:9c:ab:00:
                    86:e6:a1:d7:c4:3d:0a:8d:0a:e5:42:21:ba:ba:e8:
                    ad:33:cf:55:b8:c0:d0:81:71:bf:6d:98:b9:a0:f7:
                    72:83:73:bb:c0:35:30:ab:78:2c:23:93:22:6b:5f:
                    b1:89:c2:5e:12:9a:a3:19:2b:16:03:fd:ed:df:7b:
                    51:6f:f6:77:bc:31:80:fc:aa:26:0c:3b:f4:a5:5c:
                    4d:aa:32:9e:d5:26:58:9f:6f:23:83:e3:c1:8e:a0:
                    7d:f5:27:d5:68:fa:a2:a3:24:ca:d7:a4:0b:5c:b2:
                    9a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4B:8F:B4:63:A4:B1:E1:9C:9D:83:17:45:FC:EF:9A:65:5F:2C:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/2545dbba-1542-3b7b-970c-456d0a72b5ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:400::/38
                  2602:f9a9:e00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:06:c2:75:b0:72:b3:33:d9:47:67:46:01:e5:ae:b7:af:b2:
         e0:db:72:46:da:40:22:a3:0b:e9:12:fc:d0:f4:df:9e:16:1a:
         1c:22:58:c4:c7:4a:34:25:29:41:0f:bd:40:93:ce:de:d9:b0:
         d1:1d:0d:a6:59:17:d9:57:cc:68:b0:a4:a2:47:7e:4d:42:8a:
         a1:32:c9:8e:f0:27:93:c3:28:f0:c4:a7:f1:ae:d6:5e:a6:aa:
         ac:de:3c:57:01:86:4c:b7:e3:8c:33:2f:6b:1d:be:54:2f:e1:
         45:87:7a:6e:ba:50:96:e9:56:03:3d:81:eb:49:db:0f:fc:9e:
         43:50:97:a7:6d:81:0b:34:da:f4:87:e0:29:5d:96:0f:06:12:
         68:cc:0b:7c:fa:25:4d:cf:62:cc:c7:f0:5e:cc:45:91:d7:e7:
         0c:5a:6b:13:86:f9:be:f7:34:fb:f3:1a:63:a0:22:96:2b:4c:
         62:12:37:81:90:c3:d4:46:bf:81:07:4b:f3:b1:ce:11:0d:a1:
         4f:ed:1a:d0:ec:7e:e8:2a:a5:37:99:86:97:bb:5b:ab:27:1f:
         76:2d:9d:55:5f:92:6a:11:fc:21:1a:9e:d2:f9:dd:07:00:ae:
         ec:74:33:0f:a2:c3:a5:1a:4c:98:44:68:59:60:94:be:cf:6f:
         b5:a0:91:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:37 2024 by rpki-client on console-fra.rpki-client.org