Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc/27177726-03b0-3230-b784-8ac156c3d31d.roa
File:                     27177726-03b0-3230-b784-8ac156c3d31d.roa (raw, json)
Hash identifier:          STqRoaVS1iD0FS54OHntcCC4gm2OsK5RQ9Ls+dQufAg=
Subject key identifier:   5A:73:14:5A:E4:CF:BE:30:B7:30:25:60:DD:7C:F6:E7:AD:11:8E:B0
Certificate issuer:       /CN=adc7f503-0611-4e83-bbe0-29c68f153bcc
Certificate serial:       010D0C9F432858477BF66416070F93C33ADBB080
Authority key identifier: D5:3E:57:29:29:DA:34:80:00:32:EB:38:70:59:95:FA:94:E4:6C:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc/27177726-03b0-3230-b784-8ac156c3d31d.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     54945
IP address blocks:        2604:8480::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc/adc7f503-0611-4e83-bbe0-29c68f153bcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc/adc7f503-0611-4e83-bbe0-29c68f153bcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:64:16:07:0f:93:c3:3a:db:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adc7f503-0611-4e83-bbe0-29c68f153bcc
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=e87bb92b-c6c0-4f2e-8f16-48fe158660f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:79:e3:24:4a:c3:f1:c2:dc:56:54:02:d0:d0:
                    5a:9b:19:90:b1:2a:46:53:55:8d:7a:8d:cd:29:6e:
                    d7:56:1d:d6:72:b2:87:0d:6e:ef:35:c2:6c:8b:9f:
                    1d:c5:42:62:56:1b:82:00:d6:84:dc:5a:50:10:9a:
                    84:a0:16:76:e5:97:c0:a2:19:86:7c:0e:dd:f9:10:
                    3e:be:55:57:cf:f2:b0:94:26:71:ec:a8:9e:35:41:
                    66:2f:e8:99:3f:38:8d:a1:a1:d5:82:52:45:25:2a:
                    f5:4e:3d:10:e6:ce:4a:75:b7:0b:36:fc:eb:50:56:
                    07:c0:59:93:ba:7f:25:7f:66:59:9b:6b:ce:66:68:
                    73:40:e3:9a:5d:44:fe:78:ca:95:93:0b:7c:5d:2a:
                    e6:b4:90:b9:1d:11:76:26:be:6f:6a:b7:af:c0:b5:
                    14:c1:6a:f4:b4:26:fe:59:67:e8:08:41:c2:9d:0c:
                    b1:14:d7:1f:e4:fe:02:21:e9:7c:1b:47:28:7d:16:
                    d9:a0:3d:9b:84:c4:2e:e5:91:b6:1d:fe:a9:18:63:
                    43:63:14:8b:65:ba:c0:38:ac:bc:c2:e7:8f:e4:98:
                    ee:84:39:59:20:bf:ea:e8:fd:f2:6f:eb:26:62:6f:
                    fc:f2:6b:37:19:71:09:f3:e0:de:97:89:fc:6d:40:
                    98:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:73:14:5A:E4:CF:BE:30:B7:30:25:60:DD:7C:F6:E7:AD:11:8E:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc/27177726-03b0-3230-b784-8ac156c3d31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc/adc7f503-0611-4e83-bbe0-29c68f153bcc.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3E:57:29:29:DA:34:80:00:32:EB:38:70:59:95:FA:94:E4:6C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:57:90:e2:73:9f:ad:ad:29:c9:88:cb:f4:56:e3:11:40:27:
         78:11:9d:7f:b8:84:07:1f:a1:cb:14:ae:33:77:67:9b:5e:23:
         23:74:b5:9c:5c:0b:8b:4e:e3:42:bf:f3:61:9b:2c:4e:17:64:
         0d:4f:bd:78:94:00:b3:7e:a3:d3:a0:b1:e1:78:2f:20:ce:f3:
         52:0e:a2:91:ab:50:65:82:b1:35:f5:ec:31:9b:90:15:57:b2:
         7f:2d:b0:2f:5e:9d:32:a4:0c:62:56:9d:66:52:03:60:fc:0f:
         b3:41:ee:3c:e9:1e:f3:91:d9:85:12:a6:16:da:3e:32:01:5b:
         81:53:32:e0:79:de:e2:a7:d4:ee:98:04:1d:28:f7:06:b2:dc:
         7f:77:85:c0:79:17:af:1e:76:ec:e7:0a:69:b6:38:e4:1e:5d:
         17:89:ec:8d:20:cf:38:d9:7a:71:e8:6b:da:a9:e8:d2:3e:0d:
         f7:1c:03:46:6e:5e:66:f9:ea:f0:1e:18:a6:14:df:36:d4:98:
         15:55:23:b9:65:3c:9f:a7:3e:63:0e:ee:16:da:4f:eb:42:f3:
         41:39:7f:8b:1e:1b:a3:c8:b3:9b:4f:79:cf:58:7a:02:b7:05:
         b4:0c:27:fa:bb:54:3d:be:50:62:53:e4:cf:b3:93:bf:35:15:
         6d:e4:28:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:43 2024 by rpki-client on console-fra.rpki-client.org