Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d32ad531-224a-3d26-aaf7-f82478922d6e.roa
File:                     d32ad531-224a-3d26-aaf7-f82478922d6e.roa (raw, json)
Hash identifier:          NhROXCxp4rTD4+nA6lYncK6KfCA9reO0KgYQS3SuWQw=
Subject key identifier:   BC:EC:B6:99:2C:CC:FE:34:75:64:8C:A3:DC:86:A1:B0:01:FE:A5:FD
Certificate issuer:       /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial:       010D0C9F432858473A5B7A21D3B8787F914A15B0
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d32ad531-224a-3d26-aaf7-f82478922d6e.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     54613
IP address blocks:        2602:fd9a:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:7a:21:d3:b8:78:7f:91:4a:15:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=67fdd5c7-0af6-41a7-8329-3d2488c78daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ca:77:ba:14:8a:08:98:17:48:d8:fe:de:c8:
                    e9:5a:cb:de:ed:a1:09:f7:b7:b8:63:4b:23:36:14:
                    a1:c4:66:0c:45:c2:88:c7:3f:18:38:cc:d5:7a:e5:
                    a1:2c:3d:d4:08:18:f5:bd:24:c7:18:3f:23:0f:3b:
                    4b:d7:ab:b6:dd:37:d6:70:b6:0d:fa:97:70:8a:aa:
                    83:2d:61:02:df:53:99:f9:9f:32:d3:68:36:25:e7:
                    cb:a7:55:17:ad:48:ec:0d:2c:20:cc:73:20:b0:b8:
                    5a:0b:d0:13:14:7c:28:b3:3a:17:f5:13:7a:9c:b8:
                    a5:12:a2:90:55:c6:07:16:6f:28:ea:0a:ab:87:33:
                    44:92:2a:19:71:2f:04:60:a9:3e:a8:bd:d7:3f:70:
                    c9:87:51:62:16:a7:99:4b:30:58:68:c7:8c:d2:77:
                    25:9b:d4:fc:ee:0c:0d:0f:9a:ed:d2:85:c4:96:bc:
                    ab:14:37:dd:a5:fb:39:af:b5:b0:f1:14:16:86:49:
                    93:6d:0a:df:64:24:db:98:a9:eb:8c:77:84:44:c0:
                    d5:d1:85:a9:5a:44:f2:42:f2:3e:fb:80:d5:1a:41:
                    5e:bb:81:e6:c1:cf:73:03:9c:14:33:0a:08:9a:31:
                    27:c8:f1:a8:0d:db:71:b7:39:ac:c2:ed:50:87:5b:
                    23:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EC:B6:99:2C:CC:FE:34:75:64:8C:A3:DC:86:A1:B0:01:FE:A5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d32ad531-224a-3d26-aaf7-f82478922d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9a:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ee:2d:52:6f:8c:c9:f5:40:c3:ba:a2:1d:20:7f:3f:4f:20:
         d3:0c:49:5e:af:a2:b6:4e:a7:ba:4b:7e:ff:cd:59:d9:6f:4d:
         17:8c:85:4d:f2:d5:85:5a:e0:9d:98:f9:3d:f4:ba:38:c7:75:
         16:13:18:2d:be:77:ec:27:9d:5d:9a:c7:c5:4d:65:11:13:b9:
         51:5a:4c:2a:4f:43:e3:66:e1:c7:39:54:bd:bb:6e:b8:79:32:
         51:18:a1:e7:26:c6:1b:1e:4c:e9:b6:f9:f7:2b:cf:c2:95:64:
         da:cd:3f:7d:f0:29:7b:b2:2f:47:47:77:c8:9c:3e:24:82:e5:
         87:ae:3d:2b:d0:bb:1c:29:04:57:8a:0b:b8:43:5e:92:92:31:
         ac:ca:f1:e6:f8:b6:20:17:f3:4f:dd:da:d8:12:7a:9c:8f:27:
         99:72:be:d7:af:ff:ca:cd:e2:76:ce:1a:0a:07:77:8a:24:98:
         6b:72:e2:7a:12:e8:19:3a:97:a1:1e:a4:e1:75:f6:87:ff:24:
         e1:d3:11:cd:0f:60:50:af:d4:9e:cc:f5:17:b8:7a:20:f4:27:
         a8:96:3e:6b:ea:94:09:6c:41:3f:06:08:3d:7f:87:57:8b:0f:
         a5:3c:59:5a:87:96:a3:4c:31:97:26:cf:19:68:19:38:26:28:
         57:18:83:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:52 2024 by rpki-client on console-ams.rpki-client.org