Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa
File:                     35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa (raw, json)
Hash identifier:          0fpDRefbHiFc7VnSWdq6QSrZItwMI8tvSA3fmmJPxSs=
Subject key identifier:   39:D2:50:EF:9E:61:F2:3F:E8:F0:2F:24:11:73:36:9C:34:56:9D:22
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584797E139C8DCF5F7B35B192380
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     12212
IP address blocks:        2605:8900:f000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:39:c8:dc:f5:f7:b3:5b:19:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=10bc8764-9dad-4db3-a783-20fef8080508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ce:d7:37:5d:3f:11:98:3a:39:6c:13:1f:39:
                    d7:49:4b:de:ed:8b:e8:36:be:6b:58:93:35:30:ab:
                    9f:00:49:18:a7:31:e3:31:36:e4:1e:f0:71:71:76:
                    39:30:35:81:68:68:d6:24:21:73:26:a1:f9:22:a1:
                    8b:16:f9:e5:8f:60:3e:bb:a3:89:73:37:f3:d5:da:
                    11:df:d3:08:ec:64:25:fc:22:e5:3c:78:3d:90:1a:
                    65:3d:76:c9:ef:c1:7c:46:f9:22:70:1a:8e:39:6a:
                    cf:05:f1:9c:a2:d8:b6:7f:97:2a:b9:53:3b:62:81:
                    c5:76:46:c6:77:dd:44:29:76:5f:10:fb:25:ed:ef:
                    f6:4a:11:72:bd:18:46:50:2c:ca:b0:26:1e:b9:a4:
                    4b:6c:1a:7b:26:ad:04:e9:88:34:7a:11:fb:f0:c2:
                    0d:f1:76:08:10:e9:55:85:bc:b8:90:45:c1:7c:0d:
                    4b:f4:ce:14:d2:9a:73:80:64:72:78:13:5c:3a:78:
                    95:0a:fb:ac:3e:b1:d6:ab:25:ba:36:2e:60:ea:93:
                    4b:21:74:3c:52:ad:bc:54:f8:6e:ac:f5:62:59:70:
                    ad:fb:16:1e:43:ea:5c:47:29:9e:1d:55:8a:d8:d8:
                    e0:d1:b0:47:27:47:3b:1c:bd:42:12:16:fa:c3:54:
                    0b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D2:50:EF:9E:61:F2:3F:E8:F0:2F:24:11:73:36:9C:34:56:9D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c2:cc:df:58:94:2b:4c:c2:04:52:18:58:7b:55:63:66:71:
         67:91:9a:82:32:c7:01:91:cf:e8:53:de:9f:77:27:c2:20:c0:
         be:88:6e:cd:25:51:1c:65:5a:30:5e:f1:b5:ed:81:67:76:ed:
         37:1f:a9:e3:95:c5:41:23:ec:2e:c2:5f:4f:c5:df:5c:17:34:
         41:6d:38:40:35:5d:fb:a7:62:d5:b6:a7:f7:36:25:60:df:bc:
         54:c2:33:fb:79:a0:e5:4c:4a:fc:9e:e0:a6:73:fd:0e:66:9b:
         f4:66:d0:08:d4:65:1c:aa:58:92:1f:b5:95:1c:94:fb:8c:6b:
         cf:bb:87:90:88:41:fc:5b:a4:01:6e:a8:95:bc:96:65:3e:57:
         6a:99:5d:4b:45:88:de:69:a1:7d:ab:a1:51:0b:53:5d:7f:9d:
         25:df:02:43:45:06:49:ea:d4:9b:c6:bf:4d:25:2e:0e:07:5d:
         f2:eb:9f:a6:c1:30:44:3f:0a:5b:72:ec:66:c2:a4:3e:27:e5:
         60:2a:87:25:fd:c5:c4:cd:06:72:55:a7:c7:0a:35:fa:28:36:
         89:cc:c7:05:2c:d3:8e:00:86:ba:17:11:e0:d4:83:f8:06:4e:
         68:51:91:40:78:08:5f:35:02:04:66:18:fd:86:20:39:03:7a:
         2c:42:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:00 2024 by rpki-client on console-fra.rpki-client.org