Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/060e6cbc-9a7a-33d4-8a1f-f2bab3aea382.roa
File:                     060e6cbc-9a7a-33d4-8a1f-f2bab3aea382.roa (raw, json)
Hash identifier:          dt5N6AsQ+pXWUfKXbXm+OmYm/j2rUwAlIHfBN0NJDTc=
Subject key identifier:   88:8E:84:A6:5D:72:20:36:1A:59:6A:CA:23:2C:02:03:33:5C:0A:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FFF1287F23E3AF7F7E100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/060e6cbc-9a7a-33d4-8a1f-f2bab3aea382.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        2601:3c8:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:ff:12:87:f2:3e:3a:f7:f7:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=241ae57b-b568-4d10-ab2b-dca0029adea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4e:51:63:57:55:93:4e:de:e9:a6:76:03:8c:
                    98:bf:94:96:d0:27:e3:96:04:4e:ff:6a:18:91:50:
                    53:5e:0b:a6:7a:0b:0d:e4:f6:6f:7c:16:e7:ab:6c:
                    aa:8b:71:85:14:68:aa:36:c6:1b:25:6f:7d:95:8d:
                    19:ad:b8:bc:57:3b:96:d9:b9:ef:83:31:11:66:05:
                    de:65:71:ac:82:20:9e:c1:46:87:9d:35:43:c3:b0:
                    d1:d2:f8:16:b5:86:e1:20:92:de:f5:98:c5:e7:16:
                    a2:6d:3a:f7:26:be:2a:d9:bb:04:18:49:93:d2:61:
                    b7:28:6a:5f:8c:3f:2d:6d:da:9f:f0:b7:6e:50:93:
                    0d:53:35:78:c8:e1:69:f9:8e:8e:db:30:4a:f4:74:
                    87:99:79:2d:79:f8:6d:24:f1:58:8b:c0:62:0f:78:
                    35:89:08:de:b9:d6:50:a5:5a:41:48:e7:e7:0c:4d:
                    06:94:8e:e5:3a:1a:5a:6e:4c:da:1f:82:2d:46:0a:
                    95:7e:a2:e8:06:25:4a:8e:04:da:7a:5f:03:27:b0:
                    a9:a0:b9:81:50:02:52:1e:58:a8:74:67:ec:a2:e8:
                    a5:66:25:d5:de:c0:7b:d5:f8:c1:93:70:e1:5d:4f:
                    a5:8f:d3:4a:54:1c:6d:98:d8:68:ff:fe:59:06:c5:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8E:84:A6:5D:72:20:36:1A:59:6A:CA:23:2C:02:03:33:5C:0A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/060e6cbc-9a7a-33d4-8a1f-f2bab3aea382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:3c8:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ca:00:bb:65:b8:2b:b2:60:dd:18:e0:d6:fd:36:44:1b:3f:
         71:ce:40:b1:5d:02:4a:34:4f:62:bc:47:e3:3a:78:a9:6e:f1:
         13:48:89:bb:22:25:27:5f:7d:df:43:50:6a:1d:ef:cf:ea:eb:
         74:a7:16:52:f2:2b:d4:d1:61:a2:db:c9:63:11:b5:23:bf:6e:
         21:a1:c9:d1:3a:e8:8f:e0:99:17:ce:d0:3f:8e:a7:76:88:36:
         04:c5:7f:00:bc:e4:fe:3b:16:6b:6e:ac:3e:27:a8:e3:0e:0d:
         43:22:bd:79:49:bf:37:72:40:08:74:44:ae:ce:2a:2b:5e:8c:
         9e:8d:53:38:a4:58:7d:8d:3c:6f:10:f2:78:09:d1:c4:a0:aa:
         97:e4:fa:9a:27:c4:14:5f:52:d0:b4:29:4a:ae:ed:01:3b:d2:
         b4:91:b6:b9:dc:59:62:ea:a5:9b:33:46:c6:d1:9a:34:15:fb:
         66:ee:7e:6c:4a:7f:5c:ce:1a:f1:61:ea:3f:00:d0:d1:1b:65:
         85:55:6b:4a:12:63:32:42:70:3f:57:04:02:99:d0:ba:be:ed:
         88:37:c7:33:cf:7d:78:76:22:97:49:a0:3b:45:e5:84:98:b9:
         64:c2:b7:19:bc:ca:d7:c7:55:f2:b7:15:1f:34:43:6a:e7:a2:
         35:b3:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:51:18 2024 by rpki-client on console-ams.rpki-client.org