Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3e76bd78-9b58-3211-842a-82982cf133ec.roa
File:                     3e76bd78-9b58-3211-842a-82982cf133ec.roa (raw, json)
Hash identifier:          lx310Vya6OOlKnlyPqu0uIXRHDPs1+8Jna3/RQogaRo=
Subject key identifier:   C9:65:DE:39:A3:B9:FE:1F:6B:01:E0:51:F7:B6:14:02:09:E7:49:FC
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F43285847BAC6A8F6F9E7868371E08380
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3e76bd78-9b58-3211-842a-82982cf133ec.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     5769
IP address blocks:        2607:fa48::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:a8:f6:f9:e7:86:83:71:e0:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=f81960fd-f4d2-4fa1-b18d-58b60e60c4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8d:05:50:43:c4:d1:45:b0:98:ed:55:5a:c6:
                    07:3f:39:8a:b7:23:cb:cd:69:4c:f0:a3:37:be:fa:
                    3b:95:7c:79:ae:8c:e4:31:85:09:3d:59:26:d9:ca:
                    b9:3d:ce:3e:1c:e0:21:75:8c:45:0c:cc:3c:96:9e:
                    9a:63:1b:84:28:9d:68:89:c3:75:4e:3c:b3:9a:4e:
                    ad:2c:0f:f5:f3:78:89:11:cd:35:9a:96:f9:42:ac:
                    1d:11:34:78:99:09:b8:66:fc:67:97:12:c5:7a:d8:
                    42:02:83:d7:9f:d5:f3:e7:60:7c:3c:a1:21:66:fa:
                    e7:35:64:9c:82:83:b1:f4:72:bc:a3:90:c8:37:e2:
                    f2:b8:74:2f:02:8d:56:ae:e3:ae:38:5f:e6:82:47:
                    ff:73:2e:39:29:d7:b8:49:83:e0:e7:83:26:9c:ef:
                    d8:31:40:89:dc:a2:fd:ed:c6:8f:26:ae:aa:05:52:
                    1c:a6:b7:11:6a:10:21:2d:20:b9:6a:49:6f:bf:43:
                    e8:0d:fd:1c:b5:d4:f7:44:16:b5:4b:2e:25:6f:7b:
                    05:92:47:71:03:b5:8d:d4:09:d9:88:eb:da:75:ff:
                    fc:28:da:47:4c:00:38:9d:54:05:52:57:f1:6e:bd:
                    f0:5d:3d:ef:ac:59:8f:9f:2d:c7:fa:0a:ac:b1:ec:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:65:DE:39:A3:B9:FE:1F:6B:01:E0:51:F7:B6:14:02:09:E7:49:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3e76bd78-9b58-3211-842a-82982cf133ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa48::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:6d:6c:ab:79:a1:a4:b2:40:79:48:98:e4:a0:e7:b3:18:b1:
         53:d5:a2:2c:1d:06:9f:86:0a:91:31:b8:6a:a3:49:d9:4b:8f:
         35:78:8e:28:b1:40:51:5a:e3:d6:d2:d1:39:b4:6c:ef:88:1b:
         24:1f:dd:3e:54:6e:9b:93:8d:9f:a2:15:81:d2:d7:f1:97:2f:
         d0:0b:e7:ab:fa:03:9f:bb:9e:c0:db:37:c7:7d:8b:34:98:e9:
         da:15:4f:52:0c:e3:c8:f5:cb:dd:46:0e:38:47:14:3d:95:47:
         19:0d:a2:f6:15:10:d1:65:b7:ba:2a:cf:87:86:a2:d0:7b:b9:
         dd:25:0f:ff:4b:71:97:b8:47:93:58:5a:de:24:8c:39:92:a1:
         82:fe:30:f0:1b:a4:3b:3d:2d:46:18:fa:16:f0:5f:5f:42:e6:
         80:2c:e1:50:3d:e9:01:a8:67:c3:d8:05:0c:41:50:84:28:a4:
         ea:a7:41:c3:6f:41:47:d5:52:8f:62:d8:4d:61:a3:e0:bd:52:
         6a:55:ec:e4:9a:ff:eb:19:86:af:72:23:22:d9:f6:bc:6b:b5:
         d4:51:c8:ea:c5:c2:9d:88:ca:af:bc:02:50:42:fb:b4:83:03:
         66:aa:ec:37:75:83:c9:db:43:7b:5e:18:b5:42:cc:c6:c5:d9:
         91:01:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:10 2024 by rpki-client on console-ams.rpki-client.org