Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e54234f-f261-343d-b6e1-48b9723cb63e.roa
File:                     3e54234f-f261-343d-b6e1-48b9723cb63e.roa (raw, json)
Hash identifier:          QX1jUOyGIK8CHWPJLLab5drX2ocj0Svdi/C+SzHWris=
Subject key identifier:   4A:A9:87:39:FA:7F:D2:ED:79:01:9F:AA:08:A4:CC:EE:EB:D9:53:DD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB88189866067195D5B3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e54234f-f261-343d-b6e1-48b9723cb63e.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        2603:3016:1d00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:88:18:98:66:06:71:95:d5:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=bc026055-dbd5-4ce6-a5a5-cd3f97134279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:1f:ab:0d:0a:e6:93:07:a1:56:21:d4:58:
                    ed:06:22:ea:36:c1:00:3b:51:77:6a:1b:36:5e:67:
                    df:57:02:dc:12:ac:29:21:c1:da:61:a2:64:cd:30:
                    41:79:93:b3:df:fd:48:c0:63:22:ce:e3:78:63:ea:
                    45:e7:b3:b0:da:57:a8:4a:e3:af:39:cd:98:fe:38:
                    c7:93:5e:c6:83:de:68:9d:7a:ef:b4:ee:14:a3:e0:
                    c5:0f:4c:92:43:88:70:82:9a:c5:ec:20:dc:f8:db:
                    3b:9c:cb:00:58:67:b2:85:9f:ee:0f:1b:cf:2f:c8:
                    71:b0:ea:22:11:65:ed:76:b7:79:22:29:34:46:ec:
                    84:b2:6b:dc:3d:64:c6:69:b7:9f:80:c5:82:c7:25:
                    0a:fa:12:30:c4:dc:1d:af:35:d9:a4:6f:95:a0:b9:
                    a6:36:f9:ed:5b:f3:b3:78:a0:3d:54:9c:91:65:3d:
                    b2:22:3b:e7:9d:29:37:38:2a:fe:35:df:1d:57:ee:
                    95:07:f3:76:5f:f2:c5:27:b7:cc:7f:c4:7c:30:d3:
                    ec:ba:b0:1d:e3:af:57:33:5e:0a:10:cc:03:b5:36:
                    7b:b7:10:fc:08:09:b2:3c:0f:13:c5:1b:ef:0d:3a:
                    dc:c5:69:26:46:fb:be:e1:80:f0:b8:dd:e6:ee:2d:
                    a7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A9:87:39:FA:7F:D2:ED:79:01:9F:AA:08:A4:CC:EE:EB:D9:53:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e54234f-f261-343d-b6e1-48b9723cb63e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3016:1d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:30:f4:d5:21:7d:0a:3b:84:ca:05:f9:ea:0a:5f:e7:2a:9e:
         5c:32:0c:51:80:1a:3c:3c:a9:cd:8c:bb:b9:aa:ca:82:72:46:
         da:fb:a5:96:30:5e:f2:a3:5c:0f:8b:e1:53:37:1d:e4:3c:c8:
         3b:aa:ee:b4:67:d8:6b:ad:d2:13:38:cf:73:78:90:b7:85:73:
         4c:60:be:39:e6:82:69:c5:a3:b0:43:df:8e:40:e9:50:8f:72:
         95:27:83:ab:96:df:2f:60:d7:80:aa:d1:1b:3c:0e:2d:af:33:
         a2:aa:34:97:e3:8e:3c:37:97:54:07:60:a7:c9:43:82:fb:23:
         fd:74:bf:9a:fa:18:16:c8:64:23:07:8d:4a:8e:2e:f7:65:5e:
         e7:85:bb:5b:ee:25:00:ef:c8:bb:b4:44:5a:b8:47:f5:e7:f0:
         03:60:7f:e5:f4:c6:44:d6:89:56:b7:b7:f8:2b:d1:29:64:e0:
         e3:42:35:31:94:53:d1:bb:33:f4:e9:8d:7e:ce:77:84:af:72:
         26:6a:78:7c:ce:a0:1b:c5:7e:1a:46:9b:6f:ad:d6:dc:18:3a:
         3f:ab:bf:db:8e:54:6c:22:77:76:f5:93:77:66:c0:93:23:c1:
         45:4b:35:91:22:0f:de:0b:02:1d:b2:7c:2c:53:bf:76:bd:a3:
         56:71:e6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 12:53:35 2024 by rpki-client on console-ams.rpki-client.org