Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa
File:                     8e995a78-3dbd-35dc-834f-2588245e7f22.roa (raw, json)
Hash identifier:          mjJyQgZxIn6nSPwSgmPpTXTFt24rHR/xa7STtQNrUnI=
Subject key identifier:   72:67:A4:7C:49:16:0C:DB:6C:C2:86:97:C1:AF:5F:49:A7:9C:AD:CC
Certificate issuer:       /CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c
Certificate serial:       010D0C9F432858472F30802E82F45B397DC493D8
Authority key identifier: 42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     399976
IP address blocks:        2602:814:1000::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:80:2e:82:f4:5b:39:7d:c4:93:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=1d832117-cc64-47c7-bbce-d119a22b9f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a5:5d:27:5a:82:fd:e8:55:4f:75:5f:03:22:
                    45:86:04:82:3e:b1:aa:0e:31:f7:13:87:c4:c5:89:
                    e5:4c:4e:02:76:98:83:a3:a4:0a:17:c8:44:c7:6e:
                    6e:bf:45:ea:fd:4d:19:b1:f1:56:ed:ba:2b:0a:20:
                    8b:9a:b4:97:b3:c2:f8:0c:c2:7a:a8:d3:67:17:b4:
                    eb:85:8e:84:44:76:37:6b:b0:db:38:26:e6:e2:7b:
                    bb:c2:04:04:7f:a6:59:e6:cc:ea:53:e2:d0:de:ec:
                    49:e5:20:8f:b6:1b:5f:8d:a2:b8:bc:9e:21:35:44:
                    a6:f5:aa:85:3b:81:bc:76:d6:d6:3b:c8:68:04:ca:
                    b4:64:ab:3f:e9:88:0e:67:0f:bd:82:9d:a0:de:04:
                    25:7a:1a:1e:5c:97:6f:e5:ce:89:38:83:87:a4:7d:
                    41:1b:ca:50:e5:5c:45:89:6e:7f:0e:ac:53:bc:1f:
                    28:34:86:a0:a9:63:3a:5f:6f:b5:86:96:b1:c2:d2:
                    94:17:7f:26:41:ca:7b:35:0f:9e:ad:52:a5:e5:e5:
                    a0:1a:b6:d2:d8:c7:fa:31:73:e7:c0:6d:fc:db:75:
                    64:38:6a:8c:76:31:26:68:37:a5:00:e1:5e:59:2f:
                    c4:60:ad:5a:7c:fd:4f:7e:05:1a:6f:d3:03:b7:ff:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:67:A4:7C:49:16:0C:DB:6C:C2:86:97:C1:AF:5F:49:A7:9C:AD:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl

            X509v3 Authority Key Identifier:
                keyid:42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f2:7b:d9:f2:b1:0a:8a:86:52:ac:8f:61:5b:66:77:e2:c5:
         7a:1d:79:f1:f9:0b:82:44:77:68:1e:9c:77:b1:31:c9:01:01:
         84:0b:9a:11:b2:14:f6:c5:a6:c4:de:60:a9:39:2f:82:7e:07:
         79:f5:c0:1b:69:99:21:1e:96:46:8d:83:b3:82:05:b1:2b:ae:
         35:e5:0a:78:26:e6:ab:d5:c3:85:38:86:bb:b7:56:21:9b:9b:
         06:7c:e2:dc:17:76:39:15:63:19:18:8b:53:6f:83:21:95:5a:
         fc:05:44:74:a3:2a:2b:9d:ea:79:08:d5:15:a8:7d:d8:d6:fc:
         f5:80:e1:ab:80:77:49:8a:46:37:82:7b:16:e8:6b:64:8f:cc:
         62:c8:f5:f9:65:61:72:9c:2b:c5:21:4d:57:65:19:cf:1e:89:
         61:d0:af:93:99:9c:ac:ae:7a:76:c5:2b:ef:e5:55:00:86:52:
         fc:04:65:ee:ad:da:1d:69:b8:15:98:ac:41:d1:8d:bc:2b:f1:
         61:01:b0:99:25:88:c8:e2:ff:da:7f:33:8a:34:b9:23:7a:cb:
         30:fe:9f:7c:37:e8:65:e4:57:49:03:41:3d:22:49:f9:57:42:
         37:15:80:35:0b:50:25:dd:b6:bf:40:0b:93:39:14:fb:4a:63:
         9a:c5:ea:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:18:36 2024 by rpki-client on console-fra.rpki-client.org