Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/12742b04-3c62-302c-a844-0e1fc03e34d6.roa
File:                     12742b04-3c62-302c-a844-0e1fc03e34d6.roa (raw, json)
Hash identifier:          uU6nAgIIWpvRJNSHs8Hl/gyZNsbJf4fw6lD6fd+Hb9Q=
Subject key identifier:   DF:54:89:77:34:50:E9:38:94:86:B2:BB:BF:AC:02:F6:2A:E0:11:74
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F43285847CA3F4517C422E097C9616100
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/12742b04-3c62-302c-a844-0e1fc03e34d6.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     8987
IP address blocks:        2605:4300:2c1a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:45:17:c4:22:e0:97:c9:61:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=57bfd847-f8c8-42b2-bca4-34172c65dc6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:72:b9:97:ef:09:57:ea:89:1f:7b:18:bf:
                    22:69:77:b3:b9:f6:3c:70:f0:d8:7e:a0:50:bb:27:
                    ec:94:68:37:38:9c:2c:63:3d:8d:63:33:f5:aa:3f:
                    c4:ee:11:00:fa:a6:40:1b:f2:bc:7d:ca:8a:d5:03:
                    35:22:dc:0d:0e:d3:8e:17:ce:8c:c5:e7:f3:74:d8:
                    03:b2:2d:45:58:69:4b:cb:d0:08:9a:f3:c6:38:ee:
                    d8:9e:61:ff:74:2e:f3:bb:8a:70:cf:b2:00:aa:0b:
                    a3:be:02:a7:ed:91:3c:6c:be:46:31:8f:5f:ac:ae:
                    de:72:61:32:18:b8:64:c9:5c:14:c6:87:14:e4:fa:
                    76:0b:eb:d0:98:e8:7e:f6:0a:67:d4:bb:9f:a4:05:
                    84:17:01:9f:95:56:d5:5b:f3:4a:c5:53:64:2f:57:
                    a7:64:7a:01:09:95:1b:38:87:0f:f7:1e:fc:ad:23:
                    5a:9e:b2:8e:a3:c7:c9:67:c6:ff:02:e4:5f:44:ed:
                    56:f9:02:d2:b2:d4:13:6f:7b:1e:b6:61:4b:8a:91:
                    9a:07:32:91:9a:99:5b:38:19:57:17:3d:56:4c:a7:
                    ef:30:0b:9b:77:3e:06:43:28:3f:5e:98:4a:40:b8:
                    a4:3a:47:64:66:b3:33:70:72:68:e0:51:dd:6f:67:
                    b8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:54:89:77:34:50:E9:38:94:86:B2:BB:BF:AC:02:F6:2A:E0:11:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/12742b04-3c62-302c-a844-0e1fc03e34d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:07:eb:8d:ab:20:93:e9:95:1a:a4:67:cc:6b:4f:c8:02:3e:
         17:db:f3:a1:26:5f:98:fc:6a:86:80:9f:82:7a:b3:cc:2e:86:
         33:13:bd:fa:40:45:e0:8f:b0:9d:2a:bc:03:be:3a:95:e9:cb:
         7a:7c:36:0e:aa:09:00:0c:2a:34:9d:d6:83:54:59:ec:5f:ea:
         2f:0c:79:dd:bc:32:7b:72:0e:6a:16:df:8c:ed:57:4a:17:12:
         78:3c:c7:fe:62:16:f7:e8:bc:14:81:88:1d:57:91:1c:fe:55:
         d9:51:25:0d:db:e8:e2:87:d4:85:8e:12:ab:4d:e1:41:3d:f4:
         91:d2:24:dd:93:10:7c:4d:67:5d:cb:a7:17:58:4f:db:df:38:
         bf:c2:f2:ea:49:53:97:4e:44:a2:72:03:93:94:38:2a:59:05:
         79:ee:5b:fc:28:d5:07:98:9d:77:1a:3f:a8:78:15:5c:30:23:
         7e:98:fa:1d:a9:ae:09:45:1f:fd:68:e6:8f:a8:87:89:c1:c3:
         6b:72:31:0a:92:8a:9c:0f:84:01:61:34:22:d3:62:f3:47:19:
         e2:31:ac:d2:b5:96:01:b6:22:64:90:03:d3:b0:26:16:75:29:
         7d:56:0f:45:e9:01:27:53:56:20:20:1b:e6:a4:c5:64:f9:36:
         c4:50:2c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:02:35 2024 by rpki-client on console-ams.rpki-client.org