Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/36e2dec5-2883-35dd-aa96-b3492cbd162c.roa
File:                     36e2dec5-2883-35dd-aa96-b3492cbd162c.roa (raw, json)
Hash identifier:          OI/sCAeQG1OAPKsRKCaEil5kBi3i5gW9o2M6t4Lct8o=
Subject key identifier:   8E:29:4C:83:1D:49:12:99:52:D9:15:6D:45:EA:DE:1B:59:42:52:05
Certificate issuer:       /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial:       010D0C9F43285847C8D9E02BA66FBC53CF644980
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/36e2dec5-2883-35dd-aa96-b3492cbd162c.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     199650
IP address blocks:        2602:fa92::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e0:2b:a6:6f:bc:53:cf:64:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=01e590bf-bb62-4e70-a6e8-a9b21a2eb113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:b5:3b:8a:fc:73:a5:fa:34:da:af:8d:d1:
                    de:a0:f2:07:18:12:3a:89:bd:1b:d6:f9:f2:9c:70:
                    0c:9d:57:7e:42:76:d7:db:98:57:fb:56:c3:23:af:
                    06:62:7d:8f:d6:94:27:a2:03:93:15:30:8d:df:16:
                    5f:af:41:e3:ec:82:4f:85:5c:ea:5b:56:a3:22:a5:
                    a4:27:5c:7f:21:09:61:80:bc:19:31:e3:5d:5c:96:
                    f0:47:82:32:26:a5:03:25:b2:e6:e0:c1:27:40:0d:
                    1d:26:a2:f3:84:17:5e:d8:9a:1c:7e:82:ad:cb:91:
                    bc:bd:a8:f3:33:89:54:aa:07:4d:f8:61:09:50:b5:
                    be:c6:7e:54:ef:de:bd:5d:3a:42:56:2b:b8:d0:09:
                    fa:9e:02:59:98:a8:81:20:bb:f6:87:b5:97:41:34:
                    02:e9:f5:84:f6:07:2f:29:a6:d8:ed:e9:e0:07:f0:
                    dc:58:3f:70:82:eb:25:54:3b:59:c9:56:6a:db:9e:
                    f9:17:af:a4:39:6d:64:0c:eb:b0:7c:19:b9:cc:a9:
                    e3:dd:43:ab:23:8e:87:fa:71:f1:a1:9d:e7:21:fc:
                    35:7f:f8:4b:73:38:8b:a0:e0:c2:ec:e5:9f:9d:30:
                    f4:bb:07:e3:63:6b:7f:ee:4a:33:e6:1e:25:c7:a1:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:29:4C:83:1D:49:12:99:52:D9:15:6D:45:EA:DE:1B:59:42:52:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/36e2dec5-2883-35dd-aa96-b3492cbd162c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl

            X509v3 Authority Key Identifier:
                keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa92::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:4d:03:11:76:27:d2:e7:3f:3b:c8:6b:d9:e3:10:a9:c9:ac:
         e1:d0:1a:aa:17:40:6f:48:af:1d:30:1f:3e:1a:a4:ea:93:41:
         11:6f:92:9b:05:f9:1f:29:2a:41:50:ea:02:71:ea:82:e9:94:
         8e:32:7d:6d:b1:47:ea:27:5b:7a:48:1e:fd:0a:4f:b5:75:53:
         e9:f5:e2:4b:fa:79:46:04:64:58:7b:8c:af:ec:bc:ae:fc:06:
         6c:e6:22:94:0e:99:c2:ff:99:9a:69:24:fc:d0:2d:3b:80:f4:
         5f:6e:13:94:c5:f3:ab:13:2f:d4:8a:33:39:f8:76:72:f2:3f:
         81:da:f6:ff:df:3f:2f:fb:6f:68:37:64:1b:fc:f4:b9:ba:b7:
         8f:9f:24:f3:05:4c:b1:40:0e:18:1a:24:aa:54:9a:10:48:d9:
         05:c9:6c:1d:2d:33:91:a9:ab:c1:86:92:89:1d:a4:e8:30:9b:
         26:cc:0a:0f:6b:bb:aa:49:3a:ad:c3:6d:34:d1:08:b3:b7:e4:
         a9:93:70:a3:93:26:26:cf:8c:71:bf:4c:44:2a:45:a0:82:3b:
         fb:06:fa:48:a0:58:bf:57:6d:f2:63:26:30:25:af:5d:a3:76:
         81:34:f1:cb:da:b6:dd:50:e5:97:07:da:12:bb:01:4d:ae:07:
         75:be:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:52 2024 by rpki-client on console-fra.rpki-client.org