Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa
File:                     3ad9037d-cc4e-3a46-981a-715e438d4f71.roa (raw, json)
Hash identifier:          N7qgKoZlBnYKiDo4AD/sFNgQUVQZEfBA17VYrCWdNNQ=
Subject key identifier:   97:21:4C:C1:60:49:65:00:EE:99:CE:5A:40:EB:60:CC:28:38:D0:92
Certificate issuer:       /CN=cd7304e1-3bc1-43c1-b035-93ee027063db
Certificate serial:       010D0C9F4328584762D65D7922C6FFF1B4F99D00
Authority key identifier: EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     48231
IP address blocks:        2602:fa93::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:5d:79:22:c6:ff:f1:b4:f9:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7304e1-3bc1-43c1-b035-93ee027063db
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=bf934baf-1441-4e3c-ab1c-46f4f57c5605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:32:3b:f9:81:88:93:ca:38:1e:1f:61:06:
                    68:c2:cf:09:66:ba:8e:d7:60:bf:e4:66:8f:9b:ec:
                    60:c7:89:b8:7e:80:18:de:5b:e5:94:6f:45:1e:42:
                    6b:b5:45:17:73:00:e3:0f:f4:f6:a0:0e:ac:49:35:
                    7a:5b:9e:57:6b:95:80:30:20:5f:c5:5f:54:15:11:
                    de:c4:ec:a9:5d:2e:e6:ab:61:48:ac:90:ef:93:4e:
                    29:e8:9d:63:4d:c1:48:69:0c:a1:db:a4:03:6c:7d:
                    42:c2:e2:8a:fd:80:19:ee:97:2b:f1:0f:6d:4d:43:
                    5c:32:97:14:8e:ad:ae:96:b4:ae:2d:d2:5f:ad:c6:
                    4a:13:48:85:6f:8f:93:39:14:b2:42:9f:10:a6:d0:
                    7d:92:80:54:3f:7c:00:76:76:51:b6:c3:2b:a1:c7:
                    c3:78:bc:f2:10:c3:3b:c0:5d:16:0b:1b:8e:cf:c1:
                    14:e6:6e:50:b5:e9:bf:e4:f9:69:24:35:9d:78:d4:
                    f6:5b:5e:fc:47:70:47:34:83:e6:c5:d3:eb:51:00:
                    77:a6:93:ea:7d:48:ab:e0:80:e4:81:2a:6e:db:fe:
                    1e:30:47:7d:1c:4c:8d:d0:1b:ca:ea:a4:f0:b0:49:
                    c2:23:99:c3:af:cf:c7:7b:ee:79:3e:15:2b:1c:90:
                    f7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:21:4C:C1:60:49:65:00:EE:99:CE:5A:40:EB:60:CC:28:38:D0:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl

            X509v3 Authority Key Identifier:
                keyid:EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa93::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3f:57:60:28:6e:41:59:06:42:3c:2e:da:49:5a:ab:89:4f:
         a1:29:8b:1b:41:c8:91:1e:3b:a0:ac:16:93:dc:1b:28:27:61:
         c2:4e:17:ac:1c:c6:4c:84:f6:54:86:3a:f8:30:07:dc:06:4f:
         ef:32:7b:ba:11:12:ed:82:10:da:74:dd:7d:26:e5:3e:85:97:
         f0:19:30:38:12:e2:6d:d6:eb:e5:1c:1f:ad:26:9e:5f:10:bf:
         f5:99:c0:2a:04:71:9a:cd:88:43:14:cd:ec:66:3b:f2:41:9e:
         c9:a4:cf:a8:54:39:4d:30:c2:61:c2:a1:7f:b2:fd:db:21:25:
         75:9f:0c:5e:8d:ab:d0:4d:15:cd:2a:e0:71:cd:07:63:d9:e1:
         b0:0e:80:d4:3c:84:ce:2c:53:9b:81:13:1f:1c:6a:24:14:3b:
         6e:43:30:85:27:85:ee:a9:91:44:74:24:87:fa:c2:b2:25:f6:
         45:10:86:69:df:22:be:98:81:a1:e1:41:ae:84:ae:e8:4b:fa:
         9d:64:d2:c7:19:6b:1f:a7:dd:57:c9:ac:ed:05:e7:f5:6b:82:
         19:12:d9:51:e9:d5:85:bb:8f:27:cf:3a:70:8b:dd:78:00:95:
         79:c0:f2:bf:57:4d:8b:02:aa:3c:3c:7b:25:d4:95:12:60:f0:
         49:ba:b7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:23 2024 by rpki-client on console-fra.rpki-client.org