Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa
File:                     2953b610-a434-3572-bb79-1dcab516be48.roa (raw, json)
Hash identifier:          XkquYYSUl9OywrwJaT3o3jjQ3a0xFCGfLG8O6YDtwcQ=
Subject key identifier:   07:53:0C:BF:CB:D6:9F:64:07:91:25:51:AF:8E:FA:7B:38:0C:EB:31
Certificate issuer:       /CN=c939804d-392f-4714-a1f1-89eb4660daf7
Certificate serial:       010D0C9F43285847213B0B3480ADA35DA22309E0
Authority key identifier: C6:FC:D1:09:1B:FA:5D:0F:A6:65:0C:1C:14:CA:66:B3:B9:99:A4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     11990
IP address blocks:        2605:fa80::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:0b:34:80:ad:a3:5d:a2:23:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c939804d-392f-4714-a1f1-89eb4660daf7
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=12b91d38-037f-490b-94bf-2d3519b7e9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ef:5c:67:0b:cc:70:02:33:df:47:48:31:cd:
                    a0:8f:cc:a7:46:42:05:b5:21:26:86:ae:eb:44:cc:
                    e2:43:b2:69:a1:6e:37:0f:19:9f:dc:75:20:cf:64:
                    fa:51:d9:dd:53:f2:04:02:35:12:c7:70:55:87:59:
                    6f:27:c5:c7:c2:e3:16:83:48:44:f9:22:40:86:af:
                    7d:c3:82:5b:95:35:68:7e:a0:f2:ce:4d:e3:3f:95:
                    b6:a8:0c:02:6b:be:67:7a:d7:13:02:c2:52:cf:db:
                    5c:fd:20:ca:7e:c1:5f:b2:a6:69:18:a5:09:5e:ab:
                    37:41:8f:f9:9c:7c:11:2c:91:96:73:5f:16:05:52:
                    e5:3d:28:db:41:a7:a0:11:f7:3d:dd:b9:53:b4:80:
                    17:a1:e2:fe:b5:67:97:2d:dc:40:69:53:1a:d6:99:
                    df:67:68:49:28:65:a6:1c:24:f2:64:95:92:7e:f8:
                    f8:59:7a:c0:7d:bf:7e:63:51:b1:d8:b2:1b:b2:1a:
                    c2:8a:f3:84:7f:d5:22:67:32:95:b0:e0:ef:f3:56:
                    e3:61:6c:ad:af:4b:cc:ff:9e:ad:15:61:ee:1a:b8:
                    a5:54:fb:23:67:7c:aa:5b:56:0b:55:e0:e8:8e:88:
                    f9:88:f9:60:df:e2:96:0f:2d:2e:de:53:dc:3f:64:
                    a1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:53:0C:BF:CB:D6:9F:64:07:91:25:51:AF:8E:FA:7B:38:0C:EB:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.crl

            X509v3 Authority Key Identifier:
                keyid:C6:FC:D1:09:1B:FA:5D:0F:A6:65:0C:1C:14:CA:66:B3:B9:99:A4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fa80::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d4:5e:05:34:20:2e:a1:58:18:73:68:cf:47:5c:7a:46:3b:
         dd:91:57:bb:27:fa:74:23:a1:88:0f:39:f5:31:19:a6:86:64:
         dd:e1:b6:3d:58:9a:f2:34:61:01:a2:72:71:c0:7d:1f:40:b3:
         63:a5:2b:11:29:9b:35:49:64:24:81:d7:01:41:77:fa:71:0b:
         f4:42:e2:18:52:af:02:d6:f8:aa:13:a6:cb:2e:48:b3:5e:4d:
         a4:c0:90:85:a9:d8:9b:60:55:ac:34:9d:4a:a7:f8:19:62:4f:
         d5:0e:83:4e:b1:95:96:f7:f6:b9:b3:59:12:66:b2:71:c6:a0:
         30:d4:08:8a:48:ae:62:ae:a9:f8:79:1b:86:7c:48:7b:c5:28:
         cc:20:e4:21:7d:31:61:1f:c5:41:e7:a1:b9:4c:e6:98:2c:d4:
         1e:70:ba:c6:aa:16:71:c4:d3:0d:46:d0:10:e9:7b:70:7d:62:
         55:de:62:c1:f3:bc:0f:67:99:c1:da:cb:34:db:2d:8b:e3:5e:
         85:7e:c9:d0:62:24:95:66:9b:71:68:df:b7:06:6d:41:93:d3:
         41:2b:a7:c6:5f:14:68:5c:88:dc:be:f2:ce:07:91:3a:c5:34:
         16:48:09:c4:ae:2c:cc:57:33:82:34:9c:55:c4:77:d9:d0:f0:
         91:01:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org