Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/a8721daf-d2d4-3712-8748-5f5af775bc52.roa
File:                     a8721daf-d2d4-3712-8748-5f5af775bc52.roa (raw, json)
Hash identifier:          z0rl982OFXovgV5TcBWyie+gOy281PQUJYfKMMCLy8A=
Subject key identifier:   59:E4:49:07:73:A5:36:30:54:59:DF:6E:1C:48:A9:BD:08:FA:F9:D6
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F43285847C8D9E6456E3EC5DE8A2856C0
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/a8721daf-d2d4-3712-8748-5f5af775bc52.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     14618
IP address blocks:        2602:277:d0::/48 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e6:45:6e:3e:c5:de:8a:28:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=86ab922c-b71e-4508-acc0-964624d46303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:4d:e8:6f:7d:e4:bc:c5:8d:cb:e6:15:99:
                    6f:67:9d:1d:f9:b4:95:6b:63:8b:eb:01:70:58:21:
                    87:a3:59:06:c7:c9:af:a3:20:77:3d:8a:82:18:29:
                    5f:6e:3e:a0:c0:b2:ad:0b:7b:f9:05:07:f2:30:35:
                    eb:92:d4:e0:64:65:9e:69:96:c4:f5:94:5c:d9:bf:
                    73:de:92:06:59:cf:cd:88:ba:3a:20:85:a8:af:e2:
                    41:2c:5c:b8:fd:e7:55:6a:83:87:da:8b:1c:97:7c:
                    e2:6e:b6:67:e1:75:d7:e2:bd:f3:b9:a1:7a:3f:c8:
                    a6:6b:d5:eb:5a:c9:51:48:a3:b2:f1:ad:89:69:11:
                    6a:e5:35:ac:2e:fc:63:b7:49:32:5a:f0:b8:6d:95:
                    87:46:93:ea:85:5c:b9:2b:10:c2:3e:18:ec:fc:d8:
                    07:02:62:20:d5:a0:4a:fa:b3:27:20:a9:38:7f:ef:
                    1d:1d:82:9e:39:62:03:44:6b:cb:0c:af:31:2e:8f:
                    1a:ce:ff:13:cf:fd:fd:1f:50:35:fd:3a:2b:a9:c3:
                    7f:1b:87:d5:49:a5:ae:40:08:c0:c1:5e:72:61:18:
                    65:20:0b:38:cd:60:88:a8:ae:b0:31:81:6e:17:78:
                    20:b9:59:28:11:6a:89:b3:13:03:25:19:e7:a1:14:
                    9d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E4:49:07:73:A5:36:30:54:59:DF:6E:1C:48:A9:BD:08:FA:F9:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/a8721daf-d2d4-3712-8748-5f5af775bc52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:fc:3c:10:93:79:a6:a2:a9:4e:09:c5:4a:a0:cf:c6:b3:7d:
         a1:21:81:e8:e5:0d:b1:4f:66:3a:ba:10:82:b0:38:78:f1:cc:
         08:56:0d:a5:eb:a6:33:6e:40:85:c5:60:0d:0b:5b:df:0a:f9:
         14:14:de:7e:55:d1:e6:89:6a:9e:26:bb:e2:5d:3c:99:59:15:
         c1:0e:f6:d6:59:c2:57:41:d4:22:32:10:55:00:e2:a9:a7:f2:
         21:2c:f8:11:ef:2b:e6:e4:69:97:f0:9d:69:f4:12:01:16:5f:
         b6:39:c7:f4:b6:58:20:c8:3a:49:1e:92:65:1c:da:15:7e:87:
         26:cf:00:da:78:7f:f1:30:f7:c6:df:24:ae:4d:48:1a:20:f0:
         bc:42:ad:e6:e9:b9:61:03:04:14:96:96:2f:42:7f:6f:24:a7:
         3c:33:13:3c:0e:cd:fe:2b:20:53:aa:4d:ce:a9:40:38:fa:f5:
         1e:2d:cf:c5:c6:0d:f4:c2:9e:18:6e:70:cb:24:83:0e:9e:e4:
         c8:85:bf:b2:d9:96:eb:d9:9b:e4:1f:8c:41:64:94:95:be:18:
         dc:61:d3:74:6e:48:ae:a3:0f:d1:91:1d:21:38:d7:13:6f:12:
         b4:4e:df:0e:5a:16:12:14:d5:32:97:04:a7:2f:d1:8c:ac:6c:
         bf:a3:12:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:10 2024 by rpki-client on console-fra.rpki-client.org