Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/d7ccb4be-417a-3235-8990-2844f3fdfc20.roa
File:                     d7ccb4be-417a-3235-8990-2844f3fdfc20.roa (raw, json)
Hash identifier:          p7YaCT26rTFqfTbCyukCUye+v8QoSJlTShrLHL+4Tl0=
Subject key identifier:   02:21:68:9D:0D:9B:A2:77:71:9E:39:75:AD:47:9D:29:DE:D3:7B:21
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F43285846CC6B92389FFB9D7D1B396540
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/d7ccb4be-417a-3235-8990-2844f3fdfc20.roa
Signing time:             Wed 07 Aug 2024 15:54:39 +0000
ROA not before:           Wed 07 Aug 2024 15:54:39 +0000
ROA not after:            Tue 05 Nov 2024 16:54:39 +0000
asID:                     14618
IP address blocks:        2602:277:3d2::/48 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:cc:6b:92:38:9f:fb:9d:7d:1b:39:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Aug  7 15:54:39 2024 GMT
            Not After : Nov  5 16:54:39 2024 GMT
        Subject: CN=cbd5c9e9-e738-4c09-a776-94f545616647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:b3:14:75:40:31:05:a2:d3:4e:18:ee:90:
                    76:bb:77:56:a7:84:1e:a7:fe:7b:ad:86:6d:1e:01:
                    fa:3f:e7:7a:9c:9c:e1:75:1f:46:c1:f0:1c:54:ea:
                    2c:f9:13:a3:9b:fe:5c:d1:a1:4a:3a:d6:4f:d9:f0:
                    db:ca:7e:b1:39:1b:95:57:56:e2:f7:55:0a:a7:ff:
                    2b:d8:c9:b3:b4:ff:05:7e:cf:20:73:ab:a5:49:be:
                    b3:97:0e:7a:5e:9e:4e:5f:97:f7:db:9a:93:5e:9d:
                    3e:d3:8b:02:c3:5b:03:0a:4f:3c:68:99:17:e3:06:
                    e6:34:03:10:fe:96:02:eb:73:85:bd:f5:ea:51:b5:
                    7b:fc:36:3b:7a:07:d4:b5:4a:ee:94:cd:66:69:86:
                    4c:4e:38:ef:a1:84:c1:a3:14:b4:8c:52:f1:23:77:
                    ea:0b:c1:a5:e0:e0:aa:89:af:20:23:4b:47:c4:49:
                    c4:8e:25:df:73:ee:73:c6:18:ee:3b:1d:2e:65:6a:
                    ca:1c:08:56:79:f9:7b:57:61:4b:58:58:b2:28:db:
                    f0:d8:7a:05:23:56:b8:a3:fa:b5:c3:2d:59:46:08:
                    30:08:0a:19:0c:27:fd:42:a8:23:b1:d4:e8:c9:16:
                    e8:09:5e:8e:85:41:ef:dc:c7:4a:eb:24:df:da:38:
                    ef:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:21:68:9D:0D:9B:A2:77:71:9E:39:75:AD:47:9D:29:DE:D3:7B:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/d7ccb4be-417a-3235-8990-2844f3fdfc20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:3d2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:58:1d:9e:6d:bb:42:a9:c5:9e:63:ca:b4:b0:0b:70:db:c8:
         f1:96:b2:fd:f1:ae:63:f8:0b:c3:a1:60:ee:7a:7a:ef:cd:27:
         d1:f7:c2:1c:00:04:51:8e:46:7e:22:b2:7c:2c:e2:31:c5:ca:
         d1:11:ff:69:fe:83:57:83:44:c8:06:e9:dd:6d:06:c1:be:be:
         db:e0:f7:3b:58:65:d8:55:7a:a2:ef:b7:0c:90:4f:23:c8:b2:
         29:11:44:a5:df:23:97:29:89:22:8e:0f:63:e6:e1:d0:f2:63:
         73:9f:58:68:3d:59:7e:d3:51:02:e8:61:58:6b:9d:45:1f:51:
         25:17:93:f5:7b:f0:80:87:e0:1f:57:b5:9d:43:c2:b1:c9:48:
         47:02:e1:b0:78:31:d6:a6:b7:eb:98:4f:ff:d1:db:f9:ad:86:
         34:70:41:21:a2:8b:93:c5:b3:bc:60:93:54:5e:13:16:91:d6:
         7b:42:ec:c7:06:28:e0:1b:dd:13:3b:3a:62:b3:e1:6d:90:3e:
         2e:41:15:98:d0:ff:a2:09:ab:08:fc:64:81:93:12:8b:4d:ef:
         79:33:d8:31:99:4a:8e:45:cd:c8:fd:e8:c2:f4:04:73:55:a2:
         01:1d:d7:6d:ff:71:7b:e5:41:c8:09:13:9e:0f:79:1f:40:47:
         ed:f5:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 18:53:36 2024 by rpki-client on console-ams.rpki-client.org