Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa
File:                     21006f88-25cc-321a-bb06-e692d318c31d.roa (raw, json)
Hash identifier:          Zj4rF9zMLMC8QA1I+88pQLlXooOO6NZrycgubLM2Ju8=
Subject key identifier:   1C:18:85:0B:5C:C0:57:F0:16:1F:B2:4D:C0:D9:FF:D7:15:84:B8:FD
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F432858473D260403F57EDB200287D100
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     399275
IP address blocks:        2602:fcc0:6666::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:04:03:f5:7e:db:20:02:87:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=291dedf0-0d2a-4f3a-8a8c-ef860492ba51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a1:82:e8:f6:6a:d1:f5:7d:11:66:f7:52:28:
                    f7:e9:92:9f:29:44:68:b6:bd:75:23:0b:b3:40:90:
                    11:5a:38:7d:0f:72:00:b2:ab:05:4e:9f:1b:70:4c:
                    98:4c:17:b2:e6:fe:19:45:03:51:16:88:1b:d8:bb:
                    48:4c:34:4d:82:cb:2f:0d:2a:9b:1d:5d:d6:8e:4f:
                    43:c3:40:b9:25:b9:da:61:c6:dc:9d:c6:37:04:43:
                    48:2b:09:55:b1:be:82:b4:cd:a6:39:05:11:6f:30:
                    d8:fc:53:46:44:5e:2f:33:84:65:64:49:b3:a5:61:
                    58:c5:23:7f:80:6e:cf:7e:d1:ff:f4:a4:3e:5b:a7:
                    8b:75:e5:49:5d:fc:0f:97:6f:77:7a:4f:12:ba:3a:
                    bd:8d:4c:09:3b:c3:8c:a4:bc:66:b7:f1:79:d8:af:
                    f8:68:6d:3b:5b:a9:a4:35:b7:1e:c2:7a:dd:99:d4:
                    dc:43:3a:71:e8:f5:43:43:4a:f1:a0:ff:17:c9:78:
                    df:4e:8e:5b:c1:42:b3:f3:97:35:76:02:9b:ac:e6:
                    fe:ef:06:69:81:16:3c:5f:8f:73:e7:46:06:c2:e2:
                    f9:f7:b9:be:71:d2:f9:5d:e4:be:57:6a:6b:18:79:
                    8c:a7:e0:4d:fd:f3:db:d8:21:4e:57:37:6c:a7:54:
                    e4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:18:85:0B:5C:C0:57:F0:16:1F:B2:4D:C0:D9:FF:D7:15:84:B8:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:6666::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:83:c7:37:05:d3:07:ca:5a:0d:20:e0:ea:6e:68:bc:7b:42:
         5f:1e:a2:f3:e4:c1:85:d0:6d:3a:65:94:50:e5:28:75:54:af:
         9d:c8:1e:90:bc:3d:47:34:35:15:bc:04:a5:b7:60:b6:81:9a:
         dc:fc:d7:21:d9:18:f7:6b:07:0f:05:49:21:62:7b:f2:ab:9b:
         31:f7:33:85:2c:9a:d8:af:4a:99:6d:65:98:4e:34:50:54:c9:
         92:49:68:01:95:6f:a4:b6:d6:df:fb:db:68:5b:2b:f0:65:ee:
         b9:81:dc:21:10:b7:f3:92:50:28:6b:88:61:dd:8d:03:c0:f8:
         1c:3c:13:58:37:3d:64:ee:86:cf:e9:9a:a3:8f:af:09:f7:3e:
         24:3c:84:4f:df:be:68:f9:c7:e9:5c:1f:a8:cf:96:e5:16:6e:
         c8:75:eb:a6:86:21:33:39:14:ee:09:1b:74:04:96:20:22:2b:
         12:cf:49:18:b6:25:af:b7:c7:6e:a5:60:e3:39:91:4a:1f:22:
         26:ab:44:bf:16:de:96:da:f0:0e:8d:5b:da:56:3b:9b:26:0b:
         bd:aa:19:15:46:5b:b6:42:8d:c0:e3:f5:6f:e2:5b:d5:48:61:
         b5:0c:d2:28:28:ce:33:71:6d:9a:9c:08:95:9b:56:bc:e9:81:
         d7:07:e1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:07:53 2024 by rpki-client on console-fra.rpki-client.org