Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/7c9e3d2a-e6e2-381c-b17a-7d09b62fcc80.roa
File:                     7c9e3d2a-e6e2-381c-b17a-7d09b62fcc80.roa (raw, json)
Hash identifier:          oq5PF7tJp5+FdVbj3xoSen4Mv5veXKPKW+Er7kv2VQI=
Subject key identifier:   98:B6:13:06:B8:C7:0C:52:52:08:8C:3B:07:F7:01:C2:F5:92:13:DA
Certificate issuer:       /CN=f8ffd4ba-11b7-4c10-9a14-2850086d1269
Certificate serial:       010D0C9F43285847B696B43BF7857CF5E386A880
Authority key identifier: E9:4F:AA:B0:4A:25:49:EF:B7:29:CB:C7:75:2F:28:44:8D:4C:EC:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/7c9e3d2a-e6e2-381c-b17a-7d09b62fcc80.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     10546
IP address blocks:        2605:c8c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:b4:3b:f7:85:7c:f5:e3:86:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ffd4ba-11b7-4c10-9a14-2850086d1269
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=77f6ed27-a057-40f8-8c91-cc54f6b5ccd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:68:e7:73:23:ec:ba:86:b2:8d:be:f8:68:
                    cf:d4:20:c4:3e:80:a5:9e:14:e4:8e:61:0e:51:ac:
                    6a:bc:35:7b:36:6c:48:7d:a6:df:dd:a1:d3:21:c2:
                    e0:96:be:7b:db:1d:61:9a:49:78:6e:40:26:36:b7:
                    e3:53:ee:b6:9d:f5:ce:0e:11:12:4f:61:b4:9b:74:
                    2e:f5:16:07:38:65:d8:d1:8b:cc:02:33:24:04:ad:
                    0f:04:26:38:05:74:db:87:e6:d4:c1:f5:ee:73:d5:
                    91:4e:61:54:15:10:a4:fe:4e:2a:ae:f6:ca:be:94:
                    9a:5b:9c:1d:b7:67:89:6d:01:c4:77:a4:bb:a2:2c:
                    7a:b1:db:6f:4a:93:d4:ac:4d:fa:c8:57:aa:dd:e2:
                    09:ff:67:b7:8c:04:9c:ea:e6:3b:d6:b9:fa:e5:29:
                    a3:fd:68:77:9d:45:a6:fc:24:7e:83:4a:7f:be:3b:
                    79:26:82:4e:39:20:b2:79:ad:2b:03:40:a0:50:e7:
                    df:29:7b:fd:6b:7f:ab:c6:06:5a:6f:24:95:85:7b:
                    5a:c5:19:3c:1d:76:23:cb:fd:4a:c9:e4:70:6c:14:
                    c8:56:4e:0a:33:6a:2d:c4:30:5f:fe:b1:a8:fc:fd:
                    fb:c0:d0:34:24:82:6e:6b:af:48:54:ec:b3:fc:b5:
                    a2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B6:13:06:B8:C7:0C:52:52:08:8C:3B:07:F7:01:C2:F5:92:13:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/7c9e3d2a-e6e2-381c-b17a-7d09b62fcc80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.crl

            X509v3 Authority Key Identifier:
                keyid:E9:4F:AA:B0:4A:25:49:EF:B7:29:CB:C7:75:2F:28:44:8D:4C:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c8c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:70:45:0e:73:4a:b9:47:fc:53:cf:d1:3c:34:33:fa:70:bf:
         85:7b:8f:19:6c:f1:65:35:47:d3:fb:50:ac:52:d9:be:4c:86:
         03:0e:df:16:bd:8c:84:3d:18:a1:37:1c:1b:e9:c6:89:45:71:
         bf:4a:85:bd:53:e7:6f:01:79:b1:b2:5b:f1:bd:c8:08:8c:47:
         c2:db:d2:32:c8:8e:ab:4b:a8:e1:05:83:31:e1:32:66:78:2e:
         9e:77:e2:89:30:0b:ed:c6:00:9e:79:23:70:d0:8d:fc:72:23:
         59:bf:53:8a:2b:50:52:fe:ce:de:ea:91:f8:11:73:24:65:99:
         4e:d3:5d:a4:fd:cf:0e:27:f0:52:b3:9c:26:85:91:0b:fc:19:
         02:7a:43:c9:b2:b5:eb:f3:64:e3:e6:1f:3e:20:37:0f:d5:3a:
         2c:5e:bd:00:6d:d5:9b:95:7b:de:ba:b0:ae:0e:3d:55:41:c1:
         18:15:4c:5e:66:f3:d9:61:b0:04:28:87:f9:cd:01:3b:91:22:
         dc:fa:4d:98:63:59:32:f0:00:0c:6d:a1:42:92:48:ad:b5:74:
         e4:8a:fe:39:74:28:12:43:38:ca:53:60:b9:f9:f5:99:a8:5b:
         a9:19:fd:d6:07:08:15:c4:4d:09:2a:cb:9b:b9:2f:2a:78:38:
         ff:b0:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:23 2024 by rpki-client on console-ams.rpki-client.org