Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25e49a96-3cc3-33ff-8668-88c24bc14977.roa
File:                     25e49a96-3cc3-33ff-8668-88c24bc14977.roa (raw, json)
Hash identifier:          Qv2xMLTJIxrhdepf+3bwDUi7nVmFkjB26MBgGk0GhXY=
Subject key identifier:   B4:DA:5D:F7:59:3E:0A:F1:1A:54:2F:A5:84:7A:14:34:D4:70:78:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846DFA04A008D28022235E6FAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25e49a96-3cc3-33ff-8668-88c24bc14977.roa
Signing time:             Wed 14 Aug 2024 13:00:38 +0000
ROA not before:           Wed 14 Aug 2024 13:00:38 +0000
ROA not after:            Tue 12 Nov 2024 14:00:38 +0000
asID:                     22909
IP address blocks:        2601:780:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:df:a0:4a:00:8d:28:02:22:35:e6:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 14 13:00:38 2024 GMT
            Not After : Nov 12 14:00:38 2024 GMT
        Subject: CN=32abdb10-132f-4d93-8fb1-4d553a54a63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:24:61:8e:43:e6:48:cc:81:0c:22:97:fe:
                    f8:32:84:c5:66:7e:f9:44:b2:b2:76:7a:0f:ab:1f:
                    51:0a:77:56:0b:09:1c:87:56:34:6a:55:11:2b:24:
                    d3:2e:37:75:e0:37:e7:ca:a0:8b:76:36:5d:b3:d5:
                    e9:00:96:f4:dd:0b:bf:6f:b8:39:7a:29:ff:47:c2:
                    1a:b0:62:6d:f0:ab:0d:d7:c0:80:7b:d0:24:c6:21:
                    2b:a7:b9:6b:61:fb:f9:d1:5b:86:96:6f:1f:6a:c9:
                    1a:fe:32:2d:52:e1:f5:b1:5e:4b:6e:21:fe:19:6d:
                    a0:96:6e:c9:29:59:d6:82:01:e6:7b:77:d4:a4:6c:
                    33:28:de:6e:a5:bd:ef:84:71:a5:52:64:b6:a3:f2:
                    6d:cf:28:38:c5:ec:de:8a:73:dc:bb:34:37:8d:e4:
                    46:8c:22:53:ad:20:98:c1:d9:f6:11:0e:12:b5:5c:
                    2c:58:a7:d4:00:00:b3:34:a1:1e:cc:07:30:fb:de:
                    cf:e8:d8:38:03:a6:22:31:3d:51:d9:7b:14:91:81:
                    5e:9e:65:65:d6:47:09:17:78:6a:43:3a:41:42:39:
                    dc:43:9a:ea:8f:e3:69:34:01:76:3d:4e:6a:03:82:
                    32:fd:19:1f:45:55:c8:48:36:10:94:31:ee:d3:0e:
                    e8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DA:5D:F7:59:3E:0A:F1:1A:54:2F:A5:84:7A:14:34:D4:70:78:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25e49a96-3cc3-33ff-8668-88c24bc14977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:780:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:99:fe:81:63:4d:d7:b7:12:cb:1e:bf:67:b6:d1:b6:4b:6b:
         e7:42:6d:58:3a:7e:0e:8e:13:d9:64:8f:2c:8e:4c:c9:d4:ea:
         a2:fd:73:53:fb:5e:a1:76:4d:b6:36:c1:12:12:ce:c9:cc:42:
         66:4e:e2:31:24:10:b8:b9:a5:46:60:d3:27:5c:6b:b3:31:ae:
         83:1d:7c:1c:26:86:fd:26:9a:f1:60:46:96:e6:ca:2b:4a:49:
         42:ca:c5:2b:6b:e8:b7:21:33:e4:98:c2:3f:e4:44:85:98:fa:
         f4:b8:5e:5d:33:62:dd:43:94:a3:c6:f4:f9:24:8f:de:e8:94:
         b4:d1:d8:31:39:9b:3d:46:b8:97:22:3e:2a:5f:ed:ef:51:c2:
         b0:75:f6:19:a1:b0:73:50:59:5e:20:aa:11:8c:2d:07:90:86:
         12:c8:e0:e0:54:93:dc:e3:94:29:b2:5e:88:2c:b2:f5:ca:7a:
         bc:12:2c:3d:2f:9b:51:e8:9e:fd:83:6b:4f:01:e4:e4:de:e6:
         13:8a:05:9c:2c:76:73:a8:d9:55:0c:8e:a7:e2:98:be:06:09:
         e3:50:36:eb:0c:15:a8:18:26:05:d1:85:05:9f:50:94:75:7b:
         64:88:46:b3:57:db:a4:a7:db:d7:9e:dd:87:80:71:71:54:73:
         e8:c2:a0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:56:26 2024 by rpki-client on console-fra.rpki-client.org