Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/57b14815-50a7-3824-83ba-cfe0c8e10231.roa
File:                     57b14815-50a7-3824-83ba-cfe0c8e10231.roa (raw, json)
Hash identifier:          cEtrdDKvZSPHadkgkeUwuoQZmQRpuXXcgbrLDpF5cSU=
Subject key identifier:   9A:8A:26:34:CD:04:4E:7D:2D:8A:83:17:61:12:92:39:24:4E:C6:E0
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F432858471610529ECE387FB934883D00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/57b14815-50a7-3824-83ba-cfe0c8e10231.roa
Signing time:             Tue 03 Sep 2024 01:00:31 +0000
ROA not before:           Tue 03 Sep 2024 01:00:31 +0000
ROA not after:            Mon 02 Dec 2024 02:00:31 +0000
asID:                     8987
IP address blocks:        2605:4300:2c18::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:16:10:52:9e:ce:38:7f:b9:34:88:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Sep  3 01:00:31 2024 GMT
            Not After : Dec  2 02:00:31 2024 GMT
        Subject: CN=837f92cc-bc26-4055-bc64-01e3f00976b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:cb:fe:e2:5c:d3:2e:8d:51:19:2c:1f:93:
                    ae:92:3e:81:f9:73:24:eb:b1:ef:c0:9e:1f:6e:58:
                    78:6d:a6:e8:fb:c9:6d:bb:6a:ee:f3:6f:7e:22:b0:
                    d4:d8:fe:56:54:4d:b4:aa:46:15:67:31:8d:86:4f:
                    18:52:a0:67:16:8e:4e:2e:12:e8:be:c1:1d:c3:f9:
                    34:c9:f4:4e:1c:49:a9:77:29:86:63:35:b3:94:61:
                    11:36:76:e6:cd:0a:53:a1:79:b0:55:c8:bb:93:f1:
                    83:c1:29:11:71:12:c2:fb:ac:10:c7:7e:aa:94:75:
                    d5:bf:1c:4c:af:9a:f6:80:8f:d8:c8:63:56:e8:48:
                    65:40:e3:df:fc:61:6f:83:f9:e5:a6:70:3d:71:7a:
                    f0:e8:73:c2:e7:2e:d3:78:dd:7b:ba:00:51:49:64:
                    fd:1d:52:47:b6:86:7c:77:0e:8b:44:05:7c:e8:b1:
                    ba:ff:73:40:c0:c4:3c:6f:4a:4e:76:3f:95:89:20:
                    f5:de:76:f2:f0:76:cc:4b:c5:6b:a6:a3:b5:a7:01:
                    bb:55:55:59:a3:1d:ad:7b:63:07:f8:a5:a2:6f:46:
                    15:a1:3a:ec:01:62:20:61:01:33:78:7d:b2:18:90:
                    1c:c0:22:64:05:41:55:23:7a:3f:01:2b:80:a8:6a:
                    5c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8A:26:34:CD:04:4E:7D:2D:8A:83:17:61:12:92:39:24:4E:C6:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/57b14815-50a7-3824-83ba-cfe0c8e10231.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c18::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:36:a8:9d:1f:0c:3c:91:a5:15:c4:32:7f:8a:e9:ea:b7:b0:
         5a:69:7f:7c:5b:5e:3e:d4:fe:7a:73:17:9b:c0:4a:2d:d6:27:
         c3:49:4b:d7:50:d0:91:6b:f6:80:00:95:a2:2d:c0:86:d7:fe:
         6c:8e:77:1d:1e:d8:9f:c3:a8:16:88:17:6c:e5:35:4f:34:f5:
         1e:40:db:bd:ad:e6:da:1e:f2:d8:36:aa:32:61:f9:6b:3f:4f:
         e6:9e:3b:de:e5:44:c4:3d:47:20:f7:a3:a1:52:81:8e:b7:f9:
         76:27:26:d0:38:b8:2e:9b:10:f1:13:54:f9:eb:7f:c3:7a:55:
         f4:ca:1f:f9:e3:46:f2:23:7a:52:7b:99:72:9a:7c:85:25:d4:
         25:1a:05:74:57:e2:50:77:ff:0f:84:7d:dd:de:46:d4:d4:14:
         8e:e2:35:4e:d7:fc:14:b9:24:fa:df:35:ba:4f:30:75:3d:a1:
         3d:6e:12:bb:6a:68:5d:16:39:95:d0:9c:61:34:a0:22:eb:7c:
         08:c2:a8:cf:6b:fd:4c:d0:8a:de:0e:36:b9:82:f0:05:80:af:
         b8:c6:c9:f6:2b:29:ee:ce:de:dd:6e:b7:b2:ba:93:c5:7f:b7:
         58:9d:4f:22:6e:25:2c:95:31:52:46:ff:1d:1f:32:4e:dd:dc:
         17:38:83:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:49 2024 by rpki-client on console-fra.rpki-client.org