Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b7dcc27-30bd-331f-84b6-806c68575ff9.roa
File:                     2b7dcc27-30bd-331f-84b6-806c68575ff9.roa (raw, json)
Hash identifier:          oUS4DIMPVkL9XKADXuERpg59T4GP7Nc25XtjmeXJovg=
Subject key identifier:   CA:3D:29:41:AE:39:30:8A:F2:B1:82:10:DC:FA:10:92:EC:7A:44:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF860123A49955ED3E4F800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b7dcc27-30bd-331f-84b6-806c68575ff9.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        2603:3011:e00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:60:12:3a:49:95:5e:d3:e4:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=f71bf3d7-eeff-40a5-a358-3e45f967ee3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a8:17:84:f3:aa:9e:63:a7:ba:2b:13:3f:12:
                    e0:e2:d0:c8:1b:e1:94:4a:84:76:41:27:a5:c9:85:
                    4a:b0:48:90:d6:d9:16:0d:42:cb:29:4a:c5:fe:21:
                    48:62:bc:24:80:a4:9a:59:b9:98:2a:81:d9:57:0c:
                    56:a1:5e:f7:85:ea:12:6b:94:8e:9f:d9:5c:11:17:
                    39:61:f0:11:13:27:9c:f4:e5:a7:a0:cb:cb:fa:6b:
                    34:d9:80:e8:58:c7:2a:bf:8d:9e:e5:fd:92:b5:ec:
                    fb:5f:96:f5:20:9d:33:46:9c:d0:ba:be:cf:3b:55:
                    7a:90:0c:5b:ef:ca:92:00:eb:d0:76:6d:2d:35:96:
                    7a:d0:5c:f1:32:1a:d1:ad:9b:b0:18:e4:af:d5:b9:
                    3d:1c:5d:9e:16:7d:0a:61:cc:51:b7:19:d0:f0:e8:
                    fa:fd:04:84:de:da:34:aa:3b:93:c1:99:39:e7:2b:
                    dc:68:e2:51:79:07:40:63:24:30:42:b0:89:58:62:
                    ad:d2:50:80:c0:c9:c9:2e:21:b2:17:72:2d:80:b9:
                    a3:22:44:01:c6:5d:51:4c:fa:87:f1:33:a9:40:b4:
                    a8:2c:bd:62:ec:b6:6c:ce:90:3a:f8:e8:3c:88:73:
                    fa:ee:a1:ab:02:da:f9:13:89:e3:49:ce:c7:24:24:
                    39:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3D:29:41:AE:39:30:8A:F2:B1:82:10:DC:FA:10:92:EC:7A:44:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b7dcc27-30bd-331f-84b6-806c68575ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3011:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d5:b0:01:7b:89:de:b6:96:c1:0c:fd:09:65:90:e5:39:fd:
         1b:dc:ca:4e:7b:37:2b:4f:a7:0c:eb:dd:24:9f:bf:87:74:eb:
         25:27:d2:70:86:c7:5c:b1:18:0e:db:a6:29:3b:4e:24:3c:ea:
         ee:d4:cb:47:fd:e5:90:a8:f8:8f:72:c0:df:c7:85:27:01:6b:
         d3:ee:d3:19:0a:68:18:1d:52:66:1d:5a:f4:a0:80:d1:07:a4:
         0e:b3:c3:9f:ad:e7:74:e7:c3:e7:bc:76:fb:cc:0d:e7:3f:c0:
         43:a9:7f:ed:5a:00:93:73:d1:99:d4:29:4b:83:ec:f1:1b:ee:
         6c:52:75:71:05:76:28:a1:f0:c7:ba:89:19:ae:18:d8:bc:a3:
         e7:be:93:2f:ab:fd:3f:16:e9:fb:1b:99:4a:c2:9a:78:85:7e:
         5d:8f:85:2e:17:ef:88:bd:be:1c:ec:4a:35:8a:29:04:62:9c:
         00:ff:06:79:2f:01:f7:69:0a:0f:1b:4f:bb:4e:4d:9b:2e:dd:
         43:b2:95:ea:c6:b3:f9:41:a2:f0:cd:32:c5:50:05:5b:df:47:
         63:a3:45:de:15:82:9f:a1:33:bd:15:bf:fc:1e:7c:0c:54:45:
         8f:b2:89:c2:34:c3:13:a1:a2:02:83:a8:ff:8b:6e:9e:b2:8b:
         78:04:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 12:50:10 2024 by rpki-client on console-ams.rpki-client.org