Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/f4d23f6c-e75b-30b2-8021-3628a855e890.roa
File:                     f4d23f6c-e75b-30b2-8021-3628a855e890.roa (raw, json)
Hash identifier:          3dKBFDe91oWYagnAEZICjR89/o4FLW8gM3twIna6HOc=
Subject key identifier:   45:22:2C:24:A7:C4:D5:9C:E6:A5:81:2B:2E:68:0A:D1:AC:CA:94:C4
Certificate issuer:       /CN=5541e022-414f-45f5-9426-a7643db1ec8d
Certificate serial:       010D0C9F43285847B3CC15E97B2147BBA9E09200
Authority key identifier: F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/f4d23f6c-e75b-30b2-8021-3628a855e890.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     206216
IP address blocks:        2602:fa08:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:15:e9:7b:21:47:bb:a9:e0:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5541e022-414f-45f5-9426-a7643db1ec8d
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=5c4d4a21-2eb4-4822-ba4a-115bc2d01f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:98:68:f0:a3:8c:60:1b:8e:73:d2:b2:36:
                    a6:b8:0c:d8:bc:e7:56:1f:ff:d2:d0:71:9f:59:6b:
                    28:92:e0:ff:b8:fd:ff:35:1f:f1:4f:3d:f5:ec:67:
                    ec:d5:35:47:fb:cc:5b:8b:6b:2a:e9:7c:d9:6d:02:
                    72:d5:ed:e4:1d:ae:89:c3:ec:39:0c:91:5b:1c:1f:
                    a9:b3:8c:49:f5:37:7d:a6:86:7a:aa:5d:4e:70:b9:
                    88:a5:7c:14:5e:4f:b1:64:b5:04:93:9c:17:4d:dc:
                    40:61:ec:b3:16:14:77:cd:ca:48:f5:60:ed:85:69:
                    74:69:68:54:c3:e8:fa:a5:b4:96:d8:9c:7d:fa:e1:
                    8e:b7:e9:59:f1:f2:f2:c9:da:66:de:eb:90:41:4c:
                    f1:70:29:3e:09:25:82:80:3a:e5:ef:83:5f:90:08:
                    c2:32:e7:df:95:94:c3:56:bd:40:d9:7a:e3:b6:32:
                    d5:26:3d:fb:3c:fc:c6:6e:02:b9:8c:bf:d1:ac:39:
                    70:70:9b:9c:07:2e:6f:26:db:3f:00:2b:fa:34:66:
                    07:f3:ab:83:66:a1:33:de:5b:fb:ed:bf:7e:5d:77:
                    88:8d:78:d1:38:2e:ed:9b:cc:15:6d:c8:d1:38:bc:
                    a0:ee:1c:b0:cc:d0:56:e8:6e:00:13:6e:76:8a:28:
                    a0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:22:2C:24:A7:C4:D5:9C:E6:A5:81:2B:2E:68:0A:D1:AC:CA:94:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/f4d23f6c-e75b-30b2-8021-3628a855e890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl

            X509v3 Authority Key Identifier:
                keyid:F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa08:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:ce:3c:0d:7c:0f:97:68:ec:72:00:e2:38:58:19:f1:92:34:
         a1:98:12:0c:2d:59:ed:c4:8f:e7:00:cb:a2:cc:cb:ac:c7:a9:
         dc:d5:9b:ff:6e:4d:95:aa:90:f0:70:98:68:af:bf:b2:12:4b:
         3b:ba:36:9f:b4:e2:66:0d:0a:38:6d:0a:a3:a9:4f:f7:1d:87:
         6f:a4:6d:f5:d5:3d:00:b9:4c:f4:03:89:fa:a2:35:dc:e8:28:
         92:66:a0:49:a0:9e:a0:b6:4e:a2:f3:df:f9:f1:69:13:41:88:
         ab:61:dd:24:c2:01:40:cb:2f:bc:19:22:a1:e5:58:c5:93:82:
         89:f4:94:fe:c2:29:ad:2f:d3:53:a7:53:6a:c2:ae:8b:fd:fc:
         fa:e7:44:bd:6d:b6:d7:2a:c4:b0:98:61:ff:57:66:e1:7a:51:
         fc:bd:75:ea:48:a4:96:3e:96:0c:2a:3a:f6:8f:d3:1c:cf:d5:
         07:b0:6f:9d:1f:28:37:d5:b4:08:b8:20:97:e1:f4:06:dd:56:
         6f:f8:cf:6f:34:35:08:99:f9:48:de:93:31:55:63:27:cc:5f:
         e1:d3:bf:09:64:07:a3:41:d7:a2:88:d6:a1:54:40:7f:a3:0c:
         83:73:51:84:88:31:59:83:fd:fb:3a:a5:d3:06:b1:49:36:bf:
         42:ed:44:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:38 2024 by rpki-client on console-fra.rpki-client.org