Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa
File:                     2d10269c-abaf-3198-90a0-8c1e927fe84e.roa (raw, json)
Hash identifier:          871IlU+nEuFHJ9PCRfSdhwISFP/k2PiXWgFnIOkspEk=
Subject key identifier:   B9:20:46:26:48:E9:46:D3:41:54:B6:B8:BE:3F:8F:95:53:4B:46:FD
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F432858476B3643ADF1900ECC82ED7340
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa
Signing time:             Thu 03 Oct 2024 13:00:41 +0000
ROA not before:           Thu 03 Oct 2024 13:00:41 +0000
ROA not after:            Wed 01 Jan 2025 14:00:41 +0000
asID:                     3477
IP address blocks:        2601:a012::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:36:43:ad:f1:90:0e:cc:82:ed:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Oct  3 13:00:41 2024 GMT
            Not After : Jan  1 14:00:41 2025 GMT
        Subject: CN=11ac8bb6-ac98-4c42-b5e1-b903e2076afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:61:18:56:e6:ef:f5:78:0c:fd:ce:f8:e9:d3:
                    9b:4d:84:2b:43:3b:ce:e4:95:1e:c0:2b:ae:eb:a3:
                    c2:de:83:d3:d4:30:a2:a2:c1:6f:30:0c:5d:fb:85:
                    7d:9a:dd:92:fb:4f:69:46:e8:fd:34:7b:e8:01:60:
                    6e:24:22:1a:b3:d7:90:3d:96:63:a4:91:86:e9:a5:
                    87:d2:ed:84:e4:e7:01:e7:c3:6a:72:e3:37:e1:55:
                    50:43:92:a8:94:e2:d2:a9:5f:2b:b4:64:4b:61:ce:
                    7b:33:7b:63:6e:7c:a4:c2:e5:16:68:6e:15:1a:fd:
                    6a:0d:82:4b:84:1f:5f:a5:d0:5d:39:f6:4e:34:3f:
                    86:90:e8:9b:a7:d9:81:52:06:66:79:1b:40:e2:05:
                    1d:25:f4:dd:b5:00:ad:00:7e:e7:0f:ec:f9:38:e2:
                    41:e7:f6:b2:40:29:76:64:b5:cd:be:db:36:51:ee:
                    3d:95:78:b4:48:53:16:7d:f2:ed:87:76:7e:37:21:
                    84:9d:01:4e:35:8a:1b:d7:3a:cb:63:1d:9a:ab:4f:
                    53:fd:6d:18:fc:f1:4f:b5:a3:9e:80:f2:5d:31:68:
                    14:c8:81:0d:22:c0:52:5f:a7:da:ce:69:b5:cc:6c:
                    c7:5f:23:45:d3:3c:d5:97:8a:b1:be:49:ac:3c:08:
                    bf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:20:46:26:48:E9:46:D3:41:54:B6:B8:BE:3F:8F:95:53:4B:46:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a012::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c4:71:7b:4b:d4:6d:72:1d:94:3a:89:c2:b7:46:fd:56:e5:
         5c:8d:53:65:6e:33:da:3c:2c:f1:9a:9f:c2:5e:20:4a:4e:10:
         72:57:8b:ff:87:06:b4:11:19:f1:1a:76:de:31:76:75:f9:79:
         c2:d9:18:54:da:6b:9e:a7:8b:e4:4a:3c:1e:27:67:ab:e6:ec:
         52:3c:fe:a7:9a:2e:47:67:1d:7d:4b:27:2e:3d:72:5b:66:18:
         64:ee:80:43:c8:19:ab:5e:51:bd:b3:bf:a2:50:07:59:d8:a3:
         cf:26:0b:3f:17:48:6b:c4:64:ca:be:dc:a1:35:d2:1b:60:8f:
         7d:9d:5a:2a:6d:97:41:e4:1e:2d:19:a3:05:3f:1b:70:bb:32:
         c0:9f:ee:8e:df:90:50:97:93:5f:0d:33:47:16:ff:56:6d:b2:
         8d:e9:3e:13:01:d2:77:35:12:f6:6f:d8:41:b6:40:8c:b4:96:
         89:27:03:cc:95:81:d0:7b:d1:82:08:a1:05:57:6b:ff:95:ce:
         a4:f3:f3:d5:bc:b5:8f:af:4c:fa:81:a2:2f:32:9e:e7:fc:7a:
         2c:ec:7f:dd:73:4e:48:16:0b:26:bb:12:24:ee:14:6a:fc:cb:
         61:f3:8a:97:68:34:ac:f6:05:62:0c:53:0d:8d:f3:2c:5c:78:
         4c:6e:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:08 2024 by rpki-client on console-ams.rpki-client.org