Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04667be6-dbfe-39b3-883b-8ceb088e9fd6.roa
File:                     04667be6-dbfe-39b3-883b-8ceb088e9fd6.roa (raw, json)
Hash identifier:          zcdZSOclNsigRHeElhwy/zwSMV5RyPY9hThZrSyWofQ=
Subject key identifier:   B0:EA:9E:69:3F:DE:97:56:F5:1A:66:80:4D:44:4E:24:A4:69:7B:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7F4382F82A0DB36818900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04667be6-dbfe-39b3-883b-8ceb088e9fd6.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        2603:300c:800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:f4:38:2f:82:a0:db:36:81:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=17d4afe6-dc6d-4532-9509-fef20db61759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d7:ae:0e:1a:99:cb:f6:fe:04:26:e9:4b:47:
                    9e:99:9c:9c:2e:f2:f8:5e:02:d8:6b:c1:2f:1d:54:
                    ac:91:4c:ca:95:40:8c:38:01:63:f0:73:dc:a2:30:
                    af:0b:a4:77:79:e8:ed:88:5a:5d:b6:4b:1c:88:4b:
                    18:c7:d5:20:6b:c7:da:84:b3:47:e3:15:ee:b7:61:
                    9d:59:89:02:26:71:1c:9d:f4:a9:29:0c:42:96:70:
                    b0:9b:56:77:e6:06:38:ba:fd:03:b9:92:f5:95:71:
                    30:e6:c7:fb:e3:a0:c8:c7:3d:99:b3:39:99:35:03:
                    f1:75:7b:5d:37:70:e2:8b:bc:d0:91:87:66:65:0f:
                    1b:8c:ea:ab:d3:c1:02:1a:e5:59:4e:17:3f:33:fb:
                    8e:bb:67:80:76:73:45:01:49:93:55:ed:81:c0:2e:
                    23:4a:4e:77:81:2d:7c:26:c3:1c:89:6d:c3:62:aa:
                    50:d9:66:ea:bc:1e:a9:29:78:6f:96:bd:6e:6c:32:
                    c1:a8:c8:c5:09:eb:40:3e:18:43:d9:b2:b5:2b:a2:
                    c7:ca:37:9b:b3:0a:a4:3f:cc:12:cc:49:ab:a0:7e:
                    44:b3:57:05:8c:94:10:fe:ac:18:ac:4b:e3:90:56:
                    5a:15:5b:26:07:a6:bd:21:70:7a:e7:0c:3c:db:8f:
                    a7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EA:9E:69:3F:DE:97:56:F5:1A:66:80:4D:44:4E:24:A4:69:7B:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04667be6-dbfe-39b3-883b-8ceb088e9fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300c:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3c:a4:5e:73:40:55:16:3f:89:de:da:62:c7:41:15:74:4e:
         c2:72:99:54:f7:1f:fe:23:c3:95:2f:7a:c2:da:8b:b0:96:1c:
         a4:dd:53:81:c7:6d:73:a7:71:fe:60:12:01:d6:84:4d:a4:51:
         72:2a:de:f9:21:23:c1:6b:cc:99:66:40:8d:1e:39:11:ab:71:
         3f:1f:52:4c:bd:a8:d8:b9:95:03:53:1b:8e:c1:bf:a8:14:94:
         ab:6b:b4:1f:f7:bd:18:a8:f3:13:68:ac:e0:81:6e:69:30:95:
         88:23:72:77:b5:95:1c:c6:2b:3f:ea:5b:f5:4c:ce:10:75:28:
         a5:bd:6b:d0:8e:2f:f3:0e:26:f4:55:35:b3:53:95:5f:35:a8:
         73:a1:29:19:6c:8c:d6:06:67:cc:72:bb:0f:c4:51:ba:e8:14:
         74:1c:31:4d:23:bb:8c:d0:02:e9:92:2b:c3:17:26:95:fe:3b:
         f0:94:46:bb:c1:36:0a:a1:2b:1e:9f:ae:e9:fd:9f:b3:9c:76:
         6e:82:8d:f6:4e:af:09:ff:2f:7e:44:f0:8e:d8:9f:a4:31:60:
         bd:07:36:82:ab:90:08:2a:50:46:da:0b:86:d0:0b:52:0e:bb:
         5d:3a:a3:e9:31:66:5d:13:16:e4:97:6a:96:fe:bf:03:2b:f0:
         78:c7:ab:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:29:33 2024 by rpki-client on console-fra.rpki-client.org