Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa
File:                     3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa (raw, json)
Hash identifier:          xfRzmqZVeTrg3v5AkU0JmSnK47VJeKB2T/YZoGWnNt8=
Subject key identifier:   59:5E:2E:B9:C4:1C:2E:D5:13:11:AC:25:10:05:5A:4F:39:09:C1:5D
Certificate issuer:       /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial:       010D0C9F432858479D76C1109D47AF11C0987038
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     210645
IP address blocks:        2602:2c9:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c1:10:9d:47:af:11:c0:98:70:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=091455d2-19de-4d88-9d4b-51bac5db65f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:c1:a7:14:94:91:6f:0d:0c:77:1c:ab:a2:
                    a1:a7:4b:2e:5c:28:09:56:31:f7:89:b7:5b:ae:64:
                    76:01:96:72:bb:97:2c:87:ec:b0:0c:a3:9e:b1:41:
                    02:a4:bd:d3:58:94:d5:63:99:8e:b9:49:6f:c8:c6:
                    a2:4a:de:95:1e:bb:f9:e4:d3:32:c5:1a:67:08:58:
                    b2:ad:e6:01:5b:06:ea:1b:44:08:72:a3:69:78:73:
                    56:de:57:ec:e4:49:8c:0e:1c:14:52:e7:ab:ce:74:
                    d8:a8:a2:8b:b8:b9:20:3c:5a:31:27:e2:50:de:e1:
                    01:04:55:95:6a:94:66:af:83:78:db:c8:0a:fe:8f:
                    c1:20:94:bd:46:75:8b:44:0e:e3:73:e6:46:2b:ac:
                    82:b1:54:68:70:15:4d:1b:be:26:17:81:65:1f:b2:
                    95:39:18:e8:7c:59:b3:07:7f:f6:ac:a1:77:55:b6:
                    44:64:d2:6d:79:aa:e2:7a:f9:8a:c2:05:be:92:1f:
                    b9:5e:05:cd:ae:dc:ac:40:e5:b4:19:d5:d6:1a:5f:
                    37:c1:6c:3d:d1:39:9f:6d:cc:b9:38:a0:98:e0:08:
                    b9:c8:61:8d:e0:b4:f6:26:e9:6d:a9:a8:5e:04:08:
                    82:c3:1c:fa:e1:47:66:43:26:67:99:e0:30:83:33:
                    d7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5E:2E:B9:C4:1C:2E:D5:13:11:AC:25:10:05:5A:4F:39:09:C1:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c9:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ec:ab:1e:5d:50:18:51:4f:db:ee:0b:a6:98:c7:5b:87:2c:
         40:76:87:65:3d:b8:58:a1:ec:a2:c8:aa:60:46:7d:68:e5:9d:
         35:26:14:4d:2b:61:de:f6:2b:e0:5a:13:df:92:6e:6d:b3:63:
         fa:fc:c7:84:86:8d:16:51:f7:44:5f:13:68:e9:4c:88:34:d6:
         1f:bb:c9:4f:99:f3:af:95:96:16:5a:a9:bd:34:27:de:70:8c:
         17:60:37:ae:29:f6:a6:b1:91:d3:a0:b2:80:e9:79:aa:b1:e6:
         73:07:f1:03:fa:c3:a2:7f:4f:a7:6f:8a:7e:5b:44:46:cf:eb:
         b7:3b:b4:24:59:ea:0f:ba:ca:84:32:a0:2e:a3:6d:23:78:1c:
         7d:99:8b:39:70:9a:ba:e5:13:0f:fc:93:97:38:04:51:c0:a5:
         4d:3a:50:4d:6c:85:d5:52:71:e7:d0:2b:18:f1:54:41:b7:8f:
         d9:d4:26:5c:0d:88:42:5f:e0:df:be:be:70:b9:3d:51:82:69:
         bd:d2:5f:b8:2d:0b:54:0a:c5:1d:69:47:e2:02:75:5b:cc:80:
         45:39:2a:0a:1c:75:41:dd:ff:db:a5:d6:f4:e0:aa:eb:d8:72:
         20:fc:58:1f:c5:d8:a4:b7:6b:a0:66:5f:09:15:e8:4c:9f:ac:
         c9:03:b8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:09:44 2024 by rpki-client on console-fra.rpki-client.org