Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/c8c6824b-e09a-3761-acb0-ab3727ecd853.roa
File:                     c8c6824b-e09a-3761-acb0-ab3727ecd853.roa (raw, json)
Hash identifier:          m70a0wnY8mnkjRkbTpNsGuN2LeNUTaj95N6+0B4x0kk=
Subject key identifier:   17:7B:7A:30:7D:53:D3:E9:65:D3:E9:AA:2A:08:E4:36:06:DF:FF:6B
Certificate issuer:       /CN=46ea6d07-9209-4ad1-b0bf-fcd8f5018c70
Certificate serial:       010D0C9F43285847213B2691057D35A08D194680
Authority key identifier: 8F:48:41:BE:AD:4F:8B:F9:40:81:A0:90:C3:70:23:AC:91:68:36:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/c8c6824b-e09a-3761-acb0-ab3727ecd853.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     1030
IP address blocks:        2602:f9c4::/40 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:26:91:05:7d:35:a0:8d:19:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ea6d07-9209-4ad1-b0bf-fcd8f5018c70
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=f347a4f1-5dd3-4563-9851-3c0fed73b5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:94:8e:ba:ba:00:d7:ed:bb:b9:28:47:13:63:
                    c6:4e:ba:cd:34:e7:c6:b9:21:c0:d9:38:22:f5:ec:
                    10:f1:eb:95:bd:d7:ae:06:53:d2:d5:89:0d:0f:90:
                    40:54:04:0b:4e:63:a8:f7:16:3b:b8:e6:b3:8f:20:
                    cb:91:61:25:b1:2e:b1:0a:62:92:76:16:80:08:9d:
                    b0:a8:fd:a5:47:5d:2d:1f:64:96:c7:ac:e4:4b:cd:
                    00:12:f6:bc:8d:e7:63:8b:31:bf:d2:88:c5:86:a4:
                    f4:c9:15:ae:a8:f2:2e:c5:c5:8f:89:eb:03:17:fe:
                    10:41:41:40:cd:1c:40:dc:65:60:36:24:a7:0a:0f:
                    74:d3:f5:6a:92:f3:c8:fc:f5:33:57:f9:23:da:d3:
                    89:de:16:fd:f2:76:ec:10:ea:f8:79:0d:ec:9b:9a:
                    53:69:07:53:cd:93:44:3f:40:1e:99:f7:2b:f0:82:
                    8a:2f:3b:c3:00:2f:02:87:66:1c:7d:b6:15:9f:8d:
                    89:09:f3:b7:40:45:47:f8:0f:3e:4e:44:4a:a7:c3:
                    4d:50:9d:d1:d8:b0:82:34:0e:71:c7:de:3c:8b:bb:
                    d2:ca:e6:27:e1:95:22:ea:7b:bf:f7:15:58:b7:81:
                    36:28:97:c0:ef:35:6d:14:e0:53:e2:54:98:f6:be:
                    c8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7B:7A:30:7D:53:D3:E9:65:D3:E9:AA:2A:08:E4:36:06:DF:FF:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/c8c6824b-e09a-3761-acb0-ab3727ecd853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.crl

            X509v3 Authority Key Identifier:
                keyid:8F:48:41:BE:AD:4F:8B:F9:40:81:A0:90:C3:70:23:AC:91:68:36:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9c4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:fd:88:aa:aa:cb:bc:f3:f1:19:97:a6:31:f9:7b:be:5e:3f:
         a4:93:1d:7a:48:67:99:70:d3:af:ba:93:ea:11:35:2c:f9:38:
         b1:45:e8:35:ca:60:fc:86:7b:9d:b2:bd:eb:49:3a:19:0f:89:
         ab:b8:bd:42:2c:a6:a1:ad:2b:47:2f:0a:34:d1:6d:51:c0:1f:
         1f:3d:11:aa:ad:01:19:6d:2a:42:13:49:f0:5d:14:b4:91:eb:
         89:0d:fd:c0:ff:22:cc:27:13:6f:96:d3:d4:09:29:41:de:3a:
         18:fc:07:be:d4:29:38:19:86:77:75:71:7b:64:d7:c5:17:e5:
         e1:a6:40:ab:4c:6c:04:bf:d3:66:42:f3:98:4e:4a:b0:b3:7b:
         32:96:b9:cf:30:90:93:67:de:46:71:0f:44:07:7b:d3:18:b9:
         4a:9a:26:54:98:f6:18:88:63:11:47:13:d8:ae:a2:3e:a3:b6:
         f8:76:47:49:16:8f:7f:f5:86:a7:ec:a3:af:0b:4f:08:de:3e:
         12:ff:6c:0e:e0:0a:65:5d:f6:9a:de:2a:16:90:87:b1:7b:9e:
         76:cf:03:91:e4:9f:0d:18:5d:cd:0c:f4:fe:a3:95:ad:e1:55:
         f6:45:39:2d:1b:c9:6f:5f:df:57:55:ce:24:98:05:77:15:17:
         40:77:44:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:37 2024 by rpki-client on console-fra.rpki-client.org